Search NASA⌕ Search

SEARCH · Search NASA

Results for “Safety Cases”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 271 records · Page 15
All sourcesNASA NTRSDOE OSTI
NASA NTRSDate not supplied

Verification of the Generalized Aerospace Simulation in Simulink

NASA uses six-degrees-of-freedom (6-DOF) simulations tools to design, test, develop Guidance Navigation and Control (GN&C) software, and certify vehicle performance prior to flight. Therefore, it is critical that the 6-DOF tools used for vehicle design and certification are validated. The focus of this work is the validation of the NASA Marshall Space Flight Center 6-DOF “GeneraLized Aerospace Simulation in Simulink” (GLASS) framework tool. The GLASS tool framework is currently used to support NASA GN&C insight for the Human Landing System (HLS) project, simulating vehicle dynamics during lunar descent and ascent. The GLASS framework utilizes the off-the-shelf Mathworks (R) Simscape (TM) Multibody (TM) toolbox to model vehicle multi-body dynamics. NASA’s Engineering and Safety Center (NESC) provides a set of 6-DOF simulation verification “check cases” that are available to any user needing to verify 6-DOF tools. The check cases contain seventeen atmospheric and twenty-six orbital test scenarios are provided to validate equations of motion, environmental models (e.g., atmosphere, gravitation, and geodesy) and tool propagators. This paper compares GLASS 6-DOF simulation results against the NESC check cases’ results via simulation-to-simulation comparisons. The comparison demonstrates that GLASS simulation results are “in family” with the outputs of the applicable NASA NESC check-cases and verify the GLASS core framework dynamics and the implementation of the check case scenario models.

6-Dof↗
NASA NTRSDate not supplied

Standards Roadmapping for Mission Assurance in Commercial Spaceflight

This paper explores the application of established roadmapping approaches in standards planning and roadmap development to support mission assurance objectives. Mission assurance requires proactive planning across multiple domains including technical, schedule, cost, organizational, and policy. The intersection of these domains happens at the enterprise level, and enterprise systems engineering processes can systematically guide mission assurance activities, including development of standards roadmaps. Standards planning and development is a critical contributor to an effective mission assurance strategy, although standards are often developed and adopted reactively. Technology and standards planning is a key Enterprise Process Management activity, as identified by the Systems Engineering Body of Knowledge, and technology and standards roadmaps are strategic tools used to enable that process. Technology roadmapping has proven effective in guiding enterprise architecture and concept design, and standards planning supports enterprise requirements definition and management. However, there are limited methodologies to guide such standards planning activities. The application of technology roadmapping principles to standards planning formalizes the process and establishes a repeatable framework for standards development and integration. The framework development described in this paper fills a methodological gap by adapting proven roadmapping techniques to standards planning. Through a comparison of roadmapping methodologies and a case study analysis, this approach outlines a systematic process for anticipating and planning standards needs. In the case of developing a standards integration roadmap for NASA’s Office of Safety and Mission Assurance (OSMA), technology roadmapping principles were adapted to develop a roadmap framework to allow NASA and OSMA to define an agency-wide standards integration plan for commercial and industry safety and mission assurance standards. The outcome highlights key adaptations required for roadmapping in a standards context and describes the process steps to formalize a standards planning activity. The roadmapping framework adapted for standards development and integration enables more strategic, forward-looking standards planning and allows for better alignment between evolving capabilities and mission assurance requirements. Beyond its application to mission assurance, this methodology can be transferred to other domains requiring standards development, providing a systematic approach that integrates systems engineering principles into policy strategy and decision-making processes.

Enterprise Systems Engineering↗
NASA NTRS1998

Aerospace Safety Advisory Panel

During 1997, the Aerospace Safety Advisory Panel (ASAP) continued its safety reviews of NASA's human space flight and aeronautics programs. Efforts were focused on those areas that the Panel believed held the greatest potential to impact safety. Continuing safe Space Shuttle operations and progress in the manufacture and testing of primary components for the International Space Station (ISS) were noteworthy. The Panel has continued to monitor the safety implications of the transition of Space Shuttle operations to the United Space Alliance (USA). One area being watched closely relates to the staffing levels and skill mix in both NASA and USA. Therefore, a section of this report is devoted to personnel and other related issues that are a result of this change in NASA's way of doing business for the Space Shuttle. Attention will continue to be paid to this important topic in subsequent reports. Even though the Panel's activities for 1997 were extensive, fewer specific recommendations were formulated than has been the case in recent years. This is indicative of the current generally good state of safety of NASA programs. The Panel does, however, have several longer term concerns that have yet to develop to the level of a specific recommendation. These are covered in the introductory material for each topic area in Section 11. In another departure from past submissions, this report does not contain individual findings and recommendations for the aeronautics programs. While the Panel devoted its usual efforts to examining NASA's aeronautic centers and programs, no specific recommendations were identified for inclusion in this report. In lieu of recommendations, a summary of the Panel's observations of NASA's safety efforts in aeronautics and future Panel areas of emphasis is provided. With profound sadness the Panel notes the passing of our Chairman, Paul M. Johnstone, on December 17, 1997, and our Staff Assistant, Ms. Patricia M. Harman, on October 5, 1997. Other changes to the Panel composition during the past year were: the resignation of Mr. Dennis E. Fitch as a Consultant; the appointment of Mr. Roger D. Schaufele as a Consultant; and the assignment of Ms. Susan M. Smith as Staff Assistant.

Source record↗
NASA NTRS2013

The NTF Inlet Guide Vanes Thermal Gradient Problem and Its Mitigation

The National Transonic Facility (NTF) utilizes Inlet Guide Vanes (IGV) to provide precise, quick response Mach number control for the tunnel. During cryogenic operations, the massive IGV structure can experience large thermal gradients, measured as "Delta T or (Delta)T", between the IGV ring and its support structure called the transfer case. If these temperature gradients are too large, the IGV structure can be stressed beyond its safety limit and cease operation. In recent years, (Delta)T readings exceeding the prescribed safety limits were observed frequently during cryogenic operations, particularly during model access. The tactical operation methods of the tunnel to minimize (Delta)T did not always succeed. One obvious option to remedy this condition is to warm up the IGV structure by disabling the main drive operation, but this "natural" warm up method can takes days in some cases, resulting in productivity loss. This paper documents the thermal gradient problem associated with the IGV structure during cryogenic operation and how the facility has recently achieved an acceptable mitigation which has resulted in improved efficiency of operations.

Venkat, Venki S.↗
NASA NTRS2005

RSRM TP-H1148 Main Grain Propellant Crack Initiation Evaluation

Pressurized TP-HI 148 propellant fracture toughness testing was performed to assess the potential for initiation of visually undetectable cracks in the RSRM forward segment transition region during motor ignition. Two separate test specimens were used in this evaluation. Testing was performed in cold-gas and hot-fire environments, and under both static and dynamic pressurization conditions. Analysis of test results demonstrates safety factors against initiation of visually undetectable cracks in excess of 8.0. The Reusable Solid Rocket Motor (RSRM) forward segment is cast with PBAN propellant (TP-HI 148) to form T an 1 1-point star configuration that transitions to a tapered center perforated bore (see Figure 1). The geometry of the transition region between the fin valleys and the bore causes a localized area of high strain during horizontal storage. Updated analyses using worst-case mechanical properties at 40 F and improved modeling techniques indicated a slight reduction in safety margins over previous predictions. Although there is no history of strain induced cracks or flaws in the transition region propellant, a proactive test effort was initiated to better understand the implications of the new analysis, primarily the resistance of TP-H1148 propellant to crack initiation' during RSRM ignition.

Earnest, Todd E.↗
NASA NTRS2002

Aerospace Safety Advisory Panel

This report presents the results of the Aerospace Safety Advisory Panel (ASAP) activities during 2002. The format of the report has been modified to capture a long-term perspective. Section II is new and highlights the Panel's view of NASA's safety progress during the year. Section III contains the pivotal safety issues facing NASA in the coming year. Section IV includes the program area findings and recommendations. The Panel has been asked by the Administrator to perform several special studies this year, and the resulting white papers appear in Appendix C. The year has been filled with significant achievements for NASA in both successful Space Shuttle operations and International Space Station (ISS) construction. Throughout the year, safety has been first and foremost in spite of many changes throughout the Agency. The relocation of the Orbiter Major Modifications (OMMs) from California to Kennedy Space Center (KSC) appears very successful. The transition of responsibilities for program management of the Space Shuttle and ISS programs from Johnson Space Center (JSC) to NASA Headquarters went smoothly. The decision to extend the life of the Space Shuttle as the primary NASA vehicle for access to space is viewed by the Panel as a prudent one. With the appropriate investments in safety improvements, in maintenance, in preserving appropriate inventories of spare parts, and in infrastructure, the Space Shuttle can provide safe and reliable support for the ISS for the foreseeable future. Indications of an aging Space Shuttle fleet occurred on more than one occasion this year. Several flaws went undetected in the early prelaunch tests and inspections. In all but one case, the problems were found prior to launch. These incidents were all handled properly and with safety as the guiding principle. Indeed, launches were postponed until the problems were fully understood and mitigating action could be taken. These incidents do, however, indicate the need to analyze the Space Shuttle certification criteria closely. Based on this analysis, NASA can determine the need to receritfy the vehicles and to incorporate more stringent inspections throughout the process to minimize launch schedule impact. A highly skilled and experience workforce will be increasingly important for safe and reliable operations as the Space Shuttle vehicles and infrastructure continue to age.

Source record↗
NASA NTRS2002

Minimum Arc Threshold Voltage Experiments on Extravehicular Mobility Unit Samples

The International Space Station (ISS) is now under construction in Low Earth Orbit (LEO). The process of building the ISS requires that astronauts carry out many Extravehicular Activities. To protect the astronauts form the hazardous space environment, they are required to wear a suit known as the Extravehicular Mobility Unit (EMU). For most Extra-Vehicular Activities (EVAs) the EMU is tethered to ISS via a steel safety tether. During the course of an EVA it is common for the safety tether to contact exposed metal on both the ISS and the EMU. In this case, the single point ground of the EMU would be at the same potential as the ISS with respect to the LEO Plasma. In the event that the metal structure of the ISS begins to charge negative of the plasma potential as a result of electron collection by the ISS photovoltaic arrays, then the EMU would also be driven to a negative potential. Anodized aluminum components on the EMU would then begin to develop a charge across their amortization layer as ions from the plasma are collected. In the case where large negative potentials are applied to the EMU, dielectric breakdown may occur as a large voltage difference is developed across the thin amortization layer (oxide). The resulting arc plasma may in turn couple to the charge accumulated on the nearby ISS anodized debris shields and thereby generate a large current flow through the metal EMU structure. Current flow through the EMU could result in an electrocution hazard for the Crew Member inside the EMU - and therefore represents an important safety concern. To address this concern, a series of experiments have been undertaken. In each experiment specially prepared anodized aluminum samples were placed in a LEO representative plasma and charged until dielectric breakdown occurred in the form of an arc. This process was repeated a number of times for three sets of samples. During each test the arc voltage and current were monitored. A statistical treatment of the arc voltage threshold will be presented. In addition, safe operating voltages for the EMU are suggested.

Schneider, Todd↗
NASA NTRS1978

The effect of changes in space shuttle parameters on the NASA/MSFC multilayer diffusion model predictions of surface HCl concentrations

A method for formulating these changes into the model input parameters using a preprocessor program run on a programed data processor was implemented. The results indicate that any changes in the input parameters are small enough to be negligible in comparison to meteorological inputs and the limitations of the model and that such changes will not substantially increase the number of meteorological cases for which the model will predict surface hydrogen chloride concentrations exceeding public safety levels.

Glasser, M. E.↗
NASA NTRS2004

Vibration-Based Method Developed to Detect Cracks in Rotors During Acceleration Through Resonance

In recent years, there has been an increasing interest in developing rotating machinery shaft crack-detection methodologies and online techniques. Shaft crack problems present a significant safety and loss hazard in nearly every application of modern turbomachinery. In many cases, the rotors of modern machines are rapidly accelerated from rest to operating speed, to reduce the excessive vibrations at the critical speeds. The vibration monitoring during startup or shutdown has been receiving growing attention (ref. 1), especially for machines such as aircraft engines, which are subjected to frequent starts and stops, as well as high speeds and acceleration rates. It has been recognized that the presence of angular acceleration strongly affects the rotor's maximum response to unbalance and the speed at which it occurs. Unfortunately, conventional nondestructive evaluation (NDE) methods have unacceptable limits in terms of their application for online crack detection. Some of these techniques are time consuming and inconvenient for turbomachinery service testing. Almost all of these techniques require that the vicinity of the damage be known in advance, and they can provide only local information, with no indication of the structural strength at a component or system level. In addition, the effectiveness of these experimental techniques is affected by the high measurement noise levels existing in complex turbomachine structures. Therefore, the use of vibration monitoring along with vibration analysis has been receiving increasing attention.

Sawicki, Jerzy T.↗
NASA NTRSDate not supplied

Predicting SLS Launch Environment using a Novel Multiphase Formulation

Powerful acoustic waves generated during ignition of launch vehicles may be dangerous to the vehicle, its payload, or the surrounding structures. The water-based Ignition Overpressure and Sound Suppression (IOP/SS) system at Kennedy Space Center’s (KSC) Launch Complex 39B (LC-39B) will be used to protect the Space Launch System (SLS) from the acoustic vibrations generated during launch. The IOP/SS system uses enormous amounts of water to dampen and attenuate these sound waves. To better understand the launch environment risks and to study the effectiveness of the IOP/SS system it is desirable to have time-accurate unsteady simulations of the vehicle ignition with water-based sound suppression. This paper presents results obtained with a novel, high-order accurate, and robust numerical method designed for simulating compressible multiphase flows. A positivity-preserving finite difference scheme is utilized which is formally high-order accurate and also provably robust. Robustness is critical due to the extreme nature of the flow which exhibits highly nonlinear shock and rarefaction waves interacting with liquid-gas interfaces with density ratios of the order of 1000:1. Furthermore, the high-order accuracy (and the high resolution property) is desirable for predicting wave phenomena like IOP waves since the signal can be resolved accurately and propagated long distances with fewer grid points. This finite-difference method was developed using NASA’s Launch, Ascent, and Vehicle Aerodynamics (LAVA) Cartesian immersed boundary framework. We present a validation case by applying our solver to the SLS Scale Model Acoustic Test (SMAT). The SLS SMAT is a well-instrumented 5% scale model test meant to represent the SLS at NASA KSC’s LC-39B pad. Scale IOP tests were performed with and without the sound suppression water and included many sensors which recorded the pressure waves produced during ignition. For this validation case we conduct two simulations, likewise with and without sound suppression water, and compare the SLS SMAT pressure sensor signals with our numerical signals at identical locations. Following this validation case we present a study of the SLS launch environment to examine engineering safety concerns about the mobile launch pad. Engineers at KSC redesigned the main flame deflector at LC-39B anticipating the increased loads from the SLS and to repair damage from prior Shuttle missions. This deflector redesign made use of surface pressure and temperature data from LAVA full-scale SLS simulations without the sound suppression system. The engineers were questioning the possibility of increased pressure loads on the underside of the mobile launcher due to the water in the flame trench. Based on the results established in our simulations of the SLS SMAT, we performed updated calculations for SLS at LC-39B with and without water systems active to assess the readiness of the launch pad for Artemis I launch. Our results show that the IOP/SS system is effective at reducing the overpressure signal and overall sound pressure levels felt by the vehicle and additionally that the pressure loads experienced by the mobile launcher (ML) during engine startup is not increased by the presence of water.

EGS↗
NASA NTRS2015

Check-Cases for Verification of 6-Degree-of-Freedom Flight Vehicle Simulations: Appendices - Volume 2

This NASA Engineering and Safety Center (NESC) assessment was established to develop a set of time histories for the flight behavior of increasingly complex example aerospacecraft that could be used to partially validate various simulation frameworks. The assessment was conducted by representatives from several NASA Centers and an open-source simulation project. This document contains details on models, implementation, and results.

Murri, Daniel G.↗
NASA NTRS1996

Translating Research Into Airline Practice: Case Studies In Collaboration

Airline training departments are avid customers for research that will help them enhance the effectiveness of training and the safety of flight operations. However, various factors often make it difficult for training department managers to draw upon the large body of human factors research, e.g.: research may not address the specific questions facing the training departments, the research literature may not be in a form that training managers can readily interpret, researchers' recommendations may be too expensive or impractical to implement, etc. This panel will discuss ways in which researchers can work with training departments to design research and translate findings into products that airlines can use readily. This collaboration is most effective when it is an integral part of the study from its inception. To illustrate the process of collaboration we will use as a case study the recently completed LOFT (Line Oriented Flight Training) Debriefing research project. We will summarize the findings from that study and discuss how we translated those findings into two training tools: a manual on how to facilitate LOFT debriefings and a video that illustrates facilitation techniques in a realistically enacted debriefing. In some cases, instead of starting a new research project, training department needs can be addressed by reviewing the existing research literature and using expert opinion to develop products that specifically address those needs. To illustrate this approach we will discuss a recent informal working group of scientists and airline personnel that met to develop training material to enhance situation awareness. This group reviewed scientific literature and ASRS (Aviation Safety Reporting System) reports, analyzed contributing factors, and produced a model for managing situation awareness.

Dismukes, R. Key↗
NASA NTRS2023

Utilizing Code Generation from Models for Electric Aircraft Motor Controller Flight Software

The processes followed to develop and test safety-critical flight software significantly increase development effort and overhead in comparison to both non-safety-critical and non-flight software. Generating code from models can be used to reduce development effort; however, the processes for using code generation to develop flight software are relatively immature. This work presents an approach for developing safety-critical flight software utilizing code generation from models to reduce development time and effort. The presented use-case is of electric aircraft motor control software developed for NASA's X-57 Maxwell aircraft.

flight software↗
NASA NTRSDate not supplied

System-Theoretic Analysis of Unsafe Collaborative Control in Teaming Systems

The interactions that occur in human-teaming are inspiring novel aerospace designs aimed at improving how humans and machines, or multiple machines, work together. Unfortunately, current Systems Engineering processes are ill-equipped to handle these complex relationships and are unable to design and assure the safety for these systems. To close part of this gap, this paper introduces a novel system-theoretic analytical process to identify unsafe collaborative control actions. It is part of a broader set of techniques that extend the state-of-the-art in hazard analysis, System Theoretic Process Analysis (STPA), to systematically address collaboration. The method rigorously expresses the different ways multiple commands may be unsafe together. Using Systems Theory, it employs abstraction to manage the combinatorial complexity in enumerating control contributions from multiple collaborating components. An algorithm integrates these concepts into an end-to-end process and is supported by automation to enumerate, refine, prune, and prioritize unsafe combinations of control actions. The output of the method feeds the specification of system requirements to implement safety-guided design starting early in concept development. The process is demonstrated on a manned-unmanned aircraft teaming case study and finds new causal factors that were not previously found in a past hazard analysis of the same system.

System Safety↗
NASA NTRS1997

Formal Methods for Verification and Validation of Partial Specifications: A Case Study

This paper describes our work exploring the suitability of formal specification methods for independent verification and validation (IV&V) of software specifications for large, safety critical systems. An IV&V contractor often has to perform rapid analysis on incomplete specifications, with no control over how those specifications are represented. Lightweight formal methods show significant promise in this context, as they offer a way of uncovering major errors, without the burden of full proofs of correctness. We describe a case study of the use of partial formal models for V&V of the requirements for Fault Detection Isolation and Recovery on the space station. We conclude that the insights gained from formalizing a specification are valuable, and it is the process of formalization, rather than the end product that is important. It was only necessary to build enough of the formal model to test the properties in which we were interested. Maintenance of fidelity between multiple representations of the same requirements (as they evolve) is still a problem, and deserves further study.

Easterbrook, Steve↗
NASA NTRS1979

Extra-safe tractor-trailer coupling

Built-in safety mechanism for tractor-trailer "fifth-wheel" coupling keeps rig together in case kingpin failure. Modified coupling utilizes all standard components, such as two wear plates, kingpin, and kingpin latch. It is modified by adding semicircular lip to top wear plate, matching semicircular slot to bottom wear plate, and two latching stop mechanisms.

Albrecht, W. P.↗
NASA NTRS1983

A case study of a system engineered for control by humans

Alternatives to the traditional concepts for real time health and safety operations were examined. The pitfalls of the conventional contingency planning for health and safety are highlighted. The Solar Maximum Mission (SMM) contingency planning and operations provides the evolution from the conventional people intensive health and safety operation, toward a night watchman mode of operations. The SMM spacecraft health and safety operations were budget constrained to the point that one operator was responsible for the health and safety of the entire spacecraft one week after launch. The spacecraft was a protoflight with brand new subsystem configurations, software and procedures. To manage the risks associated with this one man SMM health and safety operation, the real time contingency planning and operations centered around unambiguously identifying a system level problem, and reactively safing components susceptible to unrecoverable damage. The methodology applied to both analyzing and implementing this approach of SMM is shown.

Rothenberg, J.↗
NASA NTRS1986

Space power development impact on technology requirements

The paper is concerned with the selection of a specific spacecraft power technology and the identification of technology development to meet system requirements. Requirements which influence the selection of a given technology include the power level required, whether the load is constant or transient in nature, and in the case of transient loads, the time required to recover the power, and overall system safety. Various power technologies, such as solar voltaic power, solar dynamic power, nuclear power systems, and electrochemical energy storage, are briefly described.

Cassidy, J. F.↗