Search NASA⌕ Search

SEARCH · Search NASA

Results for “Safety Controls”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 253 records · Page 14

“Terrain, Terrain Pull-up!” Air Carrier Controlled Flight Toward Terrain Incidents Reported to the NASA ASRS

The Aviation Safety Reporting System (ASRS) in a partnership between the National Aeronautics and Space Administration (NASA), the Federal Aviation Administration (FAA), participating carriers, and labor organizations. It is designed to improve the National Airspace System by collecting and studying reports detailing unsafe conditions and events in the aviation industry. Employees are able to report safety issues or concerns with confidentiality and without fear of discipline. Safety reports highlighting controlled flight toward terrain incidents as reported to the NASA ASRS.

confidential reporting↗

A Piloted Evaluation of Damage Accommodating Flight Control Using a Remotely Piloted Vehicle

Toward the goal of reducing the fatal accident rate of large transport airplanes due to loss of control, the NASA Aviation Safety Program has conducted research into flight control technologies that can provide resilient control of airplanes under adverse flight conditions, including damage and failure. As part of the safety program s Integrated Resilient Aircraft Control Project, the NASA Airborne Subscale Transport Aircraft Research system was designed to address the challenges associated with the safe and efficient subscale flight testing of research control laws under adverse flight conditions. This paper presents the results of a series of pilot evaluations of several flight control algorithms used during an offset-to-landing task conducted at altitude. The purpose of this investigation was to assess the ability of various flight control technologies to prevent loss of control as stability and control characteristics were degraded. During the course of 8 research flights, data were recorded while one task was repeatedly executed by a single evaluation pilot. Two generic failures, which degraded stability and control characteristics, were simulated inflight for each of the 9 different flight control laws that were tested. The flight control laws included three different adaptive control methodologies, several linear multivariable designs, a linear robust design, a linear stability augmentation system, and a direct open-loop control mode. Based on pilot Cooper-Harper Ratings obtained for this test, the adaptive flight control laws provided the greatest overall benefit for the stability and control degradation scenarios that were considered. Also, all controllers tested provided a significant improvement in handling qualities over the direct open-loop control mode.

Cunningham, Kevin↗

Implementing Software Safety in the NASA Environment

Until recently, NASA did not consider allowing computers total control of flight systems. Human operators, via hardware, have constituted the ultimate safety control. In an attempt to reduce costs, NASA has come to rely more and more heavily on computers and software to control space missions. (For example. software is now planned to control most of the operational functions of the International Space Station.) Thus the need for systematic software safety programs has become crucial for mission success. Concurrent engineering principles dictate that safety should be designed into software up front, not tested into the software after the fact. 'Cost of Quality' studies have statistics and metrics to prove the value of building quality and safety into the development cycle. Unfortunately, most software engineers are not familiar with designing for safety, and most safety engineers are not software experts. Software written to specifications which have not been safety analyzed is a major source of computer related accidents. Safer software is achieved step by step throughout the system and software life cycle. It is a process that includes requirements definition, hazard analyses, formal software inspections, safety analyses, testing, and maintenance. The greatest emphasis is placed on clearly and completely defining system and software requirements, including safety and reliability requirements. Unfortunately, development and review of requirements are the weakest link in the process. While some of the more academic methods, e.g. mathematical models, may help bring about safer software, this paper proposes the use of currently approved software methodologies, and sound software and assurance practices to show how, to a large degree, safety can be designed into software from the start. NASA's approach today is to first conduct a preliminary system hazard analysis (PHA) during the concept and planning phase of a project. This determines the overall hazard potential of the system to be built. Shortly thereafter, as the system requirements are being defined, the second iteration of hazard analyses takes place, the systems hazard analysis (SHA). During the systems requirements phase, decisions are made as to what functions of the system will be the responsibility of software. This is the most critical time to affect the safety of the software. From this point, software safety analyses as well as software engineering practices are the main focus for assuring safe software. While many of the steps proposed in this paper seem like just sound engineering practices, they are the best technical and most cost effective means to assure safe software within a safe system.

Wetherholt, Martha S.↗

The Goddard Space Flight Center (GSFC) robotics technology testbed

Much of the technology planned for use in NASA's Flight Telerobotic Servicer (FTS) and the Demonstration Test Flight (DTF) is relatively new and untested. To provide the answers needed to design safe, reliable, and fully functional robotics for flight, NASA/GSFC is developing a robotics technology testbed for research of issues such as zero-g robot control, dual arm teleoperation, simulations, and hierarchical control using a high level programming language. The testbed will be used to investigate these high risk technologies required for the FTS and DTF projects. The robotics technology testbed is centered around the dual arm teleoperation of a pair of 7 degree-of-freedom (DOF) manipulators, each with their own 6-DOF mini-master hand controllers. Several levels of safety are implemented using the control processor, a separate watchdog computer, and other low level features. High speed input/output ports allow the control processor to interface to a simulation workstation: all or part of the testbed hardware can be used in real time dynamic simulation of the testbed operations, allowing a quick and safe means for testing new control strategies. The NASA/National Bureau of Standards Standard Reference Model for Telerobot Control System Architecture (NASREM) hierarchical control scheme, is being used as the reference standard for system design. All software developed for the testbed, excluding some of simulation workstation software, is being developed in Ada. The testbed is being developed in phases. The first phase, which is nearing completion, and highlights future developments is described.

Schnurr, Rick↗

Regulation of the central safety factor and normalized beta under low NBI torque in DIII-D

An algorithm has been designed to simultaneously control the central safety factor (q 0 ) and normalized beta (β N ) while ensuring near-zero torque from the neutral beam injection in DIII-D. Feedback control of q 0 and β N in tokamaks can be beneficial due to the close relationship that these variables have with plasma performance and magneto-hydrodynamic stability. In addition, low neutral-beam-torque conditions are of special interest in present devices because future burning-plasma tokamaks such as ITER will most likely operate at very low plasma rotation. The control synthesis of the algorithm presented in this work is based on a linearized, one-dimensional (1D) model of the current-profile dynamics coupled with a zero-dimensional (0D) plasma-energy balance. The actuators considered are neutral beam injection and electron-cyclotron heating and current drive, and discrete logic determines the neutral-beam injection powers that deliver near-zero torque. Here, the algorithm has been tested in nonlinear, 1D simulations using COTSIM (Control-Oriented Transport SIMulator) and in DIII-D experiments, demonstrating satisfactory performance.

70 PLASMA PHYSICS AND FUSION TECHNOLOGY↗

Design and verification of a multiple fault tolerant control system for STS applications using computer simulation

General Dynamics/Convair is under NASA contract to integrate the Centaur upper stage into the space transportation system for future planetary missions. This requires that control of all safety critical functions be two-failure tolerant. The control system developed consists of five asynchronous computers, each contributing at their outputs to a 3-out-of-5 voting plane. Subsystem control is based on an end function redundancy management scheme. Analysis of multiple component failures and worst-case time-phase asynchrony among the computers is performed by a real-time computer simulation. The simulation emulates the hardware and subsystem interfaces, wire by wire, providing assessibility to any component for the insertion of preprogrammed failures. Observability is provided via a graphics system and diagnostic software. The simulation provides an engineering tool where the integrity of control system hardware and imbedded software can be demonstrated.

Szatkowski, G. P.↗

Design of Low Complexity Model Reference Adaptive Controllers

Flight research experiments have demonstrated that adaptive flight controls can be an effective technology for improving aircraft safety in the event of failures or damage. However, the nonlinear, timevarying nature of adaptive algorithms continues to challenge traditional methods for the verification and validation testing of safety-critical flight control systems. Increasingly complex adaptive control theories and designs are emerging, but only make testing challenges more difficult. A potential first step toward the acceptance of adaptive flight controllers by aircraft manufacturers, operators, and certification authorities is a very simple design that operates as an augmentation to a non-adaptive baseline controller. Three such controllers were developed as part of a National Aeronautics and Space Administration flight research experiment to determine the appropriate level of complexity required to restore acceptable handling qualities to an aircraft that has suffered failures or damage. The controllers consist of the same basic design, but incorporate incrementally-increasing levels of complexity. Derivations of the controllers and their adaptive parameter update laws are presented along with details of the controllers implementations.

Hanson, Curt↗

Safety Assurance Framework for Nuclear Digital Instrumentation and Control Software

Software in digital instrumentation and control (D&C) systems poses unique challenges for the safety assurance of nuclear power plants. Through a literature survey of 21 sources, we analyzed various claims, arguments, and evidence used in safety assurance cases across industries. These were organized into a Goal Structuring Notation (GSN) safety assurance case framework to organize and visualize the various arguments for DI&C safety. We developed a classification for the levels of the framework, which can be used in other safety assurance cases to improve clarity.

46 - INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AN↗

Practical Applications of Cosmic Ray Science: Spacecraft, Aircraft, Ground Based Computation and Control Systems and Human Health and Safety

In this paper we review the discovery of cosmic ray effects on the performance and reliability of microelectronic systems as well as on human health and safety, as well as the development of the engineering and health science tools used to evaluate and mitigate cosmic ray effects in earth surface, atmospheric flight, and space flight environments. Three twentieth century technological developments, 1) high altitude commercial and military aircraft; 2) manned and unmanned spacecraft; and 3) increasingly complex and sensitive solid state micro-electronics systems, have driven an ongoing evolution of basic cosmic ray science into a set of practical engineering tools (e.g. ground based test methods as well as high energy particle transport and reaction codes) needed to design, test, and verify the safety and reliability of modern complex electronic systems as well as effects on human health and safety. The effects of primary cosmic ray particles, and secondary particle showers produced by nuclear reactions with spacecraft materials, can determine the design and verification processes (as well as the total dollar cost) for manned and unmanned spacecraft avionics systems. Similar considerations apply to commercial and military aircraft operating at high latitudes and altitudes near the atmospheric Pfotzer maximum. Even ground based computational and controls systems can be negatively affected by secondary particle showers at the Earth's surface, especially if the net target area of the sensitive electronic system components is large. Accumulation of both primary cosmic ray and secondary cosmic ray induced particle shower radiation dose is an important health and safety consideration for commercial or military air crews operating at high altitude/latitude and is also one of the most important factors presently limiting manned space flight operations beyond low-Earth orbit (LEO).

Atwell, William↗

Practical Applications of Cosmic Ray Science: Spacecraft, Aircraft, Ground-Based Computation and Control Systems, and Human Health and Safety

Three twentieth century technological developments, 1) high altitude commercial and military aircraft; 2) manned and unmanned spacecraft; and 3) increasingly complex and sensitive solid state micro-electronics systems, have driven an ongoing evolution of basic cosmic ray science into a set of practical engineering tools needed to design, test, and verify the safety and reliability of modern complex technological systems. The effects of primary cosmic ray particles and secondary particle showers produced by nuclear reactions with the atmosphere, can determine the design and verification processes (as well as the total dollar cost) for manned and unmanned spacecraft avionics systems. Similar considerations apply to commercial and military aircraft operating at high latitudes and altitudes near the atmospheric Pfotzer maximum. Even ground based computational and controls systems can be negatively affected by secondary particle showers at the Earth s surface, especially if the net target area of the sensitive electronic system components is large. Finally, accumulation of both primary cosmic ray and secondary cosmic ray induced particle shower radiation dose is an important health and safety consideration for commercial or military air crews operating at high altitude/latitude and is also one of the most important factors presently limiting manned space flight operations beyond low-Earth orbit (LEO). In this paper we review the discovery of cosmic ray effects on the performance and reliability of microelectronic systems as well as human health and the development of the engineering and health science tools used to evaluate and mitigate cosmic ray effects in ground-based atmospheric flight, and space flight environments. Ground test methods applied to microelectronic components and systems are used in combinations with radiation transport and reaction codes to predict the performance of microelectronic systems in their operating environments. Similar radiation transport codes are used to evaluate possible human health effects of cosmic ray exposure, however, the health effects are based on worst-case analysis and extrapolation of a very limited human exposure data base combined with some limited experimental animal data. Finally, the limitations on human space operations beyond low-Earth orbit imposed by long term exposure to galactic cosmic rays are discussed.

Atwell, William↗

Mechanical Backup For Fly-By-Wire Control System

Mechanical device eliminates need for redundant fly-by-wire subsystems. Main components are two linkages. One connected to control column in conventional, reversible control system. Other slides inside first linkage and connected to pilot's control wheel. In addition to aircraft applications, design used in control systems in which computer control desirable but safety backup systems required; for example, in boat rudders, engine controls in boats and automobiles, and controls in construction equipment.

Stewart, Eric C.↗

Propulsion Controls Modeling for a Small Turbofan Engine

A nonlinear dynamic model and propulsion controller are developed for a small-scale turbofan engine. The small-scale turbofan engine is based on the Price Induction company's DGEN 380, one of the few turbofan engines targeted for the personal light jet category. Comparisons of the nonlinear dynamic turbofan engine model to actual DGEN 380 engine test data and a Price Induction simulation are provided. During engine transients, the nonlinear model typically agrees within 10 percent error, even though the nonlinear model was developed from limited available engine data. A gain scheduled proportional integral low speed shaft controller with limiter safety logic is created to replicate the baseline DGEN 380 controller. The new controller provides desired gain and phase margins and is verified to meet Federal Aviation Administration transient propulsion system requirements. In understanding benefits, there is a need to move beyond simulation for the demonstration of advanced control architectures and technologies by using real-time systems and hardware. The small-scale DGEN 380 provides a cost effective means to accomplish advanced controls testing on a relevant turbofan engine platform.

jet propulsion↗

Time Triggered Protocol (TTP) for Integration Modular Avionics (IMA)

This viewgraph presentation is a review of the Time Triggered Protocol, designed to work with NASA's Integrated Safety-Critical Advanced Avionics Communication and Control (ISAACC) system. ISAACC is the product of the Propulsion High-Impact Avionics Technologies (PHIAT) project at NASA Marshall Space Flight Center (MSFC) during FY03 to the end of FY05. The goal is an avionics architecture suitable for control and monitoring of safety critical systems of manned spacecraft. It must be scalable to allow its use in robotic vehicles or launch pad and propulsion test stand monitoring and control systems. The developed IMA should have: a common power supply and rugged chassis for a set of modules, many upgradeable software functions on one module (i.e. processing unit Reduced weight, straightforward update and system integration. It is also important that it have Partitioning and a Memory Management Unit (MMU)

Gwaltney, David A.↗

Design verification of SIFT

A SIFT reliable aircraft control computer system, designed to meet the ultrahigh reliability required for safety critical flight control applications by use of processor replications and voting, was constructed for SRI, and delivered to NASA Langley for evaluation in the AIRLAB. To increase confidence in the reliability projections for SIFT, produced by a Markov reliability model, SRI constructed a formal specification, defining the meaning of reliability in the context of flight control. A further series of specifications defined, in increasing detail, the design of SIFT down to pre- and post-conditions on Pascal code procedures. Mechanically checked mathematical proofs were constructed to demonstrate that the more detailed design specifications for SIFT do indeed imply the formal reliability requirement. An additional specification defined some of the assumptions made about SIFT by the Markov model, and further proofs were constructed to show that these assumptions, as expressed by that specification, did indeed follow from the more detailed design specifications for SIFT. This report provides an outline of the methodology used for this hierarchical specification and proof, and describes the various specifications and proofs performed.

Moser, Louise↗

Predicting Time Series Outputs and Time-to-Failure for an Aircraft Controller Using Bayesian Modeling

Safety of unmanned aerial systems (UAS) is paramount, but the large number of dynamically changing controller parameters makes it hard to determine if the system is currently stable, and the time before loss of control if not. We propose a hierarchical statistical model using Treed Gaussian Processes to predict (i) whether a flight will be stable (success) or become unstable (failure), (ii) the time-to-failure if unstable, and (iii) time series outputs for flight variables. We first classify the current flight input into success or failure types, and then use separate models for each class to predict the time-to-failure and time series outputs. As different inputs may cause failures at different times, we have to model variable length output curves. We use a basis representation for curves and learn the mappings from input to basis coefficients. We demonstrate the effectiveness of our prediction methods on a NASA neuro-adaptive flight control system.

Statistics↗

Recommended safety guides for industrial laboratories and shops

Booklet provides references to 29 publications providing information on hazard control and approved safety practices. Areas include pressurized gas and vacuum systems. Guidelines are presented for safeguarding facilities where machinery, equipment, electrical devices, or hazardous chemicals are used.

Allison, W. W.↗

Aerospace technology and commercial nuclear power; Proceedings of the Workshop Conference, Williamsburg, VA, November 18-20, 1981

An attempt has been made to compare the technologies, institutions and procedures of the aerospace and commercial nuclear power industries, in order to characterize similarities and contrasts as well as to identify the most fruitful means by which to transfer information, technology, and procedures between the two industries. The seven working groups involved in this study took as their topics powerplant design formulation and effectiveness, plant safety and operations, powerplant control technology and integration, economic and financial analyses, public relations, and the management of nuclear waste and spent fuel. Consequential differences are noted between the two industries in matters of certification and licencing procedures, assignment of responsibility for both safety and financial performance, and public viewpoint. Areas for beneficial interaction include systems management and control and safety system technology. No individual items are abstracted in this volume

Grey, J.↗

Microbial Food Safety for Space Crops

This presentation will highlight the unique challenges and opportunities of microbial food safety for space grown produce as part of a joint webinar on controlled environment food safety.

Veggie↗