Search NASA⌕ Search

SEARCH · Search NASA

Results for “fault protection”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 271 records · Page 15
All sourcesNASA NTRSDOE OSTI
NASA NTRS2007

Neural Net Safety Monitor Design

The National Aeronautics and Space Administration (NASA) at the Dryden Flight Research Center (DFRC) has been conducting flight-test research using an F-15 aircraft (figure 1). This aircraft has been specially modified to interface a neural net (NN) controller as part of a single-string Airborne Research Test System (ARTS) computer with the existing quad-redundant flight control system (FCC) shown in figure 2. The NN commands are passed to FCC channels 2 and 4 and are cross channel data linked (CCDL) to the other computers as shown. Numerous types of fault-detection monitors exist in the FCC when the NN mode is engaged; these monitors would cause an automatic disengagement of the NN in the event of a triggering fault. Unfortunately, these monitors still may not prevent a possible NN hard-over command from coming through to the control laws. Therefore, an additional and unique safety monitor was designed for a single-string source that allows authority at maximum actuator rates but protects the pilot and structural loads against excessive g-limits in the case of a NN hard-over command input. This additional monitor resides in the FCCs and is executed before the control laws are computed. This presentation describes a floating limiter (FL) concept1 that was developed and successfully test-flown for this program (figure 3). The FL computes the rate of change of the NN commands that are input to the FCC from the ARTS. A window is created with upper and lower boundaries, which is constantly floating and trying to stay centered as the NN command rates are changing. The limiter works by only allowing the window to move at a much slower rate than those of the NN commands. Anywhere within the window, however, full rates are allowed. If a rate persists in one direction, it will eventually hit the boundary and be rate-limited to the floating limiter rate. When this happens, a persistent counter begins and after a limit is reached, a NN disengage command is generated. The tunable metrics for the FL are (1) window size, (2) drift rate, and (3) persistence counter. Ultimate range limits are also included in case the NN command should drift slowly to a limit value that would cause the FL to be defeated. The FL has proven to work as intended. Both high-g transients and excessive structural loads are controlled with NN hard-over commands. This presentation discusses the FL design features and presents test cases. Simulation runs are included to illustrate the dramatic improvement made to the control of NN hard-over effects. A mission control room display from a flight playback is presented to illustrate the neural net fault display representation. The FL is very adaptable to various requirements and is independent of flight condition. It should be considered as a cost-effective safety monitor to control single-string inputs in general.

Larson, Richard R.↗
NASA NTRS2009

Implementation of an Adaptive Controller System from Concept to Flight Test

The National Aeronautics and Space Administration (NASA) at the Dryden Flight Research Center (DFRC) has been conducting flight-test research using an F-15 aircraft (figure 1). This aircraft has been specially modified to interface a neural net (NN) controller as part of a single-string Airborne Research Test System (ARTS) computer with the existing quad-redundant flight control system (FCC) shown in figure 2. The NN commands are passed to FCC channels 2 and 4 and are cross channel data linked (CCDL) to the other computers as shown. Numerous types of fault-detection monitors exist in the FCC when the NN mode is engaged; these monitors would cause an automatic disengagement of the NN in the event of a triggering fault. Unfortunately, these monitors still may not prevent a possible NN hard-over command from coming through to the control laws. Therefore, an additional and unique safety monitor was designed for a single-string source that allows authority at maximum actuator rates but protects the pilot and structural loads against excessive g-limits in the case of a NN hard-over command input. This additional monitor resides in the FCCs and is executed before the control laws are computed. This presentation describes a "floating limiter" (FL) concept that was developed and successfully test-flown for this program (figure 3). The FL computes the rate of change of the NN commands that are input to the FCC from the ARTS. A window is created with upper and lower boundaries, which is constantly "floating" and trying to stay centered as the NN command rates are changing. The limiter works by only allowing the window to move at a much slower rate than those of the NN commands. Anywhere within the window, however, full rates are allowed. If a rate persists in one direction, it will eventually "hit" the boundary and be rate-limited to the floating limiter rate. When this happens, a persistent counter begins and after a limit is reached, a NN disengage command is generated. The tunable metrics for the FL are (1) window size, (2) drift rate, and (3) persistence counter. Ultimate range limits are also included in case the NN command should drift slowly to a limit value that would cause the FL to be defeated. The FL has proven to work as intended. Both high-g transients and excessive structural loads are controlled with NN hard-over commands. This presentation discusses the FL design features and presents test cases. Simulation runs are included to illustrate the dramatic improvement made to the control of NN hard-over effects. A mission control room display from a flight playback is presented to illustrate the neural net fault display representation. The FL is very adaptable to various requirements and is independent of flight condition. It should be considered as a cost-effective safety monitor to control single-string inputs in general.

Larson, Richard R.↗
NASA NTRS2011

Asynchronous Message Service Reference Implementation

This software provides a library of middleware functions with a simple application programming interface, enabling implementation of distributed applications in conformance with the CCSDS AMS (Consultative Committee for Space Data Systems Asynchronous Message Service) specification. The AMS service, and its protocols, implement an architectural concept under which the modules of mission systems may be designed as if they were to operate in isolation, each one producing and consuming mission information without explicit awareness of which other modules are currently operating. Communication relationships among such modules are self-configuring; this tends to minimize complexity in the development and operations of modular data systems. A system built on this model is a society of generally autonomous, inter-operating modules that may fluctuate freely over time in response to changing mission objectives, modules functional upgrades, and recovery from individual module failure. The purpose of AMS, then, is to reduce mission cost and risk by providing standard, reusable infrastructure for the exchange of information among data system modules in a manner that is simple to use, highly automated, flexible, robust, scalable, and efficient. The implementation is designed to spawn multiple threads of AMS functionality under the control of an AMS application program. These threads enable all members of an AMS-based, distributed application to discover one another in real time, subscribe to messages on specific topics, and to publish messages on specific topics. The query/reply (client/server) communication model is also supported. Message exchange is optionally subject to encryption (to support confidentiality) and authorization. Fault tolerance measures in the discovery protocol minimize the likelihood of overall application failure due to any single operational error anywhere in the system. The multi-threaded design simplifies processing while enabling application nodes to operate at high speeds; linked lists protected by mutex semaphores and condition variables are used for efficient, inter-thread communication. Applications may use a variety of transport protocols underlying AMS itself, including TCP (Transmission Control Protocol), UDP (User Datagram Protocol), and message queues.

Burleigh, Scott C.↗
NASA NTRS1983

Practical preventive reliability using matrix forms

This paper describes a practical new tool to improve the reliability of equipment. It uses a matrix form to help monitor anticipated component faults precisely. The tool provides the practical measures necessary to generate matrix tables that accurately display all causes of failure and all planned programmatic analyses, tests, processes, and inspections. When completed, the matrix tables give users in-depth visibility of the degree of protection against component failure that is provided by the program's preventive measure plans. The matrix form is an excellent technique for tracking, and thereby influencing, the reliability of nonelectronic spacecraft subsystems or components. No electronic applications have been tried, but the procedure can be useful in the electronics field, e.g., in integrated circuit production planning, and perhaps in process control, inspection or test lines for other electronic components. The drawing of forms, and the recording/manipulation of the data can be computerized.

Johnson, S. A.↗
NASA NTRS1976

Arc discharge supply component protection circuitry

In a mercury-bombardment ion engine, the discharge supply is a high-current low-voltage one that maintains an arc or discharge inside the engine. In a 30-cm engine the supply provides up to 45 volts at about 13 amperes and is referenced at approximately 1100 volts above ground. Due to the engine discharge characteristics, a very slow feedback control loop is required. A high-speed current limit must be used to protect the components in the power conditioner, a pulse-width-modulated bridge inverter. A high-speed cycle-by-cycle current-limit circuit which allows the inverter to continue running in an overcurrent condition is used to protect it. The high-speed current sensing allows the inverter to be turned off each half cycle before the current in the primary of the inverter exceeds a safe level. This permits the inverter to continue to provide current into a discharge or a fault condition, until the feedback control system can actively control the current.

Ahrens, A. F.↗
NASA NTRS2013

Spinoff 2012

Topics covered include: Water Treatment Technologies Inspire Healthy Beverages; Dietary Formulas Fortify Antioxidant Supplements; Rovers Pave the Way for Hospital Robots; Dry Electrodes Facilitate Remote Health Monitoring; Telescope Innovations Improve Speed, Accuracy of Eye Surgery; Superconductors Enable Lower Cost MRI Systems; Anti-Icing Formulas Prevent Train Delays; Shuttle Repair Tools Automate Vehicle Maintenance; Pressure-Sensitive Paints Advance Rotorcraft Design Testing; Speech Recognition Interfaces Improve Flight Safety; Polymers Advance Heat Management Materials for Vehicles; Wireless Sensors Pinpoint Rotorcraft Troubles; Ultrasonic Detectors Safely Identify Dangerous, Costly Leaks; Detectors Ensure Function, Safety of Aircraft Wiring; Emergency Systems Save Tens of Thousands of Lives; Oxygen Assessments Ensure Safer Medical Devices; Collaborative Platforms Aid Emergency Decision Making; Space-Inspired Trailers Encourage Exploration on Earth; Ultra-Thin Coatings Beautify Art; Spacesuit Materials Add Comfort to Undergarments; Gigapixel Images Connect Sports Teams with Fans; Satellite Maps Deliver More Realistic Gaming; Elemental Scanning Devices Authenticate Works of Art; Microradiometers Reveal Ocean Health, Climate Change; Sensors Enable Plants to Text Message Farmers; Efficient Cells Cut the Cost of Solar Power; Shuttle Topography Data Inform Solar Power Analysis; Photocatalytic Solutions Create Self-Cleaning Surfaces; Concentrators Enhance Solar Power Systems; Innovative Coatings Potentially Lower Facility Maintenance Costs; Simulation Packages Expand Aircraft Design Options; Web Solutions Inspire Cloud Computing Software; Behavior Prediction Tools Strengthen Nanoelectronics; Power Converters Secure Electronics in Harsh Environments; Diagnostics Tools Identify Faults Prior to Failure; Archiving Innovations Preserve Essential Historical Records; Meter Designs Reduce Operation Costs for Industry; Commercial Platforms Allow Affordable Space Research; Fiber Optics Deliver Real-Time Structural Monitoring; Camera Systems Rapidly Scan Large Structures; Terahertz Lasers Reveal Information for 3D Images; Thin Films Protect Electronics from Heat and Radiation; Interferometers Sharpen Measurements for Better Telescopes; and Vision Systems Illuminate Industrial Processes.

Source record↗
NASA NTRS2005

SAFER Inspection of Space Shuttle Thermal Protection System

In the aftermath of the space shuttle Columbia accident, it quickly became clear that new methods would need to be developed that would provide the capability to inspect and repair the shuttle's thermal protection system (TPS). A boom extension to the Remote Manipulator System (RMS) with a laser topography sensor package was identified as the primary means for measuring the damage depth in acreage tile as well as scanning Reinforced Carbon- Carbon (RCC) surfaces. However, concern over the system's fault tolerance made it prudent to investigate alternate means of acquiring close range photographs and contour depth measurements in the event of a failure. One method that was identified early was to use the Simplified Aid For EVA Rescue (SAFER) propulsion system to allow EVA access to damaged areas of concern. Several issues were identified as potential hazards to SAFER use for this operation. First, the ability of an astronaut to maintain controlled flight depends upon efficient technique and hardware reliability. If either of these is insufficient during flight operations, a safety tether must be used to rescue the crewmember. This operation can jeopardize the integrity of the Extra-vehicular Mobility Unit (EMU) or delicate TPS materials. Controls were developed to prevent the likelihood of requiring a tether rescue, and procedures were written to maximize the chances for success if it cannot be avoided. Crewmember ability to manage tether cable tension during nominal flight also had to be evaluated to ensure it would not negatively affect propellant consumption. Second, although propellant consumption, flight control, orbital dynamics, and flight complexity can all be accurately evaluated in Virtual Reality (VR) Laboratory at Johnson Space Center, there are some shortcomings. As a crewmember's hand is extended to simulate measurement of tile damage, it will pass through the vehicle without resistance. In reality, this force will push the crewmember away from the vehicle, and could induce a moment which, if strong enough, could saturate the attitude control system in SAFER. This raises the concern that additional propellant will be consumed to maintain controlled flight. To account for this, the fidelity of the Virtual Reality simulation was improved to include the effect of crewmember contact with the vehicle during SAFER flight. In addition, while participating in VR simulations, the subject is in shirt sleeves and sits in a chair. This does not provide a flight-like representation of body position awareness. To prevent inadvertent contact with tile or RCC, other facilities were utilized to establish crew preferences for body attitude and tool configuration. Finally, a study was performed to determine if attitude constraints are needed for the Space shuttle and International Space Station to reduce SAFER flight difficulty.

Scoville, Zebulon C.↗
NASA NTRS1988

Utilization of spray on foam insulation for manned and unmanned spacecraft and structures

The idea of using spray-on foam insulation as a passive thermal and micrometeorite protection system is explored. The benefits of applying an exterior coating of foam insulation can be: (1) the foam can provide a thermally stable shield that can assist in reducing the strain on traditional space radiator systems and can also act as a passive thermal guard, allowing a greater fault tolerance if the standard system should fail; (2) the foam can act as an ablative shell diminishing the effects of natural and manmade debris striking the structure; (3) the foam is lightweight - about 1/2 ounce per sq ft; (4) the foam is low cost and easy to maintain; and (5) the foam is a stable material that does not react when exposed to earth or lunar environments.

Hancock, Thomas M., III↗
NASA NTRS2014

Application of Fault Management Theory to the Quantitative Selection of a Launch Vehicle Abort Trigger Suite

This paper describes the quantitative application of the theory of System Health Management and its operational subset, Fault Management, to the selection of abort triggers for a human-rated launch vehicle, the United States' National Aeronautics and Space Administration's (NASA) Space Launch System (SLS). The results demonstrate the efficacy of the theory to assess the effectiveness of candidate failure detection and response mechanisms to protect humans from time-critical and severe hazards. The quantitative method was successfully used on the SLS to aid selection of its suite of abort triggers.

Lo, Yunnhon↗
NASA NTRS2014

Application of Fault Management Theory to the Quantitative Selection of a Launch Vehicle Abort Trigger Suite

This paper describes the quantitative application of the theory of System Health Management and its operational subset, Fault Management, to the selection of Abort Triggers for a human-rated launch vehicle, the United States' National Aeronautics and Space Administration's (NASA) Space Launch System (SLS). The results demonstrate the efficacy of the theory to assess the effectiveness of candidate failure detection and response mechanisms to protect humans from time-critical and severe hazards. The quantitative method was successfully used on the SLS to aid selection of its suite of Abort Triggers.

Lo, Yunnhon↗
NASA NTRS1997

Development of Design Standards and Guidelines for Electromagnetic Compatibility and Lightning Protection for Spacecraft Utilizing Composite Materials

This final report presents information concerning technical accomplishments by Tec-Masters, Inc. (TMI) for this contract effort. This effort included the accomplishment and/or submission by TMI of the following items: (1) Literature Survey Report, Electrical Properties of Non-Metallic Composites by Mr. Hugh W. Denny; (2) Interim Report, Composite Materials - Conductivity, Shielding Effectiveness, and Current Carrying Capability by Mr. Ross W. Evans; (3) Fault Current Test Plan by Mr. Ross W. Evans (4) Fault Current Test Procedure by Mr. Ross W. Evans (5) Test Report, Fault Current Through Graphite Filament Reinforced Plastic, NASA CR-4774, Marshall Space Flight Center, Alabama, September 1996, by Mr. Ross W. Evans; (6) Test Plan, Lightning Effects on Composite Materials by Mr. Ross W. Evans; (7) Test Report, Lightning Effects on Composite Materials, NASA CR-4783, Marshall Space Flight Center, Alabama, February 1997, by Mr. Ross W. Evans; (8) Design Guidelines for Shielding Effectiveness, Current Carrying Capability, and the Enhancement of Conductivity of Composite Materials, NASA CR-4784, Marshall Space Flight Center, Alabama, September 1996, by Mr. Ross W. Evans. These items are not attached but are considered to be a part of this final report. Efforts on two additional items were accomplished at no increase in cost to NASA/MSFC. These items consisted of updating the 'MSFC EMC Design and Interference Control Handbook,' and revising the 'Design Guidelines for Shielding Effectiveness, Current Carrying Capability, and the Enhancement of Conductivity of Composite Materials.'

Camp, Dennis W.↗
NASA NTRS2013

Implementation of a Goal-Based Systems Engineering Process Using the Systems Modeling Language (SysML)

This paper describes the core framework used to implement a Goal-Function Tree (GFT) based systems engineering process using the Systems Modeling Language. It defines a set of principles built upon by the theoretical approach described in the InfoTech 2013 ISHM paper titled "Goal-Function Tree Modeling for Systems Engineering and Fault Management" presented by Dr. Stephen B. Johnson. Using the SysML language, the principles in this paper describe the expansion of the SysML language as a baseline in order to: hierarchically describe a system, describe that system functionally within success space, and allocate detection mechanisms to success functions for system protection.

Breckenridge, Jonathan T.↗
NASA NTRS1972

Self-healing fuse development.

The self-healing fuse is a very fast acting current overload protective device which opens and recloses in a few milliseconds. The fuse confines a mercury column in an insulated channel and returns the mercury to the channel after firing. Ratings 5 to 50 A at 600 peak volts are possible with a life of hundreds of cycles. Compared to conventional fuses, much less fault current energy fires the fuse by heating the mercury to boiling temperature. Next an arc discharge develops while explosive forces expel the liquid mercury from the channel. Then the high impedance arc either extinguishes immediately, or operates for a few milliseconds, until a switch opens the circuit.

Jones, N. D.↗
NASA NTRS1987

Pilot interaction with automated airborne decision making systems

The current research is focused on detection of human error and protection from its consequences. A program for monitoring pilot error by comparing pilot actions to a script was described. It dealt primarily with routine errors (slips) that occurred during checklist activity. The model to which operator actions were compared was a script. Current research is an extension along these two dimensions. The ORS fault detection aid uses a sophisticated device model rather than a script. The newer initiative, the model-based and constraint-based warning system, uses an even more sophisticated device model and is to prevent all types of error, not just slips or bad decision.

Hammer, John M.↗
NASA NTRSDate not supplied

Analysis of a Landing System for Planetary Payloads Utilizing Passive Energy Absorbing Composite Structure

Delivery of a payload from space to a planetary surface currently requires the development of an application specific landing system to protect the payload from forces imparted during impact with the planet surface. Often, active energy attenuating systems such as retro-rockets, deployable parachutes, and airbags are utilized within these landing systems to reduce landing impact energy. Unfortunately, these active systems come at a cost; active energy attenuating systems are susceptible to system faults which may limit or completely negate their energy attenuating capability. Additionally, components needing to be stowed such as fuel, parachutes, and airbags increase design complexity, cost, and weight. To overcome these limitations, this study examines the potential of passive energy attenuation through energy absorbing structural design and composite materials to mitigate landing loads for small payload planetary delivery. Researchers at the National Aeronautics and Space Administration (NASA) Langley Research Center (LaRC) have conducted extensive research into developing energy absorbing structures and components for the attenuation of impact energy under various loading conditions including aircraft crash and spacecraft impact. The current study leverages this research to design a lightweight planetary delivery system which utilizes unique outer mold line (OML) geometry and passive energy absorbing structural design to limit landing loads across potential planetary surface environments. The OML geometry is designed to control impact orientation and provide self-righting capabilities for slopped impact surfaces. The internal structure is composed of composite material structures arranged to provide energy absorption which is robust to impact angle and impact velocity. The developed planetary delivery design concept will be evaluated using finite element (FE) model analysis. Simulations of landing impacts with representative soil surface environments will be used to characterize the energy absorbing capabilities of the landing system. Sensitivity of predicted impact force to landing environment, impact angle, and impact velocity will be assessed to identify capabilities and limitations of the initial structural design. Results will be used to determine the feasibility of a lightweight composite structure to passively absorb landing energy for robust planetary payload delivery.

Crashworthiness↗
NASA NTRS1974

Geologic evaluation and applications of ERTS-1 imagery over Georgia

Satellite imagery and other remote sensing tools and techniques have provided a powerful tool to assist geologic research; significantly increased the mapping efficiency of field geologists; shown new lineaments associated with known shear and fault zones; delineated new structural features; provided a tool to reevaluate tectonic history; helped to locate potential ground-water sources and areas of aquifer recharge; defined areas of geologic hazards; shown areas of heavy siltation in major reservoirs; and, by close interval repetition, aided in monitoring surface mine reclamation activities and the environmental protection of the intricate marshland system. The Georgia Geological Survey has been engaged in regional mapping for the new state geologic map. ERTS-1 images enlarged to compatible mapping scales have increased field geologic mapping efficiency by at least 25%. There are a number of areas where data from ERTS-1 imagery has allowed a notably higher level of precision than has been available with any amount of field work on the ground.

Pickering, S. M.↗
NASA NTRS1977

Fault tolerant computing: A preamble for assuring viability of large computer systems

The need for fault-tolerant computing is addressed from the viewpoints of (1) why it is needed, (2) how to apply it in the current state of technology, and (3) what it means in the context of the Phoenix computer system and other related systems. To this end, the value of concurrent error detection and correction is described. User protection, program retry, and repair are among the factors considered. The technology of algebraic codes to protect memory systems and arithmetic codes to protect memory systems and arithmetic codes to protect arithmetic operations is discussed.

Lim, R. S.↗
NASA NTRS1974

Geological evaluation and applications of ERTS-1 imagery over Georgia

ERTS-1 70mm and 9 x 9 film negatives are being used by conventional and color enhancement methods as a tool for geologic investigation. Geologic mapping and mineral exploration by conventional methods is very difficult in Georgia. Thick soil cover and heavy vegetation cause outcrops of bed rock to be small, rare and obscure. ERTS imagery, and remote sensing in general have helped delineate: (1) major tectonic boundaries; (2) lithologic contacts; (3) foliation trends; (4) topographic lineaments; and (5) faults. The ERTS-1 MSS imagery yields the greatest amount of geologic information on the Piedomont, Blue Ridge, and Valley and Ridge Provinces of Georgia where topography is strongly controlled by the bedrock geology. ERTS imagery, and general remote sensing techniques, have provided us with a powerful tool to assist geologic research; have significantly increased the mapping efficiency of our field geologists; have shown new lineaments associated with known shear and fault zones; have delineated new structural features; have provided a tool to re-evaluate our tectonic history; have helped to locate potential ground water sources and areas of aquifer recharge; have defined areas of geologic hazards; have shown areas of heavy siltation in major reservoirs; and by its close interval repetition, have aided in monitoring surface mine reclamation activities and the environmental protection of our intricate marshland system.

Pickering, S. M.↗