Search NASA⌕ Search

SEARCH · Search NASA

Results for “Safety Assurance”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 289 records · Page 16
All sourcesNASA NTRSDOE OSTI
NASA NTRS2010

Hubble Space Telescope Servicing Mission Four (HST SM4) EVA Challenges for Safe Execution of STS-125

In May of 2009, the world-renowned Hubble Space Telescope (HST) received a suite of new instruments and a refurbished bus to enable science for many years to come. The restoration was conducted on-orbit by four space-walkers on five carefully scripted Extra-Vehicular Activity (EVA) days. Assuring the safety of the space-walkers and their crew-mates required careful attention to tool development, detailed procedures for every activity and many rehearsals with engineers and crew to ensure that everything worked together. Additionally, evolution of EVA requirements since the last servicing mission in 2002, and the broad scope of the mission demanded a much higher degree of safety participation in hardware design and risk acceptance than for previous servicing missions.

Dedalis, Robert P.↗
NASA NTRS2014

Space Mission Human Reliability Analysis (HRA) Project

The purpose of the Space Mission Human Reliability Analysis (HRA) Project is to extend current ground-based HRA risk prediction techniques to a long-duration, space-based tool. Ground-based HRA methodology has been shown to be a reasonable tool for short-duration space missions, such as Space Shuttle and lunar fly-bys. However, longer-duration deep-space missions, such as asteroid and Mars missions, will require the crew to be in space for as long as 400 to 900 day missions with periods of extended autonomy and self-sufficiency. Current indications show higher risk due to fatigue, physiological effects due to extended low gravity environments, and others, may impact HRA predictions. For this project, Safety & Mission Assurance (S&MA) will work with Human Health & Performance (HH&P) to establish what is currently used to assess human reliabiilty for human space programs, identify human performance factors that may be sensitive to long duration space flight, collect available historical data, and update current tools to account for performance shaping factors believed to be important to such missions. This effort will also contribute data to the Human Performance Data Repository and influence the Space Human Factors Engineering research risks and gaps (part of the HRP Program). An accurate risk predictor mitigates Loss of Crew (LOC) and Loss of Mission (LOM).The end result will be an updated HRA model that can effectively predict risk on long-duration missions.

Boyer, Roger↗
NASA NTRS2014

Ionosphere Plasma State Determination in Low Earth Orbit from International Space Station Plasma Monitor

A plasma diagnostic package is deployed on the International Space Station (ISS). The system - a Floating Potential Measurement Unit (FPMU) - is used by NASA to monitor the electrical floating potential of the vehicle to assure astronaut safety during extravehicular activity. However, data from the unit also reflects the ionosphere state and seems to represent an unutilized scientific resource in the form of an archive of scientific plasma state data. The unit comprises a Floating Potential probe and two Langmuir probes. There is also an unused but active plasma impedance probe. The data, at one second cadence, are collected, typically for a two week period surrounding extravehicular activity events. Data is also collected any time a visiting vehicle docks with ISS and also when any large solar events occur. The telemetry system is unusual because the package is mounted on a television camera stanchion and its data is impressed on a video signal that is transmitted to the ground and streamed by internet to two off center laboratory locations. The data quality has in the past been challenged by weaknesses in the integrated ground station and distribution systems. These issues, since mid‐2010, have been largely resolved and the ground stations have been upgraded. Downstream data reduction has been developed using physics based modeling of the electron and ion collecting character in the plasma. Recursive algorithms determine plasma density and temperature from the raw Langmuir probe current voltage sweeps and this is made available in real time for situational awareness. The purpose of this paper is to describe and record the algorithm for data reduction and to show that the Floating probe and Langmuir probes are capable of providing long term plasma state measurement in the ionosphere. Geophysical features such as the Appleton anomaly and high latitude modulation at the edge of the Auroral zones are regularly observed in the nearly circular, 51 deg inclined, 400 km altitude ISS orbit. Evidence of waves in the ion collection current data is seen in geographic zones known to exhibit the spread‐F phenomenon. An anomaly in the current collection characteristic of the cylindrical probe appears also too be organized by the geomagnetic field.

Kramer, Leonard↗
NASA NTRS2015

NASA System Safety Handbook. Volume 2: System Safety Concepts, Guidelines, and Implementation Examples

This is the second of two volumes that collectively comprise the NASA System Safety Handbook. Volume 1 (NASASP-210-580) was prepared for the purpose of presenting the overall framework for System Safety and for providing the general concepts needed to implement the framework. Volume 2 provides guidance for implementing these concepts as an integral part of systems engineering and risk management. This guidance addresses the following functional areas: 1.The development of objectives that collectively define adequate safety for a system, and the safety requirements derived from these objectives that are levied on the system. 2.The conduct of system safety activities, performed to meet the safety requirements, with specific emphasis on the conduct of integrated safety analysis (ISA) as a fundamental means by which systems engineering and risk management decisions are risk-informed. 3.The development of a risk-informed safety case (RISC) at major milestone reviews to argue that the systems safety objectives are satisfied (and therefore that the system is adequately safe). 4.The evaluation of the RISC (including supporting evidence) using a defined set of evaluation criteria, to assess the veracity of the claims made therein in order to support risk acceptance decisions.

Safety Case↗
NASA NTRS2015

Detection of Operator Performance Breakdown as an Automation Triggering Mechanism

Performance breakdown (PB) has been anecdotally described as a state where the human operator "loses control of context" and "cannot maintain required task performance." Preventing such a decline in performance is critical to assure the safety and reliability of human-integrated systems, and therefore PB could be useful as a point at which automation can be applied to support human performance. However, PB has never been scientifically defined or empirically demonstrated. Moreover, there is no validated objective way of detecting such a state or the transition to that state. The purpose of this work is: 1) to empirically demonstrate a PB state, and 2) to develop an objective way of detecting such a state. This paper defines PB and proposes an objective method for its detection. A human-in-the-loop study was conducted: 1) to demonstrate PB by increasing workload until the subject reported being in a state of PB, and 2) to identify possible parameters of a detection method for objectively identifying the subjectively-reported PB point, and 3) to determine if the parameters are idiosyncratic to an individual/context or are more generally applicable. In the experiment, fifteen participants were asked to manage three concurrent tasks (one primary and two secondary) for 18 minutes. The difficulty of the primary task was manipulated over time to induce PB while the difficulty of the secondary tasks remained static. The participants' task performance data was collected. Three hypotheses were constructed: 1) increasing workload will induce subjectively-identified PB, 2) there exists criteria that identifies the threshold parameters that best matches the subjectively-identified PB point, and 3) the criteria for choosing the threshold parameters is consistent across individuals. The results show that increasing workload can induce subjectively-identified PB, although it might not be generalizable-only 12 out of 15 participants declared PB. The PB detection method based on signal detection analysis was applied to the performance data and the results showed that PB can be identified using the method, particularly when the values of the parameters for the detection method were calibrated individually.

multi-task environment↗
NASA NTRS2014

Enabling Civilian Low-Altitude Airspace and Unmanned Aerial System (UAS) Operations

UAS operations will be safer if a UTM system is available to support the functions associated with Airspace management and geo-fencing (reduce risk of accidents, impact to other operations, and community concerns); Weather and severe wind integration (avoid severe weather areas based on prediction); Predict and manage congestion (mission safety);Terrain and man-made objects database and avoidance; Maintain safe separation (mission safety and assurance of other assets); Allow only authenticated operations (avoid unauthorized airspace use).

Unmanned↗
NASA NTRS2016

Human Exploration System Test-Bed for Integration and Advancement (HESTIA) Support of Future NASA Deep-Space Missions

The Engineering Directorate at the NASA - Johnson Space Center is outfitting a 20-Foot diameter hypobaric chamber in Building 7 to support future deep-space Environmental Control & Life Support System (ECLSS) research as part of the Human Exploration System Test-bed for Integration and Advancement (HESTIA) Project. This human-rated chamber is the only NASA facility that has the unique experience, chamber geometry, infrastructure, and support systems capable of conducting this research. The chamber was used to support Gemini, Apollo, and SkyLab Missions. More recently, it was used to conduct 30-, 60-, and 90-day human ECLSS closed-loop testing in the 1990s to support the International Space Station and life support technology development. NASA studies show that both planetary surface and deep-space transit crew habitats will be 3-4 story cylindrical structures driven by human occupancy volumetric needs and launch vehicle constraints. The HESTIA facility offers a 3-story, 20-foot diameter habitat consistent with the studies' recommendations. HESTIA operations follow stringent processes by a certified test team that including human testing. Project management, analysis, design, acquisition, fabrication, assembly and certification of facility build-ups are available to support this research. HESTIA offers close proximity to key stakeholders including astronauts, Human Research Program (who direct space human research for the agency), Mission Operations, Safety & Mission Assurance, and Engineering Directorate. The HESTIA chamber can operate at reduced pressure and elevated oxygen environments including those proposed for deep-space exploration. Data acquisition, power, fluids and other facility resources are available to support a wide range of research. Recently completed HESTIA research consisted of unmanned testing of ECLSS technologies. Eventually, the HESTIA research will include humans for extended durations at reduced pressure and elevated oxygen to demonstrate very high reliability of critical ECLSS and other technologies.

Marmolejo, Jose↗
NASA NTRS2017

Strategic Employee Development (SED) Program

As with many other U.S. agencies, succession planning is becoming a critical need for NASA. The primary drivers include (a) NASAs higher-than-average aged workforce with approximately 50 of employees eligible for retirement within 5 years; and (b) employees who need better developmental conversations to increase morale and retention. This problem is particularly concerning for Safety Mission Assurance (SMA) organizations since they traditionally rely on more experienced engineers and specialists to perform their organizations functions.In response to this challenge, the Kennedy Space Center (KSC) SMA organization created the Strategic Employee Development (SED) program. The SED programs goal is to provide a proactive method to counter the primary drivers by creating a deeper bench strength and providing a more comprehensive developmental feedback experience for the employee. The SED is a new succession planning framework that enables customization to any organization, and in this case, specifically for an SMA organization. This is accomplished via the identification of key positions, the corresponding critical competencies, and a process to help managers have relevant and meaningful development conversations with the workforce. As a result of the SED, several tools and products were created that allows management to make better strategic workforce decisions. Although there are opportunities for improvement for the SED program, the most important impact has been on the quality of developmental discussions for employees.

Nguyen, Johnny↗
NASA NTRS2017

Strategic Employee Development in The Government Sector

As with many other U.S. agencies, succession planning is becoming a critical need for NASA. The primary drivers include (a) NASA's higher-than-average aged workforce with approximately 50% of employees eligible for retirement within 5 years; and (b) employees who need better developmental conversations to increase morale and retention. This problem is particularly concerning for Safety & Mission Assurance (S&MA) organizations since they traditionally rely on more experienced engineers and specialists to perform their organizations' functions. In response to this challenge, the Kennedy Space Center (KSC) S&MA organization created the Strategic Employee Development (SED) program. The SED program's goal is to provide a proactive method to counter the primary drivers by creating a deeper "bench strength" and providing a more comprehensive developmental feedback experience for the employee. The SED is a new succession planning framework that enables customization to any organization, and in this case, specifically for an S&MA organization. This is accomplished via the identification of key positions, the corresponding critical competencies, and a process to help managers have relevant and meaningful development conversations with the workforce. As a result of the SED, several tools and products were created that allows management to make better strategic workforce decisions. Although there are opportunities for improvement for the SED program, the most important impact has been on the quality of developmental discussions for employees.

Nguyen, Johnny↗
NASA NTRS2018

Toolbox for Research and Exploration (TREX): Investigations of Fine-Grained Materials on Small Bodies

The Toolbox for Research and Exploration (TREX) is a NASA SSERVI (Solar System Exploration Research Virtual Institute) node. TREX (trex.psi.edu) aims to decrease risk to future missions, specifically to the Moon, the Martian moons, and near- Earth asteroids, by improving mission success and assuring the safety of astronauts, their instruments, and spacecraft. TREX studies will focus on characteristics of the fine grains that cover the surfaces of these target bodies - their spectral characteristics and the potential resources (such as H2O) they may harbor. TREX studies are organized into four Themes (Laboratory- Studies, Moon-Studies, Small-Bodies Studies, and Field-Work). In this presentation, we focus on the work targeted by the Small-Bodies Theme. The Small-Bodies' Theme delves into several topics, many which overlap or are synergistic with the other TREX Themes. The main topics include photometry, spectral modeling, laboratory simulations of space weathering processes relevant to asteroids, the assembly of an asteroid regolith database, the dichotomy between nuclear and reflectance spectroscopy, and the dynamical evolution of asteroids and the implications for the retention of volatiles.

Domingue, D. L.↗
NASA NTRS2018

Mission Configuration Tree for the James Webb Space Telescope (JWST)

The GSFC Mission Configuration web-based application is a means of documenting the structure of the many elements used in building each mission that NASA launches, as well as archiving the documents associated with each of these elements and keeping track of suppliers. This includes all available drawings, engineering orders, parts lists, block diagrams, and photos of each system, subsystem, and component. While the information for several of NASA's missions is being input into Mission Configuration, the ten weeks of this project focused on collecting information for the instrument systems of the James Webb Space Telescope. Documents were collected from a database called the Next Generation Integrated Network (NGIN) so that they can eventually be uploaded into the application. From these documents, including drawings and parts lists, a configuration tree was created in Microsoft Visio which showed the relationships between each system, subsystem, and component. When both these documents and the configuration tree are input into Mission Configuration, they will be place into a drill down tree structure, from which drawings and documents can be accessed directly. Mission Configuration also includes search functions that make all parts searchable by keywords such as vendor, part number, taxonomy, and alternate nomenclature. This application is an important resource for providing access to documents related to the components used on each mission. It has created a central repository for information which can be used to benefit Safety & Mission Assurance, but may also be useful across codes. The process of collecting the information and documents to put into Mission Configuration is also allowing for a concise breakdown of information from diverse formats, creating standardization which makes information more readily accessible, while retaining project-specific information that makes it more easily searchable.

Cain, Mary C.↗
NASA NTRS2018

A New Approach to Mission Classification and Risk Management for NASA Space Flight Missions

The NASA risk classification system is meant to uide space mission development from formulation through completion of implementation. It is also meant to be the basis on which program and project managers develop and implement appropriate mission assurance and risk management strategies for the mission. In order to be useful, the risk classification system needs to provide consistent and reproducible classification results so that missions may be designed with the appropriate components, subsystems, and testing philosophy, all of which impacts mission schedule and cost. In a cost-constrained environment, a clear, robust, and reproducible approach to mission implementation becomes more critical than ever before. Once a project's risk classification level is established, the managers can define the appropriate management controls, systems engineering processes, mission assurance requirements, safety, and testing for that mission. The current NASA mission classification system will be reviewed before a new system is proposed.NASA manages space flight missions according to a four-tiered classification which assumes increasing levels of risk. We argue that risk does not change between classes. What changes are the means available to reduce risk. In performance-driven missions, the project will spend money in order to maintain performance without reducing margins. In cost-constrained missions, performance will be reduced in order to stay within budget or to maintain schedule: measurement requirements may be traded, design life may be reduced, or both. We then propose a new approach to the classification of NASA space flight missions, based on an assessment of how flexible the requirements, how exquisite the measurements, how long the lifetime, and how rigid the budget.Our proposed approach makes possible a clearer differentiation between classification levels and more effective guidance to program and project managers.

Bordi, Francesco↗
NASA NTRS2019

"Making Safety Happen" Through Probabilistic Risk Assessment at NASA

NASA is using Probabilistic Risk Assessment (PRA) as one of the tools in its Safety & Mission Assurance (S&MA) tool belt to identify and quantify risks associated with human spaceflight. This paper discusses some of the challenges and benefits associated with developing and using PRA for NASA human space programs. Some programs have entered operation prior to developing a PRA, while some have implemented PRA from the start of the program. It has been observed that the earlier a design change is made in the concept or design phase, the less impact it has on cost and schedule. Not finding risks until the operation phase yields much costlier design changes and major delays, which can result in discussions of just accepting the risk. Risk contributors identified by PRA are not just associated with hardware failures. They include but are not limited to crew fatality due to medical causes, the environment the vehicle and crew are exposed to, the software being used, and the reliability of the crew performing required actions. Some programs have entered operation prior to developing a PRA, and while PRA can still provide a benefit for operations and future design trades, the benefit of implementing PRA from the start of the program provides the added benefit of informing design and reducing risk early in program development. Currently, NASA’s International Space Station (ISS) program is in its 20th year of on-orbit operations around the Earth and has several new programs in the design phase preparing to enter the operation phase all of which have active (or living) PRAs. These programs incorporate PRA as part of their Risk-Informed, Decision-Making (RIDM) process. For new NASA human spaceflight programs discussion begins with mission concept, establishing requirements, forming the PRA team, and continues through the design cycles into the operational phase. Several examples of PRA related applications and observed lessons are included.

Applications↗
NASA NTRS2020

The Friendly Argument Notation (FAN)

This document defines and explains through examples the Friendly Argument Notation (FAN). FAN builds on previous work investigating text-based ways to express arguments [2, 3]. Its primary intended use is for creating and evaluating arguments about safety-critical systems, especially the types of arguments common within safety and assurance cases [4], but nothing in its design constrains its use to that domain. Compared to existing notations commonly used within this domain (for example [6]), FAN corresponds more closely to traditional argument concepts (for example [1]), allows greater flexibility in expression, provides for including counter-arguments, and requires less knowledge of computer-science-specific concepts. Only time and use will determine how beneficial these differences are in practice. This paper concentrates on showing how FAN looks to someone who is using it manually to develop or assess arguments. A later document will concentrate on providing the information necessary for software tools to be created for FAN.

arugment↗
NASA NTRS2022

NASA Ground-based Layered Pressure Vessels Materials Report

A significant portion of Layered Pressure Vessels (LPVs) manufactured for NASA in the 1950s and ’60s are of non-code construction. These vessels were constructed to the standards of individual manufacturers rather than an industry or consensus standard and often contain legacy or proprietary materials, which have poor or no characterization. Obtaining correct material properties is the first step in assuring vessel safety and predicting life and critical failure modes before they happen. This report details the efforts of the LPV Project related to material properties and characterization. The goal in testing materials from deconstructed vessels was to provide material characterization utilizing modern test methods that would give a strong probabilistic base as an option for future analysis. ASTM E1820, Standard Test Method for Measurement of Fracture Toughness was used for fracture toughness; ASTM E1921, Standard Test Method for Determination of Reference Temperature, T0, for Ferritic Steels in the Transition Range for transition temperature; and ASTM E647, Standard Test Method for Measurement of Fatigue Crack Growth Rates for fatigue crack growth. Particular focus was placed on determination of transition temperature through evaluation of the T0 reference temperature in accordance with ASTM E1921. Transition temperature testing allows for a probabilistic analysis of vessel materials that may be operating at temperatures below the transition from ductile tearing to brittle cleavage failure. This test method was not available at the time of construction and has proved invaluable to the characterization of older ferritic steels. The values reported are specific to the largest body of materials found in the current NASA fleet, but do not claim to be all inclusive. As demonstrated in this report, some materials contain extreme lot-to-lot variability. In some cases, this can be comfortably bounded by worst case probabilistic methods, however it is always recommended that vessel specific data be collected in as much depth as possible to ensure correct assumptions and avoid unduly restricting vessel usage.

Layered Pressure Vessel↗
NASA NTRSDate not supplied

Robust and Mass Efficient Thermal Protection Systems for Future Venus Missions

Several international Venus missions, both orbiter, and in-situ probe are in the works after a prolonged absence. Future missions are expected to be long-duration lander missions and balloon missions to investigate the cloud layer. The entry mass for these in-situ missions will be significantly higher, and the aeroshell will be larger, than previous missions. Two cardinal requirements govern the selection and use of thermal protection systems (TPS), namely, robustness to assure mission safety during entry and mass efficiency so that the useful mass for science is maximized. One cannot trade mission safety for mass when it comes to TPS. The robustness of the TPS is a paramount requirement as it is a single point of system failure. At the same time, TPS mass is carried for the entire mission duration prior to entry, and any excess TPS mass is at the cost of science payload. Future missions will benefit enormously from TPS options with mass and performance benefits far beyond advanced carbon-carbon (ACC) that is currently proposed for the DAVINCI mission. NASA STMD, and SMD jointly invested in the development of 3-D woven thermal protection systems in the last decade, and as a result, the Heat-shield for Extreme Entry Environment Technology (HEEET) TPS has been matured to TRL 6. It is ready for future mission use including Venus. The HEEET project focused on developing a broad technology base, applicable for missions not only to Venus, but also to Saturn, the Ice Giants, and higher speed sample return missions such as Mars Sample Return requiring extreme robustness due to bio-hazards. The dual-layer HEEET (DL-HEEET) is proven to be extremely robust. DL-HEEET performed well in arc jet and laser testing conditions where heritage carbon-phenolic failed. HEEET also proved to be more mass efficient compared to Carbon-Phenolic. Recently, the principal author was invited to present his perspectives to the 2023-2032 Planetary Sciences Decadal Venus subcommittee on the current state of TPS for future Venus missions [1]. In addition to pointing out successful TPS and other developments in the last decade in support of entry systems, the principal author made two findings: 1) importance of and need to sustain TPS capabilities that took nearly a decade to develop and 2) the opportunity to further optimize TPS mass without sacrificing robustness to further enable future in-situ missions. This talk will focus on the above two recommendations and provide the rationale for them. The intent of the talk is to seek advocacy from the VEXAG community for the criticality of TPS sustainment and the benefits of 3D woven TPS optimization. TPS Capability Sustainment: HEEET development was necessitated by the atrophy of heritage carbon-phenolic. Atrophy has impacted other TPS materials as well. Avcoat, the TPS that successfully allowed astronauts to explore the Moon in the 1960s and 70s, took nearly a decade and $10’sM to recover in support of Orion/Artemis. One of the most used TPS materials, SLA 561V, had to be recovered prior to its use on Mars Pathfinder. Phenolic Impregnated Carbon Ablator (PICA), the TPS that replaced SLA 561V on MSL, has undergone multiple replacements and recovery due to constituent rayon changes. Recently, NASA invested in a domestic rayon replacement program and also invested in FMI to consolidate PICA capability for NASA missions, as a result of FMI’s decision to discontinue commercial FiberForm, which is needed for PICA. TPS used for planetary missions are unique and have no other commercial or defense use. In addition, low mission cadence is also a driver for TPS atrophy. Hence, NASA, as the steward, must take steps to ensure and sustain TPS capabilities. In this talk, we outline steps NASA can take to keep abreast of emerging risks and target risk mitigation steps to ensure TPS capability sustainment for Venus and other extreme environment missions. Next Generation of Mass efficient and Robust TPS: NASA invested in an alternate TPS to PICA based on felt-technology called Conformal-PICA which has the potential to save 30% - 50% mass over PICA. The development was discontinued at a Technology Readiness Level (TRL) of ~ 5. 3D Mid-Density Carbon Phenolic (3MDCP) is a single layer variant of HEEET, based on the insulating layer only (SL-HEEET) and currently baselined for the Mars Sample Return Mission Earth Entry System due to its mass efficiency (30% more mass efficient than DL- HEEET). Currently, SL-HEEET is limited to aeroshell diameters of < 1.3m. The SL-HEEET was compared to DL-HEEET in the recent ADVENT flag-ship class mission study in support of the Planetary Science Decadal. SL HEEET was the recommended TPS based on 30% mass savings for both the balloon and lander missions. Given C-PICA and SL-HEEET have superior reliability and mass efficiency, advocacy from VEXAG is sought for completing their further development to TRL 5/6 in this decade so as to enable TPS readiness for future missions.

Thermal Protection Systems↗
NASA NTRSDate not supplied

False Beliefs about the Overarching Properties and Overarching Properties Related Arguments

False beliefs about new ideas are not new. They happen all the time, for a wide variety of reasons. Although the Overarching Properties are solidly grounded in time-honored principles, they constitute a novel expression of those ideas, and newness-based false beliefs about them are to be expected. Similarly, although Overarching Properties Related Arguments are solidly grounded in thousands of years of study of the principles of argumentation, they introduce concepts and applications that are novel to many engineers and engineering managers. So, false beliefs about them are also to be expected. Indeed, false beliefs have arisen and are spreading in the wild about both the Overarching Properties and Overarching Properties Related Arguments. This paper seeks to dispel three known false beliefs about each concept.

overarching properties↗
NASA NTRSDate not supplied

System-Theoretic Analysis of Unsafe Collaborative Control in Teaming Systems

The interactions that occur in human-teaming are inspiring novel aerospace designs aimed at improving how humans and machines, or multiple machines, work together. Unfortunately, current Systems Engineering processes are ill-equipped to handle these complex relationships and are unable to design and assure the safety for these systems. To close part of this gap, this paper introduces a novel system-theoretic analytical process to identify unsafe collaborative control actions. It is part of a broader set of techniques that extend the state-of-the-art in hazard analysis, System Theoretic Process Analysis (STPA), to systematically address collaboration. The method rigorously expresses the different ways multiple commands may be unsafe together. Using Systems Theory, it employs abstraction to manage the combinatorial complexity in enumerating control contributions from multiple collaborating components. An algorithm integrates these concepts into an end-to-end process and is supported by automation to enumerate, refine, prune, and prioritize unsafe combinations of control actions. The output of the method feeds the specification of system requirements to implement safety-guided design starting early in concept development. The process is demonstrated on a manned-unmanned aircraft teaming case study and finds new causal factors that were not previously found in a past hazard analysis of the same system.

System Safety↗