Search NASA⌕ Search

SEARCH · Search NASA

Results for “link failure”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 253 records · Page 14
All sourcesNASA NTRSDOE OSTI
NASA NTRS1989

The effect of hydrogen on the deformation behavior of a single crystal nickel-base superalloy

The effect of hydrogen on the tensile deformation behavior of PWA 1480 is presented. Tensile tests were interrupted at different plastic strain levels to observe the development of the dislocation structure. Transmission electron microscopy (TEM) foils were cut perpendicular to the tensile axis to allow the deformation of both phases to be simultaneously observed as well as parallel to zone axes (III) to show the superdislocations on their slip planes. Similar to other nickel-base superalloys, hydrogen was detrimental to the room temperature tensile properties of PWA 1480. There was little effect on strength, however the material was severely embrittled. Even without hydrogen, the elongation-to-failure was only approximately 3 percent. The tensile fracture surface was made up primarily of ductile voids with regions of cleavage fracture. These cleavage facets are the eutectic (gamma') in the microstructure. It was shown by quantitative fractography that hydrogen embrittles the eutectic (gamma') and causes the crack path to seek out and fracture through the eutectic (gamma'). There was two to three times the amount of cleavage on the fracture surface of the hydrogen-charged samples than on the surface of the uncharged samples. The effect of hydrogen can also be seen in the dislocation structure. There is a marked tendency for dislocation trapping in the gamma matrix with and without hydrogen at all plastic strain levels. Without hydrogen there is a high dislocation density in the gamma matrix leading to strain exhaustion in this region and failure through the matrix. The dislocation structure at failure with hydrogen is slightly different. The TEM foils cut parallel to zone axes (III) showed dislocations wrapping around gamma precipitates. Zone axes (001) foils show that there is a lower dislocation density in the gamma matrix which can be linked to the effects of hydrogen on the fracture behavior. The primary activity in the gamma precipitates is in the form of superlattice intrinsic stacking faults (SISFs). These faults have also been reported in other ordered alloys and superalloys.

Walston, W. S.↗
NASA NTRS2005

Highly Reliable, High-Speed, Unidirectional Serial Data Links

Highly reliable, high-speed, unidirectional serial data-communication subsystems have been proposed to be installed in an upgrade of the computing systems aboard the space shuttles. The basic design concept of these serial data links is also adaptable to terrestrial use in applications in which there are requirements for highly reliable serial data communications. The hardware and software aspects of the architecture of the data links are dictated largely by a requirement, in the original space-shuttle application, for one computer to monitor the memory transactions and memory contents of other computers in real time with high reliability and without reliance on requests for retransmission. To minimize weight while affording a capability to transfer data at a required rate of 2.56 x 10(exp 8) bits per second, it was decided that the links would be serial ones of the fiber-channel type. [Fiber channel denotes a type of serial computer bus that is used to connect a computer (usually a supercomputer) with a high-speed data storage device. Depending on the specific application, the physical connection between the transmitter and receiver could be made via an optical fiber or a twisted pair of wires.] Heretofore, fiber-channel links have ordinarily been bidirectional and have operated under protocols that provide for receiving stations to detect errors and request retransmission when necessary. In the present case, the time taken by processing to request retransmission would conflict with the requirement for real-time transfer of data. To ensure reliability without retransmission, a link according to the proposal would utilize a modified version of the normal fiberchannel character set in conjunction with forward error correction by means of a Reed-Solomon code (see figure). The Reed-Solomon encoding and decoding and the translations between the normal and modified character sets would be effected by logic circuitry external to the fiber-channel transmitter and receiver, which would be commercial off-the-shelf units. The receiving end of the link could detect and correct errors at a rate as high as 4 million times per second, if necessary. The receiver detects uncorrectable double-byte errors. It has been estimated that uncorrectable-error rate would amount to one failure in about 10(exp 19) characters.

Cole, Robert M.↗
DOE OSTI2024

Thermal stability and coalescence dynamics of exsolved metal nanoparticles at charged perovskite surfaces

Exsolution reactions enable the synthesis of oxide-supported metal nanoparticles, which are desirable as catalysts in green energy conversion technologies. It is crucial to precisely tailor the nanoparticle characteristics to optimize the catalysts’ functionality, and to maintain the catalytic performance under operation conditions. We use chemical (co)-doping to modify the defect chemistry of exsolution-active perovskite oxides and examine its influence on the mass transfer kinetics of Ni dopants towards the oxide surface and on the subsequent coalescence behavior of the exsolved nanoparticles during a continuous thermal reduction treatment. Nanoparticles that exsolve at the surface of the acceptor-type fast-oxygen-ion-conductor SrTi 0.95 Ni 0.05 O 3–δ (STNi) show a high surface mobility leading to a very low thermal stability compared to nanoparticles that exsolve at the surface of donor-type SrTi 0.9 Nb 0.05 Ni 0.05 O 3–δ (STNNi). Our analysis indicates that the low thermal stability of exsolved nanoparticles at the acceptor-doped perovskite surface is linked to a high oxygen vacancy concentration at the nanoparticle-oxide interface. For catalysts that require fast oxygen exchange kinetics, exsolution synthesis routes in dry hydrogen conditions may hence lead to accelerated degradation, while humid reaction conditions may mitigate this failure mechanism.

25 ENERGY STORAGE↗
NASA NTRS2001

Influence of Specimen Preparation and Specimen Size on Composite Transverse Tensile Strength and Scatter

The influence of specimen polishing, configuration, and size on the transverse tension strength of two glass-epoxy materials, and one carbon-epoxy material, loaded in three and four point bending was evaluated. Polishing machined edges, arid/or tension side failure surfaces, was detrimental to specimen strength characterization instead of yielding a higher, more accurate, strength as a result of removing inherent manufacture and handling flaws. Transverse tension strength was typically lower for longer span lengths due to the classical weakest link effect. However, strength was less sensitive to volume changes achieved by increasing specimen width. The Weibull scaling law typically over-predicted changes in transverse tension strengths in three point bend tests and under-predicted changes in transverse tension strengths in four point bend tests. Furthermore, the Weibull slope varied with specimen configuration, volume, and sample size. Hence, this scaling law was not adequate for predicting transverse tension strength of heterogeneous, fiber-reinforced, polymer matrix composites.

OBrien, T. Kevin↗
NASA NTRS1994

Lossless Compression and Rate Control for the Galileo NIMS Experiment

The Galileo Near-Infrared Mapping Spectrometer (NIMS) is a sophisticated multi-spectral instrument that was developed to study the spatial/compositional aspects of the atmosphere of Jupiter and the surfaces of it's satellites. Since its original development, the communication capability of the Galileo spacecraft has been severly reduced as the result of a failure of ground controllers to open the main antenna. The data rate which will be available for all instruments at the first Jupiter encounter in 1995 has been reduced by several orders of magnitude (even after recent numerous improvements to data link efficiency.).

data compression NIMS instrument Galileo↗
DOE OSTI2023

Simulation-Based Recovery Action Analysis Using the EMRALD Dynamic Risk Assessment Tool

A recovery action is defined as the action that prevents deviant conditions from producing unwanted effects. It generally indicates a kind of countermeasure performed in response to a failure of human action. The recovery actions especially play an important role in complex systems like nuclear power plants (NPPs), which consist of highly sophisticated controllers to ensure that desired performance and safety must be achieved and maintained. This is because a combination of human error and its recovery failure may be able to cause a catastrophic effect on a system. Analyzing recovery actions has been a critical part of HRA, which is a technique to evaluate human errors and provide human error probabilities (HEPs) for application in probabilistic safety assessment (PSA). If recovery actions are not adequately analyzed and applied to PSA models, the PSA results may be under-estimated or be not able to reasonably account for the failure of human actions in the context of PSA. For this reason, some regulatory documents such as ASME/ANS RA-Sb-2013 by the American Society for Mechanical Engineers and the American Nuclear Society and NUREG-1792 by U.S. Nuclear Regulatory Commission have emphasized the importance of recovery analysis within the HRA. A couple of existing HRA methods, such as the Technique for Human Error-Rate Prediction (THERP), the Cause-Based Decision Tree (CBDT), and the Korean Standard HRA (K-HRA), have respectively suggested their own approaches to the HRA recovery analysis. However, there are a couple of limitations to treating recovery actions using only the current HRA methods available. The biggest limitation is that the existing recovery analysis does not explicitly consider a variety of recovery action types and recovery sequences as they occur in actual NPPs. To handle the limitations of existing recovery analysis, this study proposes a simulation-based recovery analysis method using the Event Modeling Risk Assessment Using Linked Diagram (EMRALD) software. The EMRALD software is a dynamic simulation tool for PSA. It supports realistic and dynamic modeling of human actions as they would be performed at NPPs. It is also favorable to simultaneously model the specific moment at which an action is performed, the time it takes to perform the action, and the failure probability of that action. In this paper, a detailed methodology for modeling recovery actions in the simulation platform is proposed with a couple of examples. Then, outputs from the simulation are discussed as reviewing if this novel approach can complement the challenges of existing recovery analyses.

99 GENERAL AND MISCELLANEOUS↗
NASA NTRS1989

Thermal barrier coating life prediction model development, phase 1

The objective of this program was to establish a methodology to predict thermal barrier coating (TBC) life on gas turbine engine components. The approach involved experimental life measurement coupled with analytical modeling of relevant degradation modes. Evaluation of experimental and flight service components indicate the predominant failure mode to be thermomechanical spallation of the ceramic coating layer resulting from propagation of a dominant near interface crack. Examination of fractionally exposed specimens indicated that dominant crack formation results from progressive structural damage in the form of subcritical microcrack link-up. Tests conducted to isolate important life drivers have shown MCrAlY oxidation to significantly affect the rate of damage accumulation. Mechanical property testing has shown the plasma deposited ceramic to exhibit a non-linear stress-strain response, creep and fatigue. The fatigue based life prediction model developed accounts for the unusual ceramic behavior and also incorporates an experimentally determined oxide rate model. The model predicts the growth of this oxide scale to influence the intensity of the mechanic driving force, resulting from cyclic strains and stresses caused by thermally induced and externally imposed mechanical loads.

Demasi, Jeanine T.↗
NASA NTRS1999

Automated Testing Experience of the Linear Aerospike SR-71 Experiment (LASRE) Controller

System controllers must be fail-safe, low cost, flexible to software changes, able to output health and status words, and permit rapid retest qualification. The system controller designed and tested for the aerospike engine program was an attempt to meet these requirements. This paper describes (1) the aerospike controller design, (2) the automated simulation testing techniques, and (3) the real time monitoring data visualization structure. Controller cost was minimized by design of a single-string system that used an off-the-shelf 486 central processing unit (CPU). A linked-list architecture, with states (nodes) defined in a user-friendly state table, accomplished software changes to the controller. Proven to be fail-safe, this system reported the abort cause and automatically reverted to a safe condition for any first failure. A real time simulation and test system automated the software checkout and retest requirements. A program requirement to decode all abort causes in real time during all ground and flight tests assured the safety of flight decisions and the proper execution of mission rules. The design also included health and status words, and provided a real time analysis interpretation for all health and status data.

Larson, Richard R.↗
NASA NTRS2013

Piezoelectrically Initiated Pyrotechnic Igniter

This innovation consists of a pyrotechnic initiator and piezoelectric initiation system. The device will be capable of being initiated mechanically; resisting initiation by EMF, RF, and EMI (electromagnetic field, radio frequency, and electromagnetic interference, respectively); and initiating in water environments and space environments. Current devices of this nature are initiated by the mechanical action of a firing pin against a primer. Primers historically are prone to failure. These failures are commonly known as misfires or hang-fires. In many cases, the primer shows the dent where the firing pin struck the primer, but the primer failed to fire. In devices such as "T" handles, which are commonly used to initiate the blowout of canopies, loss of function of the device may result in loss of crew. In devices such as flares or smoke generators, failure can result in failure to spot a downed pilot. The piezoelectrically initiated ignition system consists of a pyrotechnic device that plugs into a mechanical system (activator), which on activation, generates a high-voltage spark. The activator, when released, will strike a stack of electrically linked piezo crystals, generating a high-voltage, low-amperage current that is then conducted to the pyro-initiator. Within the initiator, an electrode releases a spark that passes through a pyrotechnic first-fire mixture, causing it to combust. The combustion of the first-fire initiates a primary pyrotechnic or explosive powder. If used in a "T" handle, the primary would ramp the speed of burn up to the speed of sound, generating a shock wave that would cause a high explosive to go "high order." In a flare or smoke generator, the secondary would produce the heat necessary to ignite the pyrotechnic mixture. The piezo activator subsystem is redundant in that a second stack of crystals would be struck at the same time with the same activation force, doubling the probability of a first strike spark generation. If the first activation fails to ignite, the device is capable of multiple attempts. Another unique aspect is in the design of the pyrotechnic device. There is an electrode that aids the generation of a directed spark and the use of a conductive matrix to support the first-fire material so that the spark will penetrate to the second electrode.

Quince, Asia↗
NASA NTRS2018

Initial Criticality Assessments to Guide FMEAs on Rocket Engine Hot Fire Testing

Presented is an explanation of the use of the Initial Criticality Assessment (ICA) technique, a triage process for prioritizing required Failure Modes and Effects Analysis (FMEAs), for the European Service Module's main propulsion system's hot-fire test bed at White Sands New Mexico. Rather than instinctively performing many FMEAs of subsystems, or one large system level FMEA where every subcomponent is analyzed, the ICA guided an informed analysis of only the hardware that had a large impact to hazards. The low criticality hardware was documented via the ICA and no FMEA was performed; the work could then focus on the high criticality hardware. Thus a savings of Program resources was achieved. The experiences gained in creating these ICAs for this international collaborative project confirmed that the need for continuous communication across the technical teams is one of the greatest areas of emphasis. The European Space Agency (ESA) is developing the European Service Module (ESM), with its primary contractor, Airbus Defence and Space in Germany, for delivery to the National Aeronautics and Space Administration (NASA). The module will be equipped with a total of 21 engines to support NASA’s Orion spacecraft: one U.S. Space Shuttle Orbital Maneuvering System-Engine (OMS-E), eight auxiliary thrusters and 12 smaller RCS (Reaction Control System) thrusters. The main ESM propulsion system, used for large translational maneuvers, consists of one OMS-E... To qualify the design of the ESM propulsion subsystem (PSS) an all-steel Propulsion Qualification Module (PQM) structure is used to test the propulsion systems on Orion, including “hot firing” of the OMS engine, thrusters, and RCS. The PQM has been developed as a hot-fire test bed to be tested at the NASA White Sands Test Facility (WSTF). One of the objectives of the testing is to assure that the OMS-E can be safely operated with the PQM. Testing will also demonstrate that the PQM can set the proper upstream pressures and temperatures for the OMS-E to operate nominally given the PQM has never been tested in hot-fire operation with OMS-E before. In order to safely conduct the test campaign, hardware such as the engine subassembly, fluid feed lines, valves, electrical power lines, instrumentation, stiff links, installation Ground Support Equipment (GSE), and diffuser [whose objectives are to collect the exhaust of the OMS-E to actively cool down the exhaust gases, reduce thermal exchanges, and create a vacuum at OMS-E level before igniting], had to be analyzed for any hazards and failure modes.

Fault Tolerance↗
NASA NTRS2018

A Prognostics Framework Development for Swarm Satellite Formations

Prognostics is the science of predicting the failure(s) of a component or a system and understanding how the performance will change in the event of a failure or degradation mechanism. With accurate predictions of possible failures, autonomous mitigative actions can be taken to correct/repair any issues or alert human operators of a failure threshold exceedance requiring condition-based maintenance. Although there is extensive research on failure predictions for a component or a system, there are significantly more opportunities to foray into failure predictions and prognostics for a system of systems such as an airspace consisting of multiple aircraft, a fleet of unmanned aerial vehicles, and a swarm of intelligent satellite systems. Failure prediction and mitigation are particularly important in autonomous systems such as satellite swarm systems that need effective resource management and minimal human interactions. Based on NASA's decadal survey, there is a clear need to prioritize the development of satellite swarm technology for studies of space physics and Earth science. The science community will propose future missions that return in-situ measurements from a 3-D (three-dimensional) volume of space, with relative spacecraft motion and inter-satellite baselines controlled according to the mission objectives. For such multi-spacecraft missions, it is required that ground operations resources do not scale with the number of satellites, thus compromising the swarm or leading to inefficiencies in resource allocation. Swarms of tens or hundreds of small satellites will require autonomy in attitude control, navigation and failure. Although significant research has been conducted in the areas of autonomous formation flying algorithms, less attention has been given to the development of resilient systems robust to failures.The focus of this research paper is the integration of model-based prognostics into the swarm dynamics control and decision-making algorithms. We simulate swarm management strategies for a subsystem failure to demonstrate the importance of failure predictions by comparing two cases: (i) no health information is provided to the system and utilized in the decision-making process and (2) system health information is obtained using prognostics and employed by the control system. One example scenario presented is for the GPS (Global Positioning System) system of an individual satellite to perform off-nominally due to increasing estimated error. In this scenario, the keep-out zone for that satellite would become more conservative, thereby decreasing the risk of collision. This is achieved via tuning the individual artificial repulsive functions assigned to each satellite.This paper is structured as follows. First we provide an overview of current swarm technology development, where we specifically use the term swarm to define multiple satellites flying in formation in similar orbits, with cross-link communication and station-keeping capabilities. Second, we give an introduction to the Swarm Orbital Dynamics Advisor (SODA), a tool that accepts high-level configuration commands and provides the orbital maneuvers required to achieve the prescribed formation configuration. Third, we provide the details of the model-based prognostics algorithm implementation in SODA. Finally, we present different case studies for potential component/subsystem failures and the swarm responses based with and without failure prediction information.

prognostics↗
NASA NTRS2008

Entry, Descent, and Landing Communications for the 2007 Phoenix Mars Lander

This paper addresses NASA's requirement on the 2007 Phoenix Mars Lander to provide spacecraft communications during entry, descent, and landing on Mars to allow the identification of probable root cause should any mission failure occur. The Phoenix mission launched on 4 August 2007 and will land on 25 May 2008 on the northern plains of Mars to conduct a three-month study of the Martian environment. The paper discusses the architectural trades in designing a communications link and surveys the entry, descent, and landing communications approaches taken by previous missions. It then discusses the Phoenix-specific constraints and degrees of freedoms and presents a novel and robust implementation approach to entry, descent, and landing communications. The overall methodology and conclusions described herein can serve as a pathfinder for the entry, descent, and landing communications architecture and implementation of future Mars landed missions.

communications↗
NASA NTRS1971

A spacecraft computer repairable via command.

The MULTIPAC is a central data system developed for deep-space probes with the distinctive feature that it may be repaired during flight via command and telemetry links by reprogramming around the failed unit. The computer organization uses pools of identical modules which the program organizes into one or more computers called processors. The interaction of these modules is dynamically controlled by the program rather than hardware. In the event of a failure, new programs are entered which reorganize the central data system with a somewhat reduced total processing capability aboard the spacecraft. Emphasis is placed on the evolution of the system architecture and the final overall system design rather than the specific logic design.

Fimmel, R. O.↗
NASA NTRS1944

Aerodynamic Tests of a Full-scale TBF-1 Aileron Installation in the Langley 16-foot High-Speed Tunnel

The failure of wing panels on a number of TBF-1 and TBM-1 airplanes in flight has prompted several investigations of the possible causes of failure. This report describes tests in the Langley 16-foot high-speed tunnel to determine whether these failures could be attributed to changes in the aerodynamic characteristics of the ailerons at high speeds. The tests were made of a 12-foot-span section including the tip and aileron of the right wing of a TBF-1 airplane. Hinge moments, control-link stresses due to aerodynamic buffeting, and fabric-deflection photographs were obtained at true airspeeds ranging from 110 to 365 miles per hour. The aileron hinge-moment coefficients were found to vary only slightly with airspeed in spite of the large fabric deflections that developed as the speed was increased. An analysis of these results indicated that the resultant hinge moment of the ailerons as installed in the airplane would tend to restore the ailerons to their neutral position for all the high-speed flight conditions covered in the tests. Serious aerodynamic buffeting occurred at up aileron angles of -10 degrees or greater because of stalling of the sharp projecting lip of the Frise aileron. The peak stresses set up in the aileron control linkages in the buffeting condition were as high as three times the mean stress. During the hinge-moment investigation, flutter of the test installation occurred at airspeeds of about 150 miles per hour. This flutter condition was investigated in some detail and slow-motion pictures were made of the motion of the wing tip and aileron. The flutter was found to involve simultaneous normal bending and chordwise oscillation of the wing and flapping of the aileron. The aileron motion appeared to be coupled with this flutter condition and was investigated in some detail and slow-motion pictures were made of the motion of the wing tip and aileron. The flutter was found to involve simultaneous normal bending and chordwise oscillation of the wing and flapping of the aileron. The aileron motion appeared to be coupled with the motion of the wing through the mass unbalance of the aileron in the normal-to-chord plane due to location of the hinge line 2.17 inches below the center of gravity of the aileron. Flutter did not occur when the installation was stiffened to prevent chordwise motion or when the bending frequency of the aileron system was appreciably higher than that of the wing as in the complete airplane installation.

Becker, John V↗
NASA NTRS2006

A Perspective on DSN System Performance Analysis

This paper discusses the performance analysis effort being carried out in the NASA Deep Space Network. The activity involves root cause analysis of failures and assessment of key performance metrics. The root cause analysis helps pinpoint the true cause of observed problems so that proper correction can be effected. The assessment currently focuses on three aspects: (1) data delivery metrics such as Quantity, Quality, Continuity, and Latency; (2) link-performance metrics such as antenna pointing, system noise temperature, Doppler noise, frequency and time synchronization, wide-area-network loading, link-configuration setup time; and (3) reliability, maintainability, availability metrics. The analysis establishes whether the current system is meeting its specifications and if so, how much margin is available. The findings help identify the weak points in the system and direct attention of programmatic investment for performance improvement.

Deep Space Network (DSN)↗
NASA NTRS2004

Proposed Development of NASA Glenn Research Center's Aeronautical Network Research Simulator

Accurate knowledge and understanding of data link traffic loads that will have an impact on the underlying communications infrastructure within the National Airspace System (NAS) is of paramount importance for planning, development and fielding of future airborne and ground-based communications systems. Attempting to better understand this impact, NASA Glenn Research Center (GRC), through its contractor Computer Networks & Software, Inc. (CNS, Inc.), has developed an emulation and test facility known as the Virtual Aircraft and Controller (VAC) to study data link interactions and the capacity of the NAS to support Controller Pilot Data Link Communications (CPDLC) traffic. The drawback of the current VAC test bed is that it does not allow the test personnel and researchers to present a real world RF environment to a complex airborne or ground system. Fortunately, the United States Air Force and Navy Avionics Test Commands, through its contractor ViaSat, Inc., have developed the Joint Communications Simulator (JCS) to provide communications band test and simulation capability for the RF spectrum through 18 GHz including Communications, Navigation, and Identification and Surveillance functions. In this paper, we are proposing the development of a new and robust test bed that will leverage on the existing NASA GRC's VAC and the Air Force and Navy Commands JCS systems capabilities and functionalities. The proposed NASA Glenn Research Center's Aeronautical Networks Research Simulator (ANRS) will combine current Air Traffic Control applications and physical RF stimulation into an integrated system capable of emulating data transmission behaviors including propagation delay, physical protocol delay, transmission failure and channel interference. The ANRS will provide a simulation/stimulation tool and test bed environment that allow the researcher to predict the performance of various aeronautical network protocol standards and their associated waveforms under varying density conditions. The system allows the user to define human-interactive and scripted aircraft and controller models of various standards, such as (but not limited to) Very High Frequency Digital Link (VDL) of various modes.

Nguyen, Thanh C.↗
NASA NTRS1980

Design of a developmental dual fail operational redundant strapped down inertial measurement unit

An experimental redundant strap-down inertial measurement unit (RSDIMU) is being developed at NASA-Langley as a link to satisfy safety and reliability considerations in the integrated avionics concept. The unit consists of four two-degrees-of-freedom (TDOF) tuned-rotor gyros, and four TDOF pendulous accelerometers in a skewed and separable semi-octahedron array. The system will be used to examine failure detection and isolation techniques, redundancy management rules, and optimal threshold levels for various flight configurations. The major characteristics of the RSDIMU hardware and software design, and its use as a research tool are described.

Morrell, F. R.↗
NASA NTRS2015

Bayesian Safety Risk Modeling of Human-Flightdeck Automation Interaction

Usage of automatic systems in airliners has increased fuel efficiency, added extra capabilities, enhanced safety and reliability, as well as provide improved passenger comfort since its introduction in the late 80's. However, original automation benefits, including reduced flight crew workload, human errors or training requirements, were not achieved as originally expected. Instead, automation introduced new failure modes, redistributed, and sometimes increased workload, brought in new cognitive and attention demands, and increased training requirements. Modern airliners have numerous flight modes, providing more flexibility (and inherently more complexity) to the flight crew. However, the price to pay for the increased flexibility is the need for increased mode awareness, as well as the need to supervise, understand, and predict automated system behavior. Also, over-reliance on automation is linked to manual flight skill degradation and complacency in commercial pilots. As a result, recent accidents involving human errors are often caused by the interactions between humans and the automated systems (e.g., the breakdown in man-machine coordination), deteriorated manual flying skills, and/or loss of situational awareness due to heavy dependence on automated systems. This paper describes the development of the increased complexity and reliance on automation baseline model, named FLAP for FLightdeck Automation Problems. The model development process starts with a comprehensive literature review followed by the construction of a framework comprised of high-level causal factors leading to an automation-related flight anomaly. The framework was then converted into a Bayesian Belief Network (BBN) using the Hugin Software v7.8. The effects of automation on flight crew are incorporated into the model, including flight skill degradation, increased cognitive demand and training requirements along with their interactions. Besides flight crew deficiencies, automation system failures and anomalies of avionic systems are also incorporated. The resultant model helps simulate the emergence of automation-related issues in today's modern airliners from a top-down, generalized approach, which serves as a platform to evaluate NASA developed technologies

Ancel, Ersin↗