Search NASA⌕ Search

SEARCH · Search NASA

Results for “System Safety Assessment”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 253 records · Page 14
All sourcesNASA NTRSDOE OSTI
NASA NTRS2023

Psychophysiological Research Methods to Assess Airline Flight Crew Resilient Performance in High-Fidelity Flight Simulation Scenarios

New concepts in aviation system safety thinking have emerged to consider not only what may go wrong, but also what can be learned when things go right. This approach forms a more comprehensive approach to system safety thinking. A need exists for methods to enable a better understanding of human contributions to aviation safety and how they may inform Safety Management Systems (SMS). A high-fidelity 737-800 simulation study was conducted to study how current type-rated commercial airline flight crews anticipate, monitor, respond to, and learn from expected and unexpected disturbances during line operations. A number of dependent measures were collected that included traditional SMS data types, but also non-traditional safety data to include multiple psychophysiological metrics. This paper describes the psychophysiological measures results that evinced the capability of measures to help identify resilient flight crews. Implications for future research and design of future In-time Aviation Safety Management Systems are discussed.

Psychophysiology↗
NASA NTRS2016

[MaRS Project]

The Space Exploration Division of the Safety and Mission Assurances Directorate is responsible for reducing the risk to Human Space Flight Programs by providing system safety, reliability, and risk analysis. The Risk & Reliability Analysis branch plays a part in this by utilizing Probabilistic Risk Assessment (PRA) and Reliability and Maintainability (R&M) tools to identify possible types of failure and effective solutions. A continuous effort of this branch is MaRS, or Mass and Reliability System, a tool that was the focus of this internship. Future long duration space missions will have to find a balance between the mass and reliability of their spare parts. They will be unable take spares of everything and will have to determine what is most likely to require maintenance and spares. Currently there is no database that combines mass and reliability data of low level space-grade components. MaRS aims to be the first database to do this. The data in MaRS will be based on the hardware flown on the International Space Stations (ISS). The components on the ISS have a long history and are well documented, making them the perfect source. Currently, MaRS is a functioning excel workbook database; the backend is complete and only requires optimization. MaRS has been populated with all the assemblies and their components that are used on the ISS; the failures of these components are updated regularly. This project was a continuation on the efforts of previous intern groups. Once complete, R&M engineers working on future space flight missions will be able to quickly access failure and mass data on assemblies and components, allowing them to make important decisions and tradeoffs.

Aruljothi, Arunvenkatesh↗
NASA NTRS2012

Terrain Safety Assessment in Support of the Mars Science Laboratory Mission

In August 2012, the Mars Science Laboratory (MSL) mission will pioneer the next generation of robotic Entry, Descent, and Landing (EDL) systems by delivering the largest and most capable rover to date to the surface of Mars. The process to select the MSL landing site took over five years and began with over 50 initial candidate sites from which four finalist sites were chosen. The four finalist sites were examined in detail to assess overall science merit, EDL safety, and rover traversability on the surface. Ultimately, the engineering assessments demonstrated a high level of safety and robustness at all four finalist sites and differences in the assessment across those sites were small enough that neither EDL safety nor rover traversability considerations could significantly discriminate among the final four sites. Thus the MSL landing site at Gale Crater was selected from among the four finalists primarily on the basis of science considerations.

Kipp, Devin↗
NASA NTRS2011

Space Shuttle Program (SSP) Orbiter Main Propulsion System (MPS) Gaseous Hydrogen (GH2) Flow Control Valve (FCV) Poppet Eddy Current (EC) Inspection Probability of Detection (POD) Study: Appendices - Volume 2

The Director of the NASA Engineering and Safety Center (NESC), requested an independent assessment of the anomalous gaseous hydrogen (GH2) flow incident on the Space Shuttle Program (SSP) Orbiter Vehicle (OV)-105 during the Space Transportation System (STS)-126 mission. The main propulsion system (MPS) engine #2 GH2 flow control valve (FCV) LV-57 transition from low towards high flow position without being commanded. Post-flight examination revealed that the FCV LV-57 poppet had experienced a fatigue failure that liberated a section of the poppet flange. The NESC assessment provided a peer review of the computational fluid dynamics (CFD), stress analysis, and impact testing. A probability of detection (POD) study was requested by the SSP Orbiter Project for the eddy current (EC) nondestructive evaluation (NDE) techniques that were developed to inspect the flight FCV poppets. This report contains the Appendices to the main report.

Piascik, Robert S.↗
NASA NTRS1978

Automated Mixed Traffic Vehicle (AMTV) technology and safety study

Technology and safety related to the implementation of an Automated Mixed Traffic Vehicle (AMTV) system are discussed. System concepts and technology status were reviewed and areas where further development is needed are identified. Failure and hazard modes were also analyzed and methods for prevention were suggested. The results presented are intended as a guide for further efforts in AMTV system design and technology development for both near term and long term applications. The AMTV systems discussed include a low speed system, and a hybrid system consisting of low speed sections and high speed sections operating in a semi-guideway. The safety analysis identified hazards that may arise in a properly functioning AMTV system, as well as hardware failure modes. Safety related failure modes were emphasized. A risk assessment was performed in order to create a priority order and significant hazards and failure modes were summarized. Corrective measures were proposed for each hazard.

Johnston, A. R.↗
NASA NTRS1985

Operational efficiency in STS cargo processing

A multifaceted program is presented that addresses both the operational aspects of Shuttle-cargo integration and the needs of the STS Cargo Community. The program consists of the following key elements: (1) processing team awareness of cargo needs and requirements; (2) standardization of Orbiter preparation and cargo integration procedures and methods; (3) maximum application of state-of-the-art ADP techniques in all relevant areas; (4) continual review of cargo integration facility and ground system capabilities versus requirements and enhancement; (5) continual assessment of proposed cargo processing changes for safety and other needs; and (6) review of cargo processing philosophies, policies, and concepts for potential improvements.

Wilson, R. E.↗
NASA NTRS1987

Incipient fault detection and power system protection for spaceborne systems

A program was initiated to study the feasibility of using advanced terrestrial power system protection techniques for spacecraft power systems. It was designed to enhance and automate spacecraft power distribution systems in the areas of safety, reliability and maintenance. The proposed power management/distribution system is described as well as security assessment and control, incipient and low current fault detection, and the proposed spaceborne protection system. It is noted that the intelligent remote power controller permits the implementation of digital relaying algorithms with both adaptive and programmable characteristics.

Russell, B. Don↗
NASA NTRS2012

Model Calibration Efforts for the International Space Station's Solar Array Mast

The International Space Station (ISS) relies on sixteen solar-voltaic blankets to provide electrical power to the station. Each pair of blankets is supported by a deployable boom called the Folding Articulated Square Truss Mast (FAST Mast). At certain ISS attitudes, the solar arrays can be positioned in such a way that shadowing of either one or three longerons causes an unexpected asymmetric thermal loading that if unchecked can exceed the operational stability limits of the mast. Work in this paper documents part of an independent NASA Engineering and Safety Center effort to assess the existing operational limits. Because of the complexity of the system, the problem is being worked using a building-block progression from components (longerons), to units (single or multiple bays), to assembly (full mast). The paper presents results from efforts to calibrate the longeron components. The work includes experimental testing of two types of longerons (straight and tapered), development of Finite Element (FE) models, development of parameter uncertainty models, and the establishment of a calibration and validation process to demonstrate adequacy of the models. Models in the context of this paper refer to both FE model and probabilistic parameter models. Results from model calibration of the straight longerons show that the model is capable of predicting the mean load, axial strain, and bending strain. For validation, parameter values obtained from calibration of straight longerons are used to validate experimental results for the tapered longerons.

Elliott, Kenny B.↗
NASA NTRS2017

Evaluating the Stability of NASA's Space Launch System with Adaptive Augmenting Control

NASA's baseline Space Launch System (SLS) flight control system (FCS) design includes an adaptive augmenting control (AAC) component that modifies the attitude control system response to provide the classical gain-scheduled control architecture with additional performance and robustness. The NASA Engineering and Safety Center (NESC) teamed with the Space Launch System (SLS) Program to perform a comprehensive assessment of the stability and robustness of the FCS with AAC. This paper provides an overview of the approach, specific analysis techniques, and outcomes that were particularly relevant for the SLS Program. Multiple analysis techniques that specifically target the nonlinear AAC were commissioned as part of this assessment, which was completed outside of the Program's standard design analysis cycle. The following analyses were included, with each technique adding its own valuable insights: Lyapunov-based stability analysis, classical stability analysis with static AAC gain variations, circle criterion-based analysis of the FCS with a time-varying element, time-domain stability margin assessment, Monte Carlo simulations with expanded dispersions, and an extensive set of stressing cases. Several of the completed analyses focused on determining whether the inclusion of AAC introduced risk to the FCS, while others quantified the benefits of the adaptive augmentation.

Tannen S Vanzwieten↗
NASA NTRSDate not supplied

Independent Reliability Assessment of the NASA GSFC Laser Transmitter for the LISA Program

The Laser Interferometer Space Antenna (LISA) is a partnership between the European Space Agency (ESA) and NASA to build a Gravitational Wave (GW) observatory. The observatory, which consists of a three-spacecraft constellation with a nominal separation of 2.5 million km between each spacecraft, provides a tool for scientists to directly detect gravitational waves generated from various astronomical phenomena in a waveband that is not accessible from Earth. NASA is developing laser transmitters as one of the potential US contributions to LISA. The NASA laser design leverages lessons learned from previous flight missions and included the latest technologies in photonics packaging and reliability engineering to ensure a laser lifetime of >16 years covering integration and test through a possible extended mission phase. As part of the laser development process, NASA’s Goddard Space Flight Center (GSFC) requested support from the NASA Engineering and Safety Center (NESC) to independently assess the Technology Readiness Level (TRL) of the LISA Laser System (LS). The independent assessment included the following tasks: (a) assess the design for weaknesses and suggest improvements to mitigate risks, (b) assess the laser reliability plan for weaknesses and suggest improvements to mitigate risks and improve effectiveness, and (c) assess the current redundancy plan on laser subsystems for weaknesses and suggest improvements to mitigate risks and improve effectiveness. The NESC team comprised of a team of subject matter experts (SMEs) and performed a 12-month review of every aspect of the laser design. We present the assessment findings and the current development progress of the LISA laser to meet the mission requirements with a delivery of a form, fit, and functional TRL6 laser to the LSIA mission by late 2023.

LISA↗
NASA NTRSDate not supplied

Independent Reliability Assessment of the Laser Transmitter for the ESA-NASA Laser Interferometer Space Antenna (LISA) Program

As part of the laser development process, NASA’s Goddard Space Flight Center (GSFC) requested support from the NASA Engineering and Safety Center (NESC) to independently assess the Technology Readiness Level (TRL) of the LISA Laser System (LS). The independent assessment included the following tasks: (a) assess the design for weaknesses and suggest improvements to mitigate risks, (b) assess the laser reliability plan for weaknesses and suggest improvements to mitigate risks and improve effectiveness, and (c) assess the current redundancy plan on laser subsystems for weaknesses and suggest improvements to mitigate risks and improve effectiveness. The presentation will focus on the assessment findings and the current development progress of the LISA laser to meet the mission requirements with a delivery of a form, fit, and functional TRL6 laser to the LISA mission by late 2023.

Laser Interferometry↗
NASA NTRSDate not supplied

Towards Computational Functional Hazard Assessment (CFHA): A Gap Analysis and Concept for Emerging Aviation Systems

Given the current evolution of the National Airspace and future trajectory towards novel and evolving operations with varying levels of autonomy, complexity, and acceptable risk, there is an opportunity to support safety assurance by extending existing methodologies, such as Functional Hazard Assessment (FHA). In response to challenges in performing FHA for novel aviation concepts, we propose a concept for Computational Functional Hazard Assessment (CFHA), which provides processes, methods, and tools for incorporating external data to facilitate further exploration of the hazard space iterativelty throughout the design process. The core components of CFHA involve knowledge capture from historical and operational data, functional architecture specification via a formal modeling language, and simulation for hazardous scenario analysis. Through this concept, we aim to adapt conventional safety assessment to address the increasingly complex hazard space generated from emerging operations.

Seydou Mbaye↗
NASA NTRSDate not supplied

Towards Functional Hazard Assessment (CFHA): A Gap Analysis and Concept for Emerging Aviation Systems

Given the current evolution of the National Airspace and future trajectory towards novel and evolving operations with varying levels of autonomy, complexity, and acceptable risk, there is an opportunity to support safety assurance by extending existing methodologies, such as Functional Hazard Assessment (FHA). In response to challenges in performing FHA for novel aviation concepts, we propose a concept for Computational Functional Hazard Assessment (CFHA), which provides processes, methods, and tools for incorporating external data to facilitate further exploration of the hazard space iterativelty throughout the design process. The core components of CFHA involve knowledge capture from historical and operational data, functional architecture specification via a formal modeling language, and simulation for hazardous scenario analysis. Through this concept, we aim to adapt conventional safety assessment to address the increasingly complex hazard space generated from emerging operations.

Seydou Mbaye↗
NASA NTRS2015

Planning the Unplanned Experiment: Assessing the Efficacy of Standards for Safety Critical Software

We need well-founded means of determining whether software is t for use in safety-critical applications. While software in industries such as aviation has an excellent safety record, the fact that software aws have contributed to deaths illustrates the need for justi ably high con dence in software. It is often argued that software is t for safety-critical use because it conforms to a standard for software in safety-critical systems. But little is known about whether such standards `work.' Reliance upon a standard without knowing whether it works is an experiment; without collecting data to assess the standard, this experiment is unplanned. This paper reports on a workshop intended to explore how standards could practicably be assessed. Planning the Unplanned Experiment: Assessing the Ecacy of Standards for Safety Critical Software (AESSCS) was held on 13 May 2014 in conjunction with the European Dependable Computing Conference (EDCC). We summarize and elaborate on the workshop's discussion of the topic, including both the presented positions and the dialogue that ensued.

Graydon, Patrick J.↗
NASA NTRS2000

Safety Metrics for Human-Computer Controlled Systems

The rapid growth of computer technology and innovation has played a significant role in the rise of computer automation of human tasks in modem production systems across all industries. Although the rationale for automation has been to eliminate "human error" or to relieve humans from manual repetitive tasks, various computer-related hazards and accidents have emerged as a direct result of increased system complexity attributed to computer automation. The risk assessment techniques utilized for electromechanical systems are not suitable for today's software-intensive systems or complex human-computer controlled systems.This thesis will propose a new systemic model-based framework for analyzing risk in safety-critical systems where both computers and humans are controlling safety-critical functions. A new systems accident model will be developed based upon modem systems theory and human cognitive processes to better characterize system accidents, the role of human operators, and the influence of software in its direct control of significant system functions Better risk assessments will then be achievable through the application of this new framework to complex human-computer controlled systems.

Leveson, Nancy G↗
NASA NTRS2023

In-time Safety Management Capabilities for Wildland Fire Management Aircraft Operations - A Gap Assessment

This study assesses the in-time safety management services, functions, and capabilities (SFCs)being investigated by NASA’s System Wide Safety (SWS) project to determine applicability to the project’s planned safety demonstrator (SD-1) for wildland fire management. The purpose of this work is to evaluate how effectively existing SFCs address the different hazards presented by a safety demonstrator operating in a wildland fire management scenario. This will help inform decision makers which SFCs would provide the most cost-effective solutions to fill the hazard gaps for further research. Hazards for the safety demonstrator wildland fire management scenario were collated, and the SFCs were evaluated for each hazard based on how applicable and effective the unmodified SFCs are at addressing the hazard. The SFCs are also evaluated for the gap type that needs to be addressed to improve the SFC effectiveness for the given hazard. The key finding of this assessment is that all the existing SFCs require at least some research and development to adapt to the safety demonstrator. No single SFC fully addresses any of the safety demonstrator operation hazards. The result of this study will be used to determine the performance of current SFCs and suggest strategies to adapt existing SFCs or add new SFCs.

Patricia Revolinsky↗
NASA NTRS1996

A Risk Assessment Model for Reduced Aircraft Separation: A Quantitative Method to Evaluate the Safety of Free Flight

As new technologies and procedures are introduced into the National Airspace System, whether they are intended to improve efficiency, capacity, or safety level, the quantification of potential changes in safety levels is of vital concern. Applications of technology can improve safety levels and allow the reduction of separation standards. An excellent example is the Precision Runway Monitor (PRM). By taking advantage of the surveillance and display advances of PRM, airports can run instrument parallel approaches to runways separated by 3400 feet with the same level of safety as parallel approaches to runways separated by 4300 feet using the standard technology. Despite a wealth of information from flight operations and testing programs, there is no readily quantifiable relationship between numerical safety levels and the separation standards that apply to aircraft on final approach. This paper presents a modeling approach to quantify the risk associated with reducing separation on final approach. Reducing aircraft separation, both laterally and longitudinally, has been the goal of several aviation R&D programs over the past several years. Many of these programs have focused on technological solutions to improve navigation accuracy, surveillance accuracy, aircraft situational awareness, controller situational awareness, and other technical and operational factors that are vital to maintaining flight safety. The risk assessment model relates different types of potential aircraft accidents and incidents and their contribution to overall accident risk. The framework links accident risks to a hierarchy of failsafe mechanisms characterized by procedures and interventions. The model will be used to assess the overall level of safety associated with reducing separation standards and the introduction of new technology and procedures, as envisaged under the Free Flight concept. The model framework can be applied to various aircraft scenarios, including parallel and in-trail approaches. This research was performed under contract to NASA and in cooperation with the FAA's Safety Division (ASY).

Cassell, Rick↗
NASA NTRSDate not supplied

A Technology Maturation Plan for the Development of Nuclear Electric Propulsion

Over the last two years NASA’s Space Nuclear Propulsion (SNP) Project formulated a Technology Maturation Plan (TMP) for development of the sub-systems needed for a MW-class Nuclear Electric Propulsion (NEP) system which, combined with a high thrust chemical propulsion stage, would be suitable for human missions to Mars. Two recent assessments, independently conducted by the National Academies for Science, Engineering, and Medicine and the NASA Engineering & Safety Center, concluded that the technologies required for a high-power NEP system are immature and the attendant risks insufficiently quantified to justify initiating a flight project. For NEP to be available as a viable option to meet flight opportunities in the late 2030s / 2040s time frame, development of the key sub-systems must begin now. SNP has subdivided the NEP system into five Critical Technology Elements (CTE): the nuclear reactor, power conversion, power management and distribution, electric propulsion sub-system, and the primary heat rejection system. Development plans for each of these CTEs have been drafted which will serve as the template for a focused milestone-driven research and development campaign intended to advance each CTE to Technology Readiness Level (TRL) 5. This will be accomplished by building and testing hardware at relevant power levels (~ 1 MW) and for relevant durations (2,500 hours, ~10% of the required operational lifetime) and conducting numerical modeling of the CTEs anchored by the accumulated test data to predict system performance and reliability. Concurrent with this work, high-level coupled system/mission modeling will be carried out to refine the key performance parameters that the various CTEs must achieve. Non-advocate reviews will be held at milestone points to assess progress and inform down-select decisions. The strategy for formulating the TMP was described previously; this paper describes ongoing progress on the drafting and baselining of the plan, including key specific details.

Space Nuclear Propulsion↗