Search NASA⌕ Search

SEARCH · Search NASA

Results for “safety case”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 235 records · Page 13

Health Monitoring and Prognostics in Li-ion Batteries

Space applications need to overcome a very critical challenge of predicting remaining useful life of its critical systems/subsystems, with batteries being one of them. Batteries, power electronics conditioning system and motors and one of the most critical systems. Similarly in case of electric aircrafts, computing remaining flying time is safety-critical, since an aircraft that runs out of power (battery charge) while in the air will eventually lose control leading to catastrophe. To tackle and solve the prediction problem, it is essential to have awareness of the current state and health of the system, especially since it is necessary to perform condition-based predictions. To be able to accurately predict the future state of any system, it is required to possess knowledge of its current and future operations. Given models of the current and future system behavior, the general approach of model-based prognostics can be employed as a solution to the prior stated prediction problem. Two approaches are presented with battery prognostics application. The first approach presentation covers a physics based-modeling approach implemented for battery prognostics. Given models of the current and future system behavior, a general approach of model-based prognostics can be employed as a solution to the prediction problem and further for decision making. A second hybrid framework for fusing information from physics-based performance models along with deep learning algorithms for prognostics of complex safety critical systems i.e. batteries is presented. In this framework, physics-based performance models infer unobservable model parameters related to the system's components health solving a calibration problem in the deep learning approach.

Batteries↗

Lessons Learned from the Arecibo Observatory Auxiliary M4N Socket Analysis and Implications for Future Observatory Designs

The Arecibo Observatory collapsed after a progressive structural failure stemming from the failure of a single socket joint cable termination. A failure investigation was conducted to identify the cause of the first failed cable termination socket. Due to the nature of the suspended observatory receiver, the dominant source of loading in the suspension cables was due to deadload, with secondary contributions coming from environmental effects and observatory operation. The high ratio of deadload vs. live load applied to the cable over many years resulted in a creep failure mode of the cast zinc within the socket which further induced stress into the highly stress wires at the entrance of the socket. The design of the socket joint did not explicitly consider socket constituent stress margins and time-dependent damage mechanisms such as creep. Lessons learned from this investigation led to recommendations for revising civil engineering cable standards, and recommendations for manufacturers and designers. The design of cables employing socket terminations should consider the cumulative damage effects from creep and cyclic loading identify their corresponding worst-case inspectable defects or establish a sufficiently high factor of safety so that the design is sufficiently robust to defects and time-dependent failure modes. The design should specify end-of-life capability and set service life inspection intervals with pass/fail inspection criteria. Finally, trial studies on design iterations were conducted to increase the reliability of cables with socket joints.

Pavel Babuska↗

Health Monitoring and Prognostics in Li-ion Batteries

Space applications need to overcome a very critical challenge of predicting remaining useful life of its critical systems/subsystems, with batteries being one of them. Batteries, power electronics conditioning system and motors and one of the most critical systems. Similarly in case of electric aircrafts, computing remaining flying time is safety-critical, since an aircraft that runs out of power (battery charge) while in the air will eventually lose control leading to catastrophe. To tackle and solve the prediction problem, it is essential to have awareness of the current state and health of the system, especially since it is necessary to perform condition-based predictions. To be able to accurately predict the future state of any system, it is required to possess knowledge of its current and future operations. Given models of the current and future system behavior, the general approach of model-based prognostics can be employed as a solution to the prior stated prediction problem. Two approaches are presented with battery prognostics application. The first approach presentation covers a physics based-modeling approach implemented for battery prognostics. Given models of the current and future system behavior, a general approach of model-based prognostics can be employed as a solution to the prediction problem and further for decision making. A second hybrid framework for fusing information from physics-based performance models along with deep learning algorithms for prognostics of complex safety critical systems i.e. batteries is presented. In this framework, physics-based performance models infer unobservable model parameters related to the system's components health solving a calibration problem in the deep learning approach.

Battery Prognostics↗

Systems Health Management and Decision Making

In order to tackle and solve the prediction problem, it is essential to have awareness of the current state and health of the system, especially since it is necessary to perform condition-based predictions. To be able to accurately predict the future state of any system, it is required to possess knowledge of its current and future operations. Given models of the current and future system behavior, the general approach of model-based prognostics can be employed as a solution to the prior stated prediction problem. In case of electric aircrafts, computing remaining flying time is safety-critical, since an aircraft that runs out of power (battery charge) while in the air will eventually lose control leading to catastrophe. In order to tackle and solve the prediction problem, it is essential to have awareness of the current state and health of the system, especially since it is necessary to perform condition-based predictions. To be able to predict the future state of the system, it is also required to possess knowledge of the current and future operations of the vehicle. Discuss research approach to develop a system level health monitoring safety indicator which runs estimation and prediction algorithms to estimate remaining useful life predictions at system as well as subsystem levels. Given models of the current and future system behavior, a general approach of model-based prognostics can be employed as a solution to the prediction problem and further for decision making. In addition a digital twin concept is being implemented in the framework to demonstrate verification and validation of developed algorithms. Note - This presentation is for the short workshop conducted at the same conference and contains all previously approved and published information.

Systems Health Managent↗

Pathogenetic validation of the use of biological protective agents and early treatment in cases of radiation injury simulating radiation effects under space flight conditions

In considering a radiation safety system for space flights, the various measures to protect man against radiation include drug prophylaxis. At the present time a great deal of experimental material has been accumulated on the prevention and treatment of radiation injuries. Antiradiation effectiveness has been established for sulfur- and nitrogen-containing substances, auxins, cyanides, polynucleotides, mucopolysaccharides, lipopolysaccharides, aminosaccharides, synthetic polymers, vitamins, hormones, amino acids and other compounds which can be divided into two basic groups - biological and chemical protective agents.

Rogozkin, V. D.↗

Teamwork in the Terminal Area: Organizational Issues and Solutions

Dynamic growth and technology advances in commercial aviation have turned the terminal area into a complex, multi-organization workplace which requires the smooth coordination of many operational teams. In addition to pilots, cabin crew, air traffic controllers, and dispatch (who nominally work together throughout a flight), surface operations additionally involve local, ground and ramp controllers, ramp agents, maintenance, dozens of service contractors, and any number of teams who are responsible for airport operations. Under abnormal or emergency conditions, even more teams become actively involved. In order to accommodate growth and to meet productivity and safety challenges, numerous changes are being made in surface operations. Unfortunately, it is often the case that changes in technologies, organizational roles, procedures, and training are developed and implemented in isolated and piecemeal fashion without regard to cross organizational impact. Thus, there is a need for evaluation methodologies which assure integrated system safety for all organizations. Such methodologies should aid the understanding of how organizations work together and how changes in one domain affects the next. In this study, we develop one approach toward addressing these organizational issues. Examples of surface operations in abnormal situations are examined in regard to their impact on personnel in the terminal area. Timelines are given for the responses to incidents, along with the necessary communication links, the specific roles that members of terminal teams have, and any overlapping responsibilities. Suggestions to improve cross-operational teamwork are given. Methods of graphic representation are explored, both in regards to human links and access to information. The outcome of such an approach should enhance the understanding which is critical for resolving organizational conflicts and maximizing system effectiveness.

Parke, Bonny K.↗

Reusable Solid Rocket Motor - Accomplishments, Lessons, and a Culture of Success

The Reusable Solid Rocket Motor represents the largest solid rocket motor ever flown and the only human rated solid motor. Each Reusable Solid Rocket Motor (RSRM) provides approximately 3-million lb of thrust to lift the integrated Space Shuttle vehicle from the launch pad. The motors burn out approximately 2 minutes later, separate from the vehicle and are recovered and refurbished. The size of the motor and the need for high reliability were challenges. Thrust shaping, via shaping of the propellant grain, was needed to limit structural loads during ascent. The motor design evolved through several block upgrades to increase performance and to increase safety and reliability. A major redesign occurred after STS-51L with the Redesigned Solid Rocket Motor. Significant improvements in the joint sealing systems were added. Design improvements continued throughout the Program via block changes with a number of innovations including development of low temperature o-ring materials and incorporation of a unique carbon fiber rope thermal barrier material. Recovery of the motors and post flight inspection improved understanding of hardware performance, and led to key design improvements. Because of the multidecade program duration material obsolescence was addressed, and requalification of materials and vendors was sometimes needed. Thermal protection systems and ablatives were used to protect the motor cases and nozzle structures. Significant understanding of design and manufacturing features of the ablatives was developed during the program resulting in optimization of design features and processing parameters. The project advanced technology in eliminating ozone-depleting materials in manufacturing processes and the development of an asbestos-free case insulation. Manufacturing processes for the large motor components were unique and safety in the manufacturing environment was a special concern. Transportation and handling approaches were also needed for the large hardware segments. The reusable solid rocket motor achieved significant reliability via process control, ground test programs, and postflight assessment. Process control is mandatory for a solid rocket motor as an acceptance test of the delivered product is not feasible. Process control included process failure modes and effects analysis, statistical process control, witness panels, and process product integrity audits. Material controls and inspections were maintained throughout the sub tier vendors. Material fingerprinting was employed to assess any drift in delivered material properties. The RSRM maintained both full scale and sub-scale test articles. These enabled continuous improvement of design and evaluation of process control and material behavior. Additionally RSRM reliability was achieved through attention to detail in post flight assessment to observe any shift in performance. The postflight analysis and inspections provided invaluable reliability data as it enables observation of actual flight performance, most of which would not be available if the motors were not recovered. These unique challenges, features of the reusable solid rocket motor, materials and manufacturing issues, and design improvements will be discussed in the paper.

Moore, Dennis R.↗

Improving system reliability through formal analysis and use of checks in software

Software is playing increasingly important roles in avionics systems. It is widely used in navigation and, in some cases, in control loops that maintain aircraft stability. To guarantee the safety of flight systems, the FAA requires that critical components have a probability of failure no greater than 10(exp -9) per hour of flight. Software is being used to diagnose system components for failure. SIFT (Software Implemented Fault Tolerance) was a computer system developed to study the use of software to check for failure and manage processor reconfiguration. To guarantee that software satisfies its specifications, formal verification can be used. With this a program and its specification are viewed as mathematical objects, and a mathematical proof is used to show that the program and its specification are equivalent. In previous research, a theory of checking was developed to offer assistance in analyzing specifications and designing run-time checks. In the theory, checking is considered abstractly in terms of n-ary relations much like those of relational database theory. Within the theory check are categorized, checks on input and checks on results are considered, and formal attention is given to the minimization and logical combination of checks. The focus is upon input checks and the obstacles in checking input to critical systems. A central concern is with a property referred to as independence. The concern is with circumstances under which it is possible to apply isolated, independent checks to separate sensor inputs and be assure that all illegal input will be properly detected. Presently, independence is being investigated and checked in the context of the GCS (Guidance and Control System). The GCS simulator is intended for testing software that implements control laws for landing spacecraft. The large number of inputs and their complex interrelationships provide an exciting context in which to investigate independence and the difficulties of supplying input checks.

Staknis, Mark E.↗

Multiple-function multi-input/multi-output digital control and on-line analysis

The design and capabilities of two digital controller systems for aeroelastic wind-tunnel models are described. The first allowed control of flutter while performing roll maneuvers with wing load control as well as coordinating the acquisition, storage, and transfer of data for on-line analysis. This system, which employs several digital signal multi-processor (DSP) boards programmed in high-level software languages, is housed in a SUN Workstation environment. A second DCS provides a measure of wind-tunnel safety by functioning as a trip system during testing in the case of high model dynamic response or in case the first DCS fails. The second DCS uses National Instruments LabVIEW Software and Hardware within a Macintosh environment.

Hoadley, Sherwood T.↗

Use of Thermoregulatory Models to Enhance Space Shuttle and Space Station operations and Review of Human Thermoregulatory Control

Thermoregulation in the space environment is critical for survival, especially in off- nominal operations. In such cases, mathematical models of thermoregulation are frequently employed to evaluate safety-of-flight issues in various human mission scenarious. In this study, the 225-node Wissler model and the 41-Node Metabolic Man model are employed to evaluate the effects of such a scenario. Metabolic loads on astronauts wearing the advanced crew escape suit (ACES) and liquid cooled ventilation garment (LCVG) are imposed on astronauts exposed to elevated cabin temperatures resulting from a systems failure. The study indicates that the performance of the ACES/LCVG cooling system is marginal. Increases in workload and or cabin temperature above nominal will increase rectal temperature, stored heat load, heart rate, and sweating, which could lead to deficits in the performance of cognitive and motor tasks. This is of concern as the ACES/LCVG is employed during Shuttle decent when the likelihood of a safe landing may be compromised. The study indicates that the most effective mitigation strategy would be to decrease the LCVG inlet temperature.

Pisacane, V. L.↗

Safety Awareness & Communications Internship

The projects that I have worked on during my internships were updating the JSC Safety & Health Action Team JSAT Employee Guidebook, conducting a JSC mishap case study, preparing for JSC Today Close Call success stories, and assisting with event planning and awareness.

Jefferson, Zanani↗

An Assessment of Reduced Crew and Single Pilot Operations in Commercial Transport Aircraft Operations

Future reduced crew operations or even single pilot operations for commercial airline and on-demand mobility applications are an active area of research. These changes would reduce the human element and thus, threaten the precept that "a well-trained and well-qualified pilot is the critical center point of aircraft systems safety and an integral safety component of the entire commercial aviation system." NASA recently completed a pilot-in-the-loop high fidelity motion simulation study in partnership with the Federal Aviation Administration (FAA) attempting to quantify the pilot's contribution to flight safety during normal flight and in response to aircraft system failures. Crew complement was used as the experiment independent variable in a between-subjects design. These data show significant increases in workload for single pilot operations, compared to two-crew, with subjective assessments of safety and performance being significantly degraded as well. Nonetheless, in all cases, the pilots were able to overcome the failure mode effects in all crew configurations. These data reflect current-day flight deck equipage and help identify the technologies that may improve two-crew operations and/or possibly enable future reduced crew and/or single pilot operations.

Bailey, Randall E.↗

Model-Based Prognostics

This tutorial will cover the basics of model-based prognostics, and include concepts such as modeling approaches, estimation and prediction algorithms, and how uncertainty is represented and quantified. Other topics covered will include structural model decomposition, system-level prognostics, prognostics of hybrid systems, and distributed prognostics. Several case studies, such as water recovery systems to the prediction of safety margins in the national airspace system will be used to explain different concepts of prognostics and demonstrate their application to real-world systems.

Roychoudhury, Indranil↗

Health Monitoring and Prognostics for More Electric Aircrafts

As more and more electric vehicles emerge in our daily operation progressively, a very critical challenge lies in the prediction of remaining flying time/distance (for aircraft). This information is important, particularly in the case of unmanned vehicles, because such vehicles can become self-aware, autonomously compute its own capabilities, and identify how to best plan and successfully complete vehicular missions safely. In case of electric aircrafts, computing remaining flying time is also safety-critical, since an aircraft that runs out of battery charge while in the air will eventually lose control leading to catastrophe. In order to tackle and solve the prediction problem, it is essential to have awareness of the current state and health of the system, especially since it is necessary to perform condition-based predictions. To be able to predict the future state of the system, it is also required to possess knowledge of the current and future operations of the vehicle. Given models of the current and future system behavior, the general approach of model-based prognostics can be employed as a solution to the prior stated prediction problem.For electric aircraft, propulsion is based on power generated from batteries. Thus, it is critical to monitor battery state charge and to estimate the ability of the battery to support mission activities as it is being discharged during flight operation. The ability of the vehicle to complete its given mission very much depends on the charge left in the batteries based on its operational route, maneuvering, weather conditions along with aging health of the batteries. Hence, for the purpose this discussion, consider the scenario of an unmanned electric aircraft that has some planned sequence of waypoints to reach throughout its mission. In such a scenario, for this particular aircraft, and within the region it is flown, at most two minutes are required to safely land the aircraft. Thus, it is desired to predict at which point in time the aircraft must begin to head to the runway and land.

Goebel, Kai↗

On-Board Battery Monitoring and Prognostics for Electric-Propulsion Aircraft

The reliability of the propulsion system of an aircraft is paramount for the aircraft safety and hence the aircraft health must be monitored continuously. In contrast to fuel- operated aircraft, electric battery-operated propulsion system poses specific problems, such as, the remaining battery power does not linearly decrease and cannot be measured directly. In this paper, we describe a combined monitoring and prognostics architecture that can continuously monitor all components of the electric propulsion system with respect to safety and performance properties as well as state of charge and rest of useful life for the battery. Our system combines a detailed electrochemical battery model for Li-ion batteries with a powerful prognostics engine based upon an Unscented Kalman Filter with the R2U2 monitoring device, which provides efficient observers for metric temporal logic and Bayesian reasoning. R2U2 is a real-time, realizable, responsive, unobtrusive unit, which continuously monitors sensor readings, outputs of the prognostics engine, as well as the ight software status for safety, performance, and security properties. We illustrate our architecture with two case studies, one reporting actual ight tests with an X8+ octocopter and the other a software-in-the-loop simulation with an unmanned Edge 540 electric aircraft model.

Kulkarni, Chetan↗

Prognostics and Health Monitoring: Application to Electric Vehicles

As more and more electric vehicles emerge in our daily operation progressively, a very critical challenge lies in the prediction of remaining driving-time distance (for cars) or flying time-distance (for aircraft). This information is important, particularly in the case of unmanned vehicles, because such vehicles can become self-aware, autonomously compute its own capabilities, and identify how to best plan and successfully complete vehicular missions safely. In case of electric aircrafts, computing remaining flying time is also safety-critical, since an aircraft that runs out of power (battery charge) while in the air will eventually lose control leading to catastrophe. In order to tackle and solve the prediction problem, it is essential to have awareness of the current state and health of the system, especially since it is necessary to perform condition-based predictions. To be able to predict the future state of the system, it is also required to possess knowledge of the current and future operations of the vehicle.

Electric Vehicles↗

Aircraft fire safety research

During the past 15 years, very significant progress has been made toward enhancing aircraft fire safety in both normal and hostile (combat) operational environments. Most of the major aspects of the aircraft fire safety problem are touched upon here. The technology of aircraft fire protection, although not directly applicable in all cases to spacecraft fire scenarios, nevertheless does provide a solid foundation to build upon. This is particularly true of the extensive research and testing pertaining to aircraft interior fire safety and to onboard inert gas generation systems, both of which are still active areas of investigation.

Botteri, Benito P.↗