Search NASA⌕ Search

SEARCH · Search NASA

Results for “SAFETY STANDARDS”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 253 records · Page 14

Runtime Assurance of Aeronautical Products: Preliminary Recommendations

Runtime assurance (RTA) affords an operational layer of protection against safety hazards to aeronautical products that may include less trusted or untrusted functions. However, any RTA scheme must itself be trusted before it can be deployed into use: i.e., it must be fit for its intended purpose, and it must not itself introduce safety hazards. This report contains preliminary recommendations on the application and integration of RTA into aeronautical products intended for use in civil aviation. The main purpose of these recommendations is to inform regulatory guidance and consensus standards that may be used to meet the safety intent of the applicable regulations.

Runtime assurance↗

The NASA Radiation Hardness Assurance (RHA) Process Standard

This paper presents status on the upcoming NASA Agency-level RHA Process Standard. Based on recommendations provided by the NASA Engineering and Safety Center (NESC), the NASA Electronic Parts and Packaging (NEPP) Program has led development of an agency-level standard for space flight avionics and electronics RHA. The standard introduces a novel RHA taxonomy and prescribes the process required by NASA programs and projects to baseline their RHA programs consistent with the MEAL (Mission, Environment, Application, and Lifetime) criteria including the risk tolerance posture. The standard also provides requirements for the RHA schedule integration in the program or project lifecycle and requirements for data deliverables content. Additional non-prescriptive technical content is provided in the standard appendices to guide development of RHA programs for NASA missions.

Avionics↗

Test plan and report for Space Shuttle launch environment testing of Bergen cable technology safety cable

Bergen Cable Technology (BCT) has introduced a new product they refer to as 'safety cable'. This product is intended as a replacement for lockwire when installed per Aerospace Standard (AS) 4536 (included in Appendix D of this document). Installation of safety cable is reportedly faster and more uniform than lockwire. NASA/GSFC proposes to use this safety cable in Shuttle Small Payloads Project (SSPP) applications on upcoming Shuttle missions. To assure that BCT safety cable will provide positive locking of fasteners equivalent to lockwire, the SSPP will conduct vibration and pull tests of the safety cable.

Ralph, John↗

Program for developing and implementing a new approach to designing for fire safety in buildings

The traditional method of providing for fire safety in buildings through reliance on codes and standards that prescribe specific measures to be taken in the design and construction of buildings to minimize the potential for a fire occurring and to protect property and life should a fire occur was evaluated. A new approach to designing for fire safety in buildings is outlined.

Source record↗

Tactical Separation and Safety Alerting System for Terminal Airspace

Provision of tactical alerts to aid air traffic controllers in providing separation assurance in terminal airspace is hindered by the complexity of the airspace, its operations, and flight procedures. A prototype automation system is studied that provides controllers with both separation and safety alerts based on or derived from the separation standard for terminal airspace. The system models flight trajectories heuristically, with use of merged intent information from readily available sources: area navigation departure procedures, flight-plan routes, and arrival nominal interior routes used in terminal automation systems. Flight vertical intent is modeled according to standard procedural restrictions except when superseded by controller-issued altitude clearances. Importantly, flight trajectories are modeled for all aircraft, including those conducting visual approaches. New safety-alert thresholds for aircraft conducting visual approaches are studied. Performance of the system is evaluated through fast-time playback of recorded air traffic data from high-fidelity Human-In-The-Loop simulations and real-world operations in two Terminal Radar Approach Control facilities. The prototype system is found to produce a false-alert rate of 8% for separation alerts. The number and validity of safety alerts are studied by comparing with the current Conflict Alert system, showing that the false alerts of Conflict Alert are at 85% and they are avoided in the prototype system.

Air Traffic Management↗

Evaluating Alerting and Guidance Performance of a UAS Detect-And-Avoid System

A key challenge to the routine, safe operation of unmanned aircraft systems (UAS) is the development of detect-and-avoid (DAA) systems to aid the UAS pilot in remaining "well clear" of nearby aircraft. The goal of this study is to investigate the effect of alerting criteria and pilot response delay on the safety and performance of UAS DAA systems in the context of routine civil UAS operations in the National Airspace System (NAS). A NAS-wide fast-time simulation study was conducted to assess UAS DAA system performance with a large number of encounters and a broad set of DAA alerting and guidance system parameters. Three attributes of the DAA system were controlled as independent variables in the study to conduct trade-off analyses: UAS trajectory prediction method (dead-reckoning vs. intent-based), alerting time threshold (related to predicted time to LoWC), and alerting distance threshold (related to predicted Horizontal Miss Distance, or HMD). A set of metrics, such as the percentage of true positive, false positive, and missed alerts, based on signal detection theory and analysis methods utilizing the Receiver Operating Characteristic (ROC) curves were proposed to evaluate the safety and performance of DAA alerting and guidance systems and aid development of DAA system performance standards. The effect of pilot response delay on the performance of DAA systems was evaluated using a DAA alerting and guidance model and a pilot model developed to support this study. A total of 18 fast-time simulations were conducted with nine different DAA alerting threshold settings and two different trajectory prediction methods, using recorded radar traffic from current Visual Flight Rules (VFR) operations, and supplemented with DAA-equipped UAS traffic based on mission profiles modeling future UAS operations. Results indicate DAA alerting distance threshold has a greater effect on DAA system performance than DAA alerting time threshold or ownship trajectory prediction method. Further analysis on the alert lead time (time in advance of predicted loss of well clear at which a DAA alert is first issued) indicated a strong positive correlation between alert lead time and DAA system performance (i.e. the ability of the UAS pilot to maneuver the unmanned aircraft to remain well clear). While bigger distance thresholds had beneficial effects on alert lead time and missed alert rate, it also generated a higher rate of false alerts. In the design and development of DAA alerting and guidance systems, therefore, the positive and negative effects of false alerts and missed alerts should be carefully considered to achieve acceptable alerting system performance by balancing false and missed alerts. The results and methodology presented in this study are expected to help stakeholders, policymakers and standards committees define the appropriate setting of DAA system parameter thresholds for UAS that ensure safety while minimizing operational impacts to the NAS and equipage requirements for its users before DAA operational performance standards can be finalized.

UAS Detect-and-Avoid (DAA) System↗

Space Shuttle SRM Ignition System

This paper presents the Space Shuttle SRM Ignition System, which consists of a large solid propellant main igniter, a small solid propellant initiating igniter and an electromechanical safety and arming device containing two NASA Standard Initiators and a B-KNO3 pyrotechnic booster charge. In development motors, the igniter also has a valve through which CO2 is injected for post-firing quench of the SRM. The igniter has redundant, testable seals at all pressurized joints and three major reusable components; the case, the adapter, and the S&A device. Two development problem areas are discussed. One problem area was transverse mode combustion instability in the main igniter with maximum amplitude of 340 psi peak-to-peak at a frequency of 1500 Hz, which was reduced by a propellant grain configuration change and a change from a 2% aluminum content propellant to a formulation containing 10% aluminum. The other problem area was an excessively rapid rise of thrust in the SRM, which was reduced by reducing the igniter mass flow rate. This mass flow rate reduction was accomplished by removing portions of the grain starpoints in the head end.

Bolieau, C. W.↗

Design with brittle materials - An interdisciplinary educational program

A series of interdisciplinary design courses being offered to senior and graduate engineering students at the University of Washington is described. Attention is given to the concepts and some of the details on group design projects that have been undertaken during the past two years. It is noted that ceramic materials normally demonstrate a large scatter in strength properties. As a consequence, when designing with these materials, the conventional 'mil standards' design stresses with acceptable margins of safety cannot by employed and the designer is forced to accept a probable number of failures in structures of a given brittle material. It is this prediction of the probability of failure for structures of given, well-characterized materials that forms the basis for this series of courses.

Mueller, J. I.↗

NASA DFRC Practices for Prototype Qualification

This slide presentation reviews the practices that Dryden uses for qualification of the prototypes of aircraft. There are many views of aircraft that Dryden has worked with. Included is a discussion of basic considerations for strength, a listing of standards and references, a discussion of typical safety of flight approaches, a discussion of the prototype design, using the X-29A as an example, and requirements for new shapes (i.e., the DAST-ARW1 , F-8 Super Critical Wing, AFTI/F-111 MAW), new control laws (i.e., AAW F-18), new operating envelope (i.e., F-18 HARV), limited sope add-on or substitute structure (i.e., SR-71 LASRE, ECLIPSE, F-16XL SLFC), and extensively modified or replaced structure (i.e., SOFIA, B747SP). There is a listing of causes for the failure of the prototype.

Lokos, William A.↗

Sapphire Viewports for a Venus Probe

A document discusses the creation of a viewport suitable for use on the surface of Venus. These viewports are rated for 500 C and 100 atm pressure with appropriate safety factors and reliability required for incorporation into a Venus Lander. Sapphire windows should easily withstand the chemical, pressure, and temperatures of the Venus surface. Novel fixture designs and seals appropriate to the environment are incorporated, as are materials compatible with exploration vessels. A test cell was fabricated, tested, and leak rate measured. The window features polish specification of the sides and corners, soft metal padding of the sapphire, and a metal C-ring seal. The system safety factor is greater than 2, and standard mechanical design theory was used to size the window, flange, and attachment bolts using available material property data. Maintenance involves simple cleaning of the window aperture surfaces. The only weakness of the system is its moderate rather than low leak rate for vacuum applications.

Bates, Stephen↗

Improvements to Wire Bundle Thermal Modeling for Ampacity Determination

Determining current carrying capacity (ampacity) of wire bundles in aerospace vehicles is critical not only to safety but also to efficient design. Published standards provide guidance on determining wire bundle ampacity but offer little flexibility for configurations where wire bundles of mixed gauges and currents are employed with varying external insulation jacket surface properties. Thermal modeling has been employed in an attempt to develop techniques to assist in ampacity determination for these complex configurations. Previous developments allowed analysis of wire bundle configurations but was constrained to configurations comprised of less than 50 elements. Additionally, for vacuum analyses, configurations with very low emittance external jackets suffered from numerical instability in the solution. A new thermal modeler is presented allowing for larger configurations and is not constrained for low bundle infrared emissivity calculations. Formulation of key internal radiation and interface conductance parameters is discussed including the effects of temperature and air pressure on wire to wire thermal conductance. Test cases comparing model-predicted ampacity and that calculated from standards documents are presented.

Rickman, Steve L.↗

Understanding Risk Tolerance and Building an Effective Safety Culture

Estimates range from 65-90 percent of catastrophic mishaps are due to human error. NASA's human factors-related mishaps causes are estimated at approximately 75 percent. As much as we'd like to error-proof our work environment, even the most automated and complex technical endeavors require human interaction... and are vulnerable to human frailty. Industry and government are focusing not only on human factors integration into hazardous work environments, but also looking for practical approaches to cultivating a strong Safety Culture that diminishes risk. Industry and government organizations have recognized the value of monitoring leading indicators to identify potential risk vulnerabilities. NASA has adapted this approach to assess risk controls associated with hazardous, critical, and complex facilities. NASA's facility risk assessments integrate commercial loss control, OSHA (Occupational Safety and Health Administration) Process Safety, API (American Petroleum Institute) Performance Indicator Standard, and NASA Operational Readiness Inspection concepts to identify risk control vulnerabilities.

Loyd, David↗

Differential Adaptive Stress Testing of Airborne Collision Avoidance Systems

The next-generation Airborne Collision Avoidance System (ACAS X) is currently being developed and tested to replace the Traffic Alert and Collision Avoidance System (TCAS) as the next international standard for collision avoidance. To validate the safety of the system, stress testing in simulation is one of several approaches for analyzing near mid-air collisions (NMACs). Understanding how NMACs can occur is important for characterizing risk and informingdevelopment of the system. Recently, adaptive stress testing (AST) has been proposed as a way to find the most likely path to a failure event. The simulation-based approach accelerates search by formulating stress testing as a sequential decision process then optimizing it using reinforcement learning. The approach has been successfully applied to stress test a prototype of ACAS Xin various simulated aircraft encounters. In some applications, we are not as interestedin the system's absolute performance as its performance relative to another system. Such situations arise, for example, during regression testing or when deciding whether a new system should replace an existing system. In our collision avoidance application, we are interested in finding cases where ACAS X fails but TCAS succeeds in resolving a conflict. Existing approaches do not provide an efficient means to perform this type of analysis. This paper extends the AST approach to differential analysis by searching two simulators simultaneously and maximizing the difference between their outcomes. We call this approach differential adaptive stress testing (DAST). We apply DAST to compare a prototype of ACAS X against TCAS and show examples of encounters found by the algorithm.

Lee, Ritchie↗

Improvements to Wire Bundle Thermal Modeling for Ampacity Determination

Abstract - Determining current carrying capacity (ampacity) of wire bundles in aerospace vehicles is critical not only to safety but also to efficient design. Published standards provide guidance on determining wire bundle ampacity but offer little flexibility for configurations where wire bundles of mixed gauges and currents are employed with various external insulation jacket surface properties. Thermal modeling has been employed in an attempt to develop techniques to assist in ampacity determination for these complex configurations. An earlier tool allowed analysis of wire bundle configurations but was constrained to configurations comprised of less than 50 elements. Additionally, for vacuum analyses, configurations with very low emittance external jackets suffered from numerical instability in the solution. A new thermal modeler is presented allowing for larger configurations and is not constrained by low bundle jacket surface infrared emittance calculations. Formulation of key internal radiation and interface conductance parameters is discussed including the effects of temperature and ambient air pressure on wire-to-wire thermal conductance. Test cases comparing model-predicted ampacity and that calculated from standards documents are presented.

Steven L Rickman↗