Search NASA⌕ Search

SEARCH · Search NASA

Results for “consistency checking”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 235 records · Page 13

Real-Time System Verification by Kappa-Induction

We report the first formal verification of a reintegration protocol for a safety-critical, fault-tolerant, real-time distributed embedded system. A reintegration protocol increases system survivability by allowing a node that has suffered a fault to regain state consistent with the operational nodes. The protocol is verified in the Symbolic Analysis Laboratory (SAL), where bounded model checking and decision procedures are used to verify infinite-state systems by k-induction. The protocol and its environment are modeled as synchronizing timeout automata. Because k-induction is exponential with respect to k, we optimize the formal model to reduce the size of k. Also, the reintegrator's event-triggered behavior is conservatively modeled as time-triggered behavior to further reduce the size of k and to make it invariant to the number of nodes modeled. A corollary is that a clique avoidance property is satisfied.

Pike, Lee S.↗

XTCE GOVSAT Tool Suite 1.0

The XTCE GOVSAT software suite contains three tools: validation, search, and reporting. The Extensible Markup Language (XML) Telemetric and Command Exchange (XTCE) GOVSAT Tool Suite is written in Java for manipulating XTCE XML files. XTCE is a Consultative Committee for Space Data Systems (CCSDS) and Object Management Group (OMG) specification for describing the format and information in telemetry and command packet streams. These descriptions are files that are used to configure real-time telemetry and command systems for mission operations. XTCE s purpose is to exchange database information between different systems. XTCE GOVSAT consists of rules for narrowing the use of XTCE for missions. The Validation Tool is used to syntax check GOVSAT XML files. The Search Tool is used to search (i.e. command and telemetry mnemonics) the GOVSAT XML files and view the results. Finally, the Reporting Tool is used to create command and telemetry reports. These reports can be displayed or printed for use by the operations team.

Rice, J. Kevin↗

Acquisition of and Access to Research Omics Data

Omics data are essential for understanding the myriad and complex effects of space environments on humans. To assure maximum benefit from these kinds of data, the NASA Human Research Program Data Management Plan stipulates that human omics data should be archived within and accessed through the NASA Life Sciences Portal (NLSP). The NLSP has the capability to acquire and provision access to omics (and other kinds of) research results for individual and ad-hoc groups of subjects at the direction of institutional review boards, or other authorizing bodies or individuals, per institutional, program and investigation-specific policies and procedures. However, because some single-subject omics data, like CT scans and other kinds of large, complex biomedical data, could be used to identify heretofore unknown risks to the subject’s health, or, in certain cases, be used to identify a subject, NASA Policy Directive 7170.1 describes various policies regarding the management of and access to “research genetic testing” data, which includes many kinds of omics data. For example, NPD 7170.1 prohibits access to human research genetic data by NASA personnel who make employment decisions for the subjects from whom the data were obtained. To meet the objective of acquiring research omics data for NLSP in compliance with the policies in NPD 7170.1 and other applicable NASA policies, we designed NOMADS (the NLSP Omics Multimodal Acquisition of Data System), a new component that supports the transfer of large research data files, including research genetic testing data, using one of several different transfer mechanisms. The choice of mechanism is made by the submitter of the data, with guiding information from the system, and is likely to often be determined in large part by the nature and source location of the data. For example, for small files where the source data files are not already stored in a cloud storage system, users are likely to prefer to transfer their data to the NLSP via a web browser. Conversely, for large sets of files already organized and stored in a cloud storage system, users may opt for NOMAD’s cloud-to-cloud transfer method. All omics datasets targeted for the NASA Life Sciences Data Archive must pass a variety of quality checks to ensure data integrity and adherence to the standards defined by the LSDA Data Submission Guidelines (DSG) (see https://nlsp.nasa.gov/explore/lsdahome/datasubmit). These include requirements that data are consistent with open standards established by the omics community. Non-compliant data will not be accepted however archivists are available to advise submitters on how to revise data submissions and re-submit until compliance is achieved. Following compliance with the LSDA DSG, omics data next undergo a variety of additional quality checks to ensure the data meet omics community standards. Domain specific Omics data quality control tools and techniques are continually evolving and linked to the advancements in omics assays utilized and thus, the tools and techniques utilized by the LSDA for data quality control and validation will need to be sustained accordingly. All human omics data will be access controlled according to the policies described above, and requiring IRB approval for any additional access grants once the data are acquired (including access for analysis using the NLSP workspace tools).

Omics↗

Acquisition of and Access to Research Omics Data

Omics data are essential for understanding the myriad and complex effects of space environments on humans. To assure maximum benefit from these kinds of data, the NASA Human Research Program Data Management Plan stipulates that human omics data should be archived within and accessed through the NASA Life Sciences Portal (NLSP). The NLSP has the capability to acquire and provision access to omics (and other kinds of) research results for individual and ad-hoc groups of subjects at the direction of institutional review boards, or other authorizing bodies or individuals, per institutional, program and investigation-specific policies and procedures. However, because some single-subject omics data, like CT scans and other kinds of large, complex biomedical data, could be used to identify heretofore unknown risks to the subject’s health, or, in certain cases, be used to identify a subject, NASA Policy Directive 7170.1 describes various policies regarding the management of and access to “research genetic testing” data, which includes many kinds of omics data. For example, NPD 7170.1 prohibits access to human research genetic data by NASA personnel who make employment decisions for the subjects from whom the data were obtained. To meet the objective of acquiring research omics data for NLSP in compliance with the policies in NPD 7170.1 and other applicable NASA policies, we designed NOMADS (the NLSP Omics Multimodal Acquisition of Data System), a new component that supports the transfer of large research data files, including research genetic testing data, using one of several different transfer mechanisms. The choice of mechanism is made by the submitter of the data, with guiding information from the system, and is likely to often be determined in large part by the nature and source location of the data. For example, for small files where the source data files are not already stored in a cloud storage system, users are likely to prefer to transfer their data to the NLSP via a web browser. Conversely, for large sets of files already organized and stored in a cloud storage system, users may opt for NOMAD’s cloud-to-cloud transfer method. All omics datasets targeted for the NASA Life Sciences Data Archive must pass a variety of quality checks to ensure data integrity and adherence to the standards defined by the LSDA Data Submission Guidelines (DSG) (see https://nlsp.nasa.gov/explore/lsdahome/datasubmit). These include requirements that data are consistent with open standards established by the omics community. Non-compliant data will not be accepted however archivists are available to advise submitters on how to revise data submissions and re-submit until compliance is achieved. Following compliance with the LSDA DSG, omics data next undergo a variety of additional quality checks to ensure the data meet omics community standards. Domain specific Omics data quality control tools and techniques are continually evolving and linked to the advancements in omics assays utilized and thus, the tools and techniques utilized by the LSDA for data quality control and validation will need to be sustained accordingly. All human omics data will be access controlled according to the policies described above, and requiring IRB approval for any additional access grants once the data are acquired (including access for analysis using the NLSP workspace tools).

Omics↗

Solar sensor subsystems alignment check using solar scans for the Halogen Occultation Experiment

The alignment of a dual-axes sun sensor subsystem to a telescope having a multiple sensor subsystem is described. The sun sensor consists of two analog and one digital silicon detectors. The analog detectors are shadow mask type operating in the visible spectrum. The detectors are mounted for azimuth and elevation positioning of biaxial gimbals. The digital detector is a linear diode array that operates at a spectral position of 0.7 micron and is used for elevation positioning. The position signals correspond to relative angles between the sun sensor and the solar disk. These three detectors are aligned on an Invar structure which is mounted to a Cassegrain telescope. This telescope relays solar radiance to an eight channel detector subsystem operating in the infrared range from 2 to 10 microns. The test technique and results to check the boresight alignment of these two subsystems by scanning the solar disk will be reported. The boresight alignment for both the azimuth and elevation axes of the two detector subsystems is verified using this technique.

Jurczyk, S. G.↗

Space Tug Avionics Definition Study. Volume 5: Cost and Programmatics

The baseline avionics system features a central digital computer that integrates the functions of all the space tug subsystems by means of a redundant digital data bus. The central computer consists of dual central processor units, dual input/output processors, and a fault tolerant memory, utilizing internal redundancy and error checking. Three electronically steerable phased arrays provide downlink transmission from any tug attitude directly to ground or via TDRS. Six laser gyros and six accelerometers in a dodecahedron configuration make up the inertial measurement unit. Both a scanning laser radar and a TV system, employing strobe lamps, are required as acquisition and docking sensors. Primary dc power at a nominal 28 volts is supplied from dual lightweight, thermally integrated fuel cells which operate from propellant grade reactants out of the main tanks.

Source record↗

On-board attitude determination for the Explorer Platform satellite

This paper describes the attitude determination algorithm for the Explorer Platform satellite. The algorithm, which is baselined on the Landsat code, is a six-element linear quadratic state estimation processor, in the form of a Kalman filter augmented by an adaptive filter process. Improvements to the original Landsat algorithm were required to meet mission pointing requirements. These consisted of a more efficient sensor processing algorithm and the addition of an adaptive filter which acts as a check on the Kalman filter during satellite slew maneuvers. A 1750A processor will be flown on board the satellite for the first time as a coprocessor (COP) in addition to the NASA Standard Spacecraft Computer. The attitude determination algorithm, which will be resident in the COP's memory, will make full use of its improved processing capabilities to meet mission requirements. Additional benefits were gained by writing the attitude determination code in Ada.

Jayaraman, C.↗

Verification of a Byzantine-Fault-Tolerant Self-stabilizing Protocol for Clock Synchronization

This paper presents the mechanical verification of a simplified model of a rapid Byzantine-fault-tolerant self-stabilizing protocol for distributed clock synchronization systems. This protocol does not rely on any assumptions about the initial state of the system except for the presence of sufficient good nodes, thus making the weakest possible assumptions and producing the strongest results. This protocol tolerates bursts of transient failures, and deterministically converges within a time bound that is a linear function of the self-stabilization period. A simplified model of the protocol is verified using the Symbolic Model Verifier (SMV). The system under study consists of 4 nodes, where at most one of the nodes is assumed to be Byzantine faulty. The model checking effort is focused on verifying correctness of the simplified model of the protocol in the presence of a permanent Byzantine fault as well as confirmation of claims of determinism and linear convergence with respect to the self-stabilization period. Although model checking results of the simplified model of the protocol confirm the theoretical predictions, these results do not necessarily confirm that the protocol solves the general case of this problem. Modeling challenges of the protocol and the system are addressed. A number of abstractions are utilized in order to reduce the state space.

Malekpour, Mahyar R.↗

Realizability Checking of Requirements in FRET

Requirements formalization has become increasingly popular in industrial settings as an effort to disambiguate designs and optimize development time and costs for critical system components. Formal requirements elicitation also enables the employment of analysis tools to prove important properties, such as consistency and realizability. In this report, we present the realizability analysis framework that we developed as part of the Formal Requirements Elicitation Tool (FRET). Our framework prioritizes usability, and employs state-of-the-art analysis algorithms that support infinite theories. We demonstrate the workflow for realizability checking, showcase the diagnosis process that supports visualization of conflicts between requirements and simulation of counterexamples, and discuss results from industrial-level case studies.

Formal Requirements Elicitation Tool↗

Utilizing LANDSAT imagery to monitor land-use change - A case study in Ohio

A study, performed in Ohio, of the nature and extent of interpretation errors in the application of Landsat imagery to land-use planning and modeling is reported. Potential errors associated with the misalignment of pixels after geometric correction and with misclassification of land cover or land use due to spectral similarities were identified on interpreted computer-compatible tapes of a portion of Franklin County for two adjacent days of 1975 and one day of 1973, and the extents of these errors were quantified by comparison with a ground-checked set of aerial-photograph interpretations. The open-space and agricultural categories are found to be the most consistently classified, while the more urban areas were classified correctly only from about 43 to 8% of the time. It is thus recommended that the direct application of Landsat data to land-use planning must await improvements in classification techniques and accuracy.

Gordon, S. I.↗

Space station resistojet system requirements and interface definition study

Preliminary resistojet design requirements were established based on initial technical requirements imposed by the results of NASA and Rocketdyne studies. The requirements are directed toward long life, simplicity, flexibility, and commonality with other space station components. The resistojet assembly is comprised of eight resistojets, fluid components downstream of the waste fluid storage system, a power controller, structure, and shielding. It consists of two identical subassemblies, one of which is redundant. Each subassembly consists of four 500-W resistojets, series redundant latch values, a power controller, a water vaporizer, two pressure regulators, filters, check valves, disconnects, fluid tubing, and electrical cables. All components are packaged at the end of the stinger aft of the JEM and Columbus modules. Different flow and power control methods were studied. A constant inlet pressure and a two-power setting controller were tentatively selected based on simplicity and reasonably high specific impulse for the range of waste gas compositions that are anticipated. The constant pressure is supplied by pressure regulators. The two set point power control includes individual power supplies to each resistojet heater and water vaporizer. An embedded data processor, a multiplexer-demultiplexer, and a network interface unit that are standard space station components are included in the power controller. The total dry weight of the resistojet assembly is approximately 172 lb. The total cost for design, development, test, evaluation, qualification, and flight hardware is estimated to be $16 million.

Heckert, Bruce J.↗

Facility Designed and Built to Investigate the Combined Effects of Contaminant and Atomic Oxygen on a Light-Transmitting Surface

A need exists to investigate changes in the transparency of a light-transmitting surface during simultaneous exposure to a contaminant and an atomic oxygen (AO) flux. This mechanism may be responsible for the degradation of the light-transmitting surfaces of both photovoltaic cells and photodiodes currently in use on many low-Earth-orbit spacecraft. To address this need, researchers from the Electro-Physics Branch of the NASA Glenn Research Center at Lewis Field built such a test system within their AO beam facility. This facility produces an effective AO flux of 1.4 10(exp 16) atoms/sq cm/sec and contains a three-axis positioning system that provides the motion capability necessary for test operations. During testing, a target surface is held directly within the AO beam and close to two contaminant effusion cells. The effusion cells are shielded from the AO beam, and the outgassing contaminant is constrained to move across the target surface when heat is applied to either of the reservoirs. A light source is periodically moved over the target surface, and the transmitted light intensity is checked with a photodiode located below the target. This light source is also periodically checked with a separate photodiode, which is protected from contamination and AO exposure, to allow adjustments necessary to maintain a consistent light intensity.

Sechkar, Edward A.↗

Orifice calibration module

Module, consisting of transparent plastic cylinder containing separate suction and calibration chambers, allows static-pressure orifices to be calibrated, and rapidly checked for leaks. Device is compact, saves time, and improves accuracy, and reliability of pressure measurements.

Culotta, R.↗

ISEE observations of magnetopause reconnection: The energy balance

The total energy balance for two events with the objective of obtaining check on the interpretation in terms of reconnection is examined. To within experimental uncertainties, the plasma and magnetic field data are consistent with reconnection. An enthalpy increase comparable to the kinetic energy increase occurs in the magnetopause. Thus substantial dissipation is present in the rotational discontinuity. An ion heat flow associated with a beam of reflected magnetosheath particles carried away some 20% of the total converted electromagnetic energy.

Paschmann, G.↗

ISEE observations of the magnetopause - Reconnection and the energy balance

The total energy balance for two events with the objective of obtaining check on the interpretation in terms of reconnection is examined. To within experimental uncertainties, the plasma and magnetic field data are consistent with reconnection. An enthalpy increase comparable to the kinetic energy increase occurs in the magnetopause. Thus substantial dissipation is present in the rotational discontinuity. An ion heat flow associated with a beam of reflected magnetosheath particles carried away some 20 percent of the total converted electromagnetic energy.

Paschmann, G.↗

Advanced development of the boundary element method for elastic and inelastic thermal stress analysis

The focus of this dissertation is on advanced development of the boundary element method for elastic and inelastic thermal stress analysis. New formulations for the treatment of body forces and nonlinear effects are derived. These formulations, which are based on particular integral theory, eliminate the need for volume integrals or extra surface integrals to account for these effects. The formulations are presented for axisymmetric, two and three dimensional analysis. Also in this dissertation, two dimensional and axisymmetric formulations for elastic and inelastic, inhomogeneous stress analysis are introduced. The derivatives account for inhomogeneities due to spatially dependent material parameters, and thermally induced inhomogeneities. The nonlinear formulation of the present work are based on an incremental initial stress approach. Two inelastic solutions algorithms are implemented: an iterative; and a variable stiffness type approach. The Von Mises yield criterion with variable hardening and the associated flow rules are adopted in these algorithms. All formulations are implemented in a general purpose, multi-region computer code with the capability of local definition of boundary conditions. Quadratic, isoparametric shape functions are used to model the geometry and field variables of the boundary (and domain) of the problem. The multi-region implementation permits a body to be modeled in substructured parts, thus dramatically reducing the cost of analysis. Furthermore, it allows a body consisting of regions of different (homogeneous) material to be studied. To test the program, results obtained for simple test cases are checked against their analytic solutions. Thereafter, a range of problems of practical interest are analyzed. In addition to displacement and traction loads, problems with body forces due to self-weight, centrifugal, and thermal loads are considered.

Henry, Donald P., Jr.↗

Telescope protection algorithm for the Space Infrared Telescope Facility

This paper presents a proposed on-board Telescope Protection Algorithm (TPA) for the Space Infrared Telescope Facility (SIRTF). This TPA consists of hardware and software capable of performing both fail-operational and fail-safe modes of operation. In the fail-operational mode, each ephemeris load and slew/dwell command sequence is checked on-board before use. The slew command monitor detects unallowable slew/dwell commands and transfers control to an algorithm which slews to and maintains a safe telescope orientation while preserving precise attitude determination and control. This fail-operational mode is also given the authority to autonomously restart the slew/dwell sequence at a point beyond the faulty command. The fail-safe system consists of software and hardware which detects impending earth, moon, or sun avoidance zone violations and activates a backup hardware safe hold mode. The subject TPA and relevant sensor complement were designed for the SIRTF mission; however, this system can easily be used as a basis for failure detection and correction in a wide range of other missions.

Class, B. F.↗

A systematic approach to advanced cockpit warning systems for air transport operations: Line pilot preferences

Line pilots (fifty captains, first officers, and flight engineers) from 8 different airlines were administered a structured questionnaire relating to future warning system design and solutions to current warning system problems. This was followed by a semantic differential to obtain a factor analysis of 18 different cockpit warning signals on scales such as informative/distracting, annoying/soothing. Half the pilots received a demonstration of the experimental text and voice synthesizer warning systems before answering the questionnaire and the semantic differential. A control group answered the questionnaire and the semantic differential first, thus providing a check for the stability of pilot preferences with and without actual exposure to experimental systems. Generally, the preference data obtained revealed much consistency and strong agreement among line pilots concerning advance cockpit warning system design.

Williams, D. H.↗