Search NASA⌕ Search

SEARCH · Search NASA

Results for “Failure Tolerance”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 253 records · Page 14

Reliability of Fault Tolerant Control Systems

This paper reports Part II of a two part effort that is intended to delineate the relationship between reliability and fault tolerant control in a quantitative manner. Reliability properties peculiar to fault-tolerant control systems are emphasized, such as the presence of analytic redundancy in high proportion, the dependence of failures on control performance, and high risks associated with decisions in redundancy management due to multiple sources of uncertainties and sometimes large processing requirements. As a consequence, coverage of failures through redundancy management can be severely limited. The paper proposes to formulate the fault tolerant control problem as an optimization problem that maximizes coverage of failures through redundancy management. Coverage modeling is attempted in a way that captures its dependence on the control performance and on the diagnostic resolution. Under the proposed redundancy management policy, it is shown that an enhanced overall system reliability can be achieved with a control law of a superior robustness, with an estimator of a higher resolution, and with a control performance requirement of a lesser stringency.

Wu, N. Eva↗

Enabling Reliable, Fault-Tolerant Autonomous Lunar Habitats with High-Performance Spaceflight Computing

The lunar surface presents unfavorable constraints and harsh living conditions. To address these challenges, autonomous habitats will require complex integrated systems that combine advanced software, high-performance hardware, and cutting-edge sensors to ensure sustainability, safety, and operational efficiency. Consequently, maintaining a sustainable presence on the Moon requires reliable infrastructure and efficient development, precise monitoring, and utilization of resources within a lunar installation. These elements are essential not only to ensure that lunar settlement can be long-term, self-sustaining, and resource-efficient, but also to serve as a foundation for future missions and eventual human habitation on Mars. Humans are not native to the Moon; therefore, our survival and ability to thrive will depend on autonomous systems that can foster safety and resilience through high-availability architectures, graceful degradation, and highly fault-tolerant spaceflight hardware capable of continuing operation during failures. This requires advanced human-rated distributed systems architectures with specialized electronics, scalable capabilities, and an integrated design approach. Unlike current practices focused on short-term missions and regularly maintained components, permanent lunar compute systems must be designed for extended operations beyond mission durations. This paper explores the necessity of transitioning toward fault- tolerant, highly autonomous hardware systems designed for multi-year missions. It also identifies critical subsystems that require high levels of autonomy, supported by radiation-hardened processors and extreme thermal loads, which are essential to mitigate long-term degradation and ensure sustainable lunar habitation. Finally, the paper aligns with NASA’s identified Civil Space Shortfalls, particularly in high-performance onboard computing, advanced data acquisition, extreme-environment avionics, radiation monitoring and countermeasures, and autonomous health management. It proposes NASA’s new High-Performance Spaceflight Computing (HPSC) processor as a turnkey solution, delivering 100 times the performance-per-watt of legacy rad-hard CPUs and enabling onboard AI, edge computing, and fault-tolerant features essential for sustained lunar autonomy and beyond.

Sarkis S Mikaelian↗

Distribution of blackouts in the power grid and the Motter and Lai model

Carreras, Dobson, and colleagues have studied empirical data on the sizes of the blackouts in real grids and modeled them with computer simulations using the direct current approximation. They have found that the resulting blackout sizes are distributed as a power law and suggested that this is because the grids are driven to the self-organized critical state. In contrast, more recent studies found that the distribution of cascades is bimodal resulting in either a very small blackout or a very large blackout, engulfing a finite fraction of the system. Here we reconcile the two approaches and investigate how the distribution of the blackouts changes with model parameters, including the tolerance criteria and the dynamic rules of failure of the overloaded lines during the cascade. Finally, we study the same problem for the Motter and Lai model and find similar results, suggesting that the physical laws of flow on the network are not as important as network topology, overload conditions, and dynamic rules of failure.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Redundant electronic circuit provides fail-safe control

Circuit using dual control amplifiers and dual position demand potentiometers powered from separate sources is used for reliable hydraulic valve controller that prevents closure of valve when control circuits fail, and maintains valve control to close tolerance for more common modes of controller failure.

Archer, J. W.↗

Centaur D-1T propulsion and propellant systems

A description is presented of the propulsion and propellant systems of the Centaur D-1T, an improved version of the Centaur high energy upper state. The primary change to the propulsion system to provide three-burn capability was the addition of radiation shielding to the propellant duct. The redundant valves and feed paths were added to the H202 supply and reaction control system to increase system tolerance to the most probable causes of failure. Other changes were made to enhance mission capability of the Centaur, and represent an increase in inherent reliability of the vehicle through reduction of single failure points and by substitution of more reliable components.

Goette, W. E.↗

A simulation-based fault injection experiment to evaluate self-test diagnostics for a fault-tolerant computer

The design and results of a fault injection experiment conducted in the Airlab facility at NASA-Langley using a logic network simulator are described. An attempt was made to determine the effectiveness of the diagnostic self-test sequences used to detect failures in the communicator/interstage (C/I) of a fault-tolerant processor (FTP). Identification of the undetected faults in the C/I Status Register logic resulted in changes in the diagnostic test sequences implemented for the FTP.

Baker, Robert L.↗

Advances in time-scale algorithms

The term clock is usually used to refer to a device that counts a nearly periodic signal. A group of clocks, called an ensemble, is often used for time keeping in mission critical applications that cannot tolerate loss of time due to the failure of a single clock. The time generated by the ensemble of clocks is called a time scale. The question arises how to combine the times of the individual clocks to form the time scale. One might naively be tempted to suggest the expedient of averaging the times of the individual clocks, but a simple thought experiment demonstrates the inadequacy of this approach. Suppose a time scale is composed of two noiseless clocks having equal and opposite frequencies. The mean time scale has zero frequency. However if either clock fails, the time-scale frequency immediately changes to the frequency of the remaining clock. This performance is generally unacceptable and simple mean time scales are not used. First, previous time-scale developments are reviewed and then some new methods that result in enhanced performance are presented. The historical perspective is based upon several time scales: the AT1 and TA time scales of the National Institute of Standards and Technology (NIST), the A.1(MEAN) time scale of the US Naval observatory (USNO), the TAI time scale of the Bureau International des Poids et Measures (BIPM), and the KAS-1 time scale of the Naval Research laboratory (NRL). The new method was incorporated in the KAS-2 time scale recently developed by Timing Solutions Corporation. The goal is to present time-scale concepts in a nonmathematical form with as few equations as possible. Many other papers and texts discuss the details of the optimal estimation techniques that may be used to implement these concepts.

Stein, S. R.↗

Neural networks: Alternatives to conventional techniques for automatic docking

Automatic docking of orbiting spacecraft is a crucial operation involving the identification of vehicle orientation as well as complex approach dynamics. The chaser spacecraft must be able to recognize the target spacecraft within a scene and achieve accurate closing maneuvers. In a video-based system, a target scene must be captured and transformed into a pattern of pixels. Successful recognition lies in the interpretation of this pattern. Due to their powerful pattern recognition capabilities, artificial neural networks offer a potential role in interpretation and automatic docking processes. Neural networks can reduce the computational time required by existing image processing and control software. In addition, neural networks are capable of recognizing and adapting to changes in their dynamic environment, enabling enhanced performance, redundancy, and fault tolerance. Most neural networks are robust to failure, capable of continued operation with a slight degradation in performance after minor failures. This paper discusses the particular automatic docking tasks neural networks can perform as viable alternatives to conventional techniques.

Vinz, Bradley L.↗

Reusable Launch Vehicle Attitude Control Using a Time-Varying Sliding Mode Control Technique

In this paper we present a time-varying sliding mode control (TVSMC) technique for reusable launch vehicle (RLV) attitude control in ascent and entry flight phases. In ascent flight the guidance commands Euler roll, pitch and yaw angles, and in entry flight it commands the aerodynamic angles of bank, attack and sideslip. The controller employs a body rate inner loop and the attitude outer loop, which are separated in time-scale by the singular perturbation principle. The novelty of the TVSMC is that both the sliding surface and the boundary layer dynamics can be varied in real time using the PD-eigenvalue assignment technique. This salient feature is used to cope with control command saturation and integrator windup in the presence of severe disturbance or control effector failure, which enhances the robustness and fault tolerance of the controller. The TV-SMC ascent and descent designs are currently being tested with high fidelity, 6-DOF dispersion simulations. The test results will be presented in the final version of this paper.

Shtessel, Yuri B.↗

A Selection of Composites Simulation Practices at NASA Langley Research Center

One of the major areas of study at NASA Langley Research Center is the development of technologies that support the use of advanced composite materials in aerospace applications. Amongst the supporting technologies are analysis tools used to simulate the behavior of these materials. This presentation will discuss a number of examples of analysis tools and simulation practices conducted at NASA Langley. The presentation will include examples of damage tolerance analyses for both interlaminar and intralaminar failure modes. Tools for modeling interlaminar failure modes include fracture mechanics and cohesive methods, whilst tools for modeling intralaminar failure involve the development of various progressive failure analyses. Other examples of analyses developed at NASA Langley include a thermo-mechanical model of an orthotropic material and the simulation of delamination growth in z-pin reinforced laminates.

Ratcliffe, James G.↗

Design Considerations for Human Rating of Liquid Rocket Engines

I.Human-rating is specific to each engine; a. Context of program/project must be understood. b. Engine cannot be discussed independently from vehicle and mission. II. Utilize a logical combination of design, manufacturing, and test approaches a. Design 1) It is crucial to know the potential ways a system can fail, and how a failure can propagate; 2) Fault avoidance, fault tolerance, DFMR, caution and warning all have roles to play. b. Manufacturing and Assembly; 1) As-built vs. as-designed; 2) Review procedures for assembly and maintenance periodically; and 3) Keep personnel trained and certified. c. There is no substitute for test: 1) Analytical tools are constantly advancing, but still need test data for anchoring assumptions; 2) Demonstrate robustness and explore sensitivities; 3) Ideally, flight will be encompassed by ground test experience. III. Consistency and repeatability is key in production a. Maintain robust processes and procedures for inspection and quality control based upon development and qualification experience; b. Establish methods to "spot check" quality and consistency in parts: 1) Dedicated ground test engines; 2) Random components pulled from the line/lot to go through "enhanced" testing.

Parkinson, Douglas↗

System and Method for Dynamic Aeroelastic Control

The present invention proposes a hardware and software architecture for dynamic modal structural monitoring that uses a robust modal filter to monitor a potentially very large-scale array of sensors in real time, and tolerant of asymmetric sensor noise and sensor failures, to achieve aircraft performance optimization such as minimizing aircraft flutter, drag and maximizing fuel efficiency.

Suh, Peter M.↗

Fault-tolerant software

Limitations in the current capabilities for verifying programs by formal proof or by exhaustive testing have led to the investigation of fault-tolerance techniques for applications where the consequence of failure is particularly severe. Two current approaches, N-version programming and the recovery block, are described. A critical feature in the latter is the acceptance test, and a number of useful techniques for constructing these are presented. A system reliability model for the recovery block is introduced, and conclusions derived from this model that affect the design of fault-tolerant software are discussed.

Hecht, H.↗

Silver-carbon-nanotube composite metallization for increased durability of silicon solar cells against cell cracks

One of the ways to reduce the cost of solar electricity is to reduce the degradation rate of solar modules and extend their lifetime well beyond 30 years. The extended module lifetime translates to increased bankability of utility-scale PV projects. In this work, we specifically address cell-crack-induced degradation by introducing crack-tolerant metallization. Herein, we make use of low-cost, multi-walled carbon nanotubes embedded in commercial screen-printable silver pastes as a highly integratable engineering solution. When the carbon nanotubes are appropriately functionalized and incorporated into commercial silver pastes, the resulting metal contacts on solar cells, after screen-printing and firing, show exceptional fracture toughness. These composite metal contacts possess increased ductility, electrical gap-bridging capability greater than 50 µm, and “self-healing” to regain electrical continuity even after cycles of complete electrical failure under large strain. While providing crack-tolerant mechanical properties, the composite paste delivers similar beginning-of-life cell performance as the conventional silver paste.

14 SOLAR ENERGY↗

Progressive Fracture of Fiber Composite Thin Shell Structures Under Internal Pressure and Axial Loads

Graphite/epoxy composite thin shell structures were simulated to investigate damage and fracture progression due to internal pressure and axial loading. Defective and defect-free structures (thin cylinders) were examined. The three different laminates examined had fiber orientations of (90/0/+/-0)(sub s), where 0 is 45, 60, and 75 deg. CODSTRAN, an integrated computer code that scales up constituent level properties to the structural level and accounts for all possible failure modes, was used to simulate composite degradation under loading. Damage initiation, growth, accumulation, and propagation to fracture were included in the simulation. Burst pressures for defective and defect-free shells were compared to evaluate damage tolerance. The results showed that damage initiation began with matrix failure whereas damage and/or fracture progression occurred as a result of additional matrix failure and fiber fracture. In both thin cylinder cases examined (defective and defect-free), the optimum layup configuration was (90/0/+/-60)(sub s) because it had the best damage tolerance with respect to the burst pressure.

Gotsis, Pascal K.↗

Understanding the limits of Li-NMC811 half-cells

As we push the boundaries of state-of-the-art lithium-ion intercalation materials, such as nickel-rich chemistries, the ability to isolate and understand specific degradation and performance limitations is becoming increasingly important. Half-cells, wherein lithium metal is employed as a dual counter and reference electrode, are commonly used in industry and academia for this purpose. However, the high reactivity of lithium metal drives premature electrolyte degradation and limits cell lifetime, bringing into question the reliability and validity of this cell configuration. Here we explore the limitations of half-cell studies of LiNi 0.8 Mn 0.1 Co 0.1 O 2 (NMC811) electrodes with commercially relevant loading. We identify the failure mechanism of this cell configuration through a combination of electrochemical, chemical, and spectroscopic techniques and show that the Li has a direct detrimental impact on the NMC811 chemistry. Our measurements show that vinylene carbonate is critical for these half-cell studies and underpins the cycle limits. Furthermore, we demonstrate the use of Li 4 Ti 5 O 12 (LTO) as an alternative counter electrode for understanding the performance of NMC positive electrode materials, due to its high coulombic efficiency and low reactivity with the organic carbonates routinely employed in lithium-ion battery cell chemistries. These data confirm that NMC811 electrodes can tolerate high voltages (stressed) conditions and that cell failure is mainly a result of crossover effects.

25 ENERGY STORAGE↗

Issues in the Imprecise Computation Approach to Fault Tolerance

The imprecise computation technique can be used in a natural way to enhance fault tolerance. By providing a usable, approximate result whenever a failure or overload prevent the system from producing the desired, precise result, we can increase the availability of data and services, reduce the need for error-recovery operations, and minimize the costs in replication. This paper describes the domain-specific fault tolerance mechanisms that are needed to support the provision and correct usage of imprecise results for several representative application domains. The elements of an application-domain-independent architecture that can effectively integrate these domain-specific mechanisms are also described.

Liu, Jane W. S.↗

Controlling Tensegrity Robots Through Evolution

Tensegrity structures (built from interconnected rods and cables) have the potential to offer a revolutionary new robotic design that is light-weight, energy-efficient, robust to failures, capable of unique modes of locomotion, impact tolerant, and compliant (reducing damage between the robot and its environment). Unfortunately robots built from tensegrity structures are difficult to control with traditional methods due to their oscillatory nature, nonlinear coupling between components and overall complexity. Fortunately this formidable control challenge can be overcome through the use of evolutionary algorithms. In this paper we show that evolutionary algorithms can be used to efficiently control a ball-shaped tensegrity robot. Experimental results performed with a variety of evolutionary algorithms in a detailed soft-body physics simulator show that a centralized evolutionary algorithm performs 400 percent better than a hand-coded solution, while the multi-agent evolution performs 800 percent better. In addition, evolution is able to discover diverse control solutions (both crawling and rolling) that are robust against structural failures and can be adapted to a wide range of energy and actuation constraints. These successful controls will form the basis for building high-performance tensegrity robots in the near future.

Robot↗