Search NASA⌕ Search

SEARCH · Search NASA

Results for “System Safety Assessment”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 289 records · Page 16

Space Systems - Safety and Compatibility of Materials - Method to Determine the Flammability Thresholds of Materials

Spacecraft fire safety emphasizes fire prevention, which is achieved primarily through the use of fire-resistant materials. Materials selection for spacecraft is based on conventional flammability acceptance tests, along with prescribed quantity limitations and configuration control for items that are non-pass or questionable. ISO 14624-1 and -2 are the major methods used to evaluate flammability of polymeric materials intended for use in the habitable environments of spacecraft. The methods are upward flame-propagation tests initiated in static environments and using a well-defined igniter flame at the bottom of the sample. The tests are conducted in the most severe flaming combustion environment expected in the spacecraft. The pass/fail test logic of ISO 14624-1 and -2 does not allow a quantitative comparison with reduced gravity or microgravity test results; therefore their use is limited, and possibilities for in-depth theoretical analyses and realistic estimates of spacecraft fire extinguishment requirements are practically eliminated. To better understand the applicability of laboratory test data to actual spacecraft environments, a modified ISO 14624 protocol has been proposed that, as an alternative to qualifying materials as pass/fail in the worst-expected environments, measures the actual upward flammability limit for the material. A working group established by NASA to provide recommendations for exploration spacecraft internal atmospheres realized the importance of correlating laboratory data with real-life environments and recommended NASA to develop a flammability threshold test method. The working group indicated that for the Constellation Program, the flammability threshold information will allow NASA to identify materials with increased flammability risk from oxygen concentration and total pressure changes, minimize potential impacts, and allow for development of sound requirements for new spacecraft and extravehicular landers and habitats. Furthermore, recent research has shown that current normal gravity materials flammability tests do not correlate with flammability in ventilated, micro- or reduced-gravity conditions. Currently, the materials selection for spacecraft is based on the assumption of commonality between ground flammability test results and spacecraft environments, which does not appear to be valid. Materials flammability threshold data acquired in normal gravity can be correlated with data obtained in microgravity or reduced-gravity experiments, and consequently a more accurate assessment of the margin of safety of the material in the real environment can be made. In addition, the method allows the option of selecting better or best space system materials, as opposed to what would be considered just acceptable from a flammability point of view and realistic assessment of spacecraft fire extinguishment needs, which could result in significant weight savings. The knowledge afforded by this technique allows for limited extrapolations of flammability behavior to conditions not specifically tested and that could potentially result in significant cost and time savings. The intent of this Technical Specification is to bring to the attention of International Aerospace Community the importance of correlating laboratory test data with real-life space systems applications. The method presented is just one of the possibilities that are believed will lead to better understanding the applicability of laboratory aerospace materials flammability test data. International feedback on improving the proposed method, as well as suggestions for correlating other laboratory aerospace test data with real-life applications relevant to space systems are being sought.

Hirsch, David↗

Strain Measurement Using FBG on COPV in Stress Rupture Test

White Sands Test Facility (WSTF) was requested to perform ambient temperature hydrostatic pressurization testing of a Space Transportation System (STS) 40-in. Kevlar Composite Overwrapped Pressure Vessel (COPV). The 40-in. vessel was of the same design and approximate age as the STS Main Propulsion System (MPS) and Orbiter Maneuvering System (OMS) vessels. The NASA Engineering Safety Center (NESC) assembled a team of experts and conducted an assessment that involved a review of national Kevlar COPY data. During the review, the STS COPVs were found to be beyond their original certification of ten years. The team observed that the likelihood of STS COPV Stress rupture, a catastrophic burst before leak failure mode, was greater than previously believed. Consequently, a detailed assessment of remaining stress rupture life became necessary. Prior to STS-114, a certification deviation was written for two flights of OV-103 (Discovery) and OV-104 (Atlantis) per rationale that was based on an extensive review of the Lawrence Livermore National Laboratories, COPV data, and revisions to the STS COPV stress levels. In order to obtain flight rationale to extend the certification deviation through the end of the Program, the Orbiter Project Office has directed an interagency COPV team to conduct further testing and analysis to investigate conservatism in the stress rupture model and evaluate material age degradation. Additional analysis of stress rupture life requires understanding the fiber stresses including stress that occurs due to thru-wall composite compression in COPV components. Data must be obtained at both zero gauge pressure (pre-stress) and at the component operating pressure so that this phenomenon can be properly evaluated. The zero gauge pressure stresses are predominantly a result of the autofrettage process used during vessel manufacture. Determining these pre-stresses and the constitutive behavior of the overwrap at pressure will provide necessary information to better predict the remaining life of the STS COPVs. The primary test objective is obtaining data to verify the hypothesis of a radially oriented thru-thickness stress-riser in the COPV composite whose magnitude is a function of the applied pressure and the load history. The anticipated load dependent response follows from the constitutive behavior of the composite overwrap so data to quantify its nonlinear and time dependent response will be sought. The objective of the Fiber Braggs Gratings (FBGs) were to advance the state-of-the-art by developing techniques using FBG sensors that are capable of assessing stress-rupture degradation in Kevlar COPVs in a health monitoring mode (1). Moreover, they sought to answer questions of how embedded sensors affect overall integrity of the structure. And lastly, they sought to provide an important link in the overall stress rupture study that will help close the loop on the COPV fabrication process. NDE inspection methods will be used from start to finish and FBG will be an integral link within the overall chain.

Banks, Curtis↗

USA Space Debris Environment, Operations, and Research Updates

Space Missions in 2017 Earth Satellite Population Collision Avoidance Maneuvers Post mission Disposal of U.S.A. Spacecraft Space Situational Awareness (SSA) and the Space Debris Sensor (SDS) A total of 86 space launches placed more than 400 spacecraft into Earth orbits during 2017, following the trend of increase over the past decade NASA has established conjunction assessment processes for its human spaceflight and uncrewed spacecraft to avoid accidental collisions with objects tracked by the U.S. Space Surveillance Network - NASA also assists other U.S. government spacecraft owners with conjunction assessments and subsequent maneuvers The ISS has conducted 25 debris collision avoidance maneuvers since 1999 - None in 2016-2017, but an ISS visiting vehicle had one collision avoidance maneuver in 2017 During 2017 NASA executed or assisted in the execution of 21 collision avoidance maneuvers by uncrewed spacecraft - Four maneuvers were conducted to avoid debris from Fengyun-1C - Two maneuvers were conducted to avoid debris from the collision of Cosmos 2251 and Iridium 33 - One maneuver was conducted to avoid the ISS NASA has established conjunction assessment processes for its human spaceflight and uncrewed spacecraft to avoid accidental collisions with objects tracked by the U.S. Space Surveillance Network - NASA also assists other U.S. government spacecraft owners with conjunction assessments and subsequent maneuvers The ISS has conducted 25 debris collision avoidance maneuvers since 1999 - None in 2016-2017, but an ISS visiting vehicle had one collision avoidance maneuver in 2017 During 2017 NASA executed or assisted in the execution of 21 collision avoidance maneuvers by uncrewed spacecraft - Four maneuvers were conducted to avoid debris from Fengyun-1C - Two maneuvers were conducted to avoid debris from the collision of Cosmos 2251 and Iridium 33 The 2014-15 NASA Engineering and Safety Center (NESC) study on the micrometeoroid and orbital debris (MMOD) assessment for the Joint Polar Satellite System (JPSS) provided the following findings - Millimeter-sized orbital debris pose the highest penetration risk to most operational spacecraft in LEO - The most effective means to collect direct measurement data on millimetersized debris above 600 km altitude is to conduct in situ measurements - There is currently no in situ data on such small debris above 600 km altitude Since the orbital debris population follows a power-law size distribution, there are many more millimeter-sized debris than the large tracked objects - Current conjunction assessments and collision avoidance maneuvers against the tracked objects (which are typically 10 cm and larger) only address a small fraction (<1%) of the mission-ending risk from orbital debris To address the millimeter-sized debris data gap above 600 km, NASA has recently developed an innovative in situ measurement instrument - the Space Debris Sensor (SDS) - One maneuver was conducted to avoid the ISS

Liou, J.-C.↗

Community Noise Impact of Urban Air Mobility Vehicle Operations

Advanced air mobility (AAM) missions, carried out by electrically driven air vehicles, are characterized by ranges of less than about 300-500 nm (about 500-900 km) and include both rural and urban operations. The missions may include public transportation, cargo delivery, air taxi, and emergency response. While the urban air mobility (UAM) subset of AAM is projected to have high economic benefit, it is also the most difficult to develop because it must overcome many barriers, including those associated with the airspace system, safety, and community noise. This presentation focuses on the utilization of UAM source noise data for assessment of community noise impact. Although a limited number of acoustic flight measurement campaigns have been made to characterize the source noise of prototype and preproduction UAM aircraft, prediction-based approaches are primarily considered herein. Following conceptual design, in which the vehicle is appropriately sized for its intended mission, a comprehensive analysis must be performed for a range of operating conditions spanning the flight envelope to determine the corresponding configurations of the vehicle, that is, the trimmed states. For each trimmed state, the noise produced by each source, for example, steady and unsteady rotor noise, may be computed and so-called source noise (hemi)spheres generated. These source data may subsequently be used in various community noise impact analyses. Several use cases are presented including those supporting noise certification and those for auralizations that may, in turn, be used as part of a perception-influenced design process. Land use planning tools for generating noise exposure maps, including those using simulation and integrated modeling approaches, are also presented. Finally, use cases supporting development of low noise flight operations, including an acoustic flight simulator and acoustically aware flight control, are considered.

aircraft community noise↗

Booster Main Engine Selection Criteria for the Liquid Fly-Back Booster

The Liquid Fly-Back Booster (LFBB) Program seeks to enhance the Space Shuttle system safety, performance and economy of operations through the use of an advanced, liquid propellant Booster Main Engine (BME). There are several viable BME candidates that could be suitable for this application. The objective of this study was to identify the key Criteria to be applied in selecting among these BME candidates. This study involved an assessment of influences on the overall LFBB utility due to variations in the candidate rocket-engines characteristics. This includes BME impacts on vehicle system weight, performance, design approaches, abort modes, margins of safety, engine-out operations, and maintenance and support concepts. Systems engineering analyses and trade studies were performed to identify the LFBB system level sensitivities to a wide variety of BME related parameters. This presentation summarizes these trade studies and the resulting findings of the LFBB design teams regarding the BME characteristics that most significantly affect the LFBB system. The resulting BME choice should offer the best combination of reliability, performance, reusability, robustness, cost, and risk for the LFBB program.

Ryan, Richard M.↗

NASA Engineering and Safety Center Lunar Rover Design Concepts Assessments

Mass is a significant risk to programs and projects as they transition from formulation to implementation, especially in larger human space systems where delivery mass or volume can be a constrained commodity. • Concepts developed without an adequate systems-engineering basis, including design and operations experience, may miss significant functionality and subsequent mass required for integration or operations. • Further uncertainty can be associated with not fully understanding design best practices and standards that drive mass, such as design for minimum risk or fault tolerance.1 • Finally, the appropriate systems engineering mass properties management rigor and technical discipline insight are required to set the mass baseline, including appropriate mass growth allowance (MGA) to ensure program success. Mass is a key quantity that should be constantly monitored by the systems engineer and the program/project management stakeholder to ensure mission compatibility throughout the project life cycle. In addition, mass is a key programmatic performance metric monitored by the NASA Chief Financial Officer for current and future program cost estimating. NASA Exploration Systems sought an assessment of reasonableness with respect to different potential rover concepts that balances mass needs and human-class cargo lander capabilities. Appropriate systems engineering mass properties management rigor and technical discipline insight were used, and are required to set the mass baseline, including appropriate MGA to ensure program success. Two independent Lunar rover concepts were evaluated, with a goal to understand concept credibility and the Lunar rover designs potential extensibility for Mars surface operations. A notional generic rover concept is shown in Figure 1.

Systems Engineering↗

Application of SAE ARP4754A to Flight Critical Systems

This report documents applications of ARP4754A to the development of modern computer-based (i.e., digital electronics, software and network-based) aircraft systems. This study is to offer insight and provide educational value relative to the guidelines in ARP4754A and provide an assessment of the current state-of-the- practice within industry and regulatory bodies relative to development assurance for complex and safety-critical computer-based aircraft systems.

Peterson, Eric M.↗

An Approach for Identifying IASMS Services, Functions, and Capabilities From Data Sources

Assuring safety in the NAS with the inclusion of new entrants that are part of Advanced Air Mobility (AAM) will require overcoming unique safety challenges that result from combining innovative technologies with novel airspace concepts for moving people and cargo using semi-autonomous/autonomous vehicles. Overcoming these AAM safety assurance challenges is the focus of the In-time Aviation Safety Management System (IASMS). The IASMS Concept of Operations (ConOps) describes an interconnected set of services, functions, and capabilities (SFCs)designed to manage operational risks, identify unknown risks, and inform system design to mitigate risk. This paper describes a broad approach for identifying SFCs involving technology trends in research, assessment of known and unknown risks in safety reports, and causal and contributing factors in aviation accidents and incidents. This approach leverages these sources to identify potential SFCs that enable the Monitor, Assess, and Mitigate (M-A-M)functionality that represents the enabling framework of the IASMS.

Kyle Ellis↗

A study of carburetor/induction system icing in general aviation accidents

An assessment of the frequency and severity of carburetor/induction icing in general-aviation accidents was performed. The available literature and accident data from the National Transportation Safety Board were collected. A computer analysis of the accident data was performed. Between 65 and 90 accidents each year involve carburetor/induction system icing as a probable cause/factor. Under conditions conducive to carburetor/induction icing, between 50 and 70 percent of engine malfunction/failure accidents (exclusive of those due to fuel exhaustion) are due to carburetor/induction system icing. Since the evidence of such icing may not remain long after an accident, it is probable that the frequency of occurrence of such accidents is underestimated; therefore, some extrapolation of the data was conducted. The problem of carburetor/induction system icing is particularly acute for pilots with less than 1000 hours of total flying time. The severity of such accidents is about the same as any accident resulting from a forced landing or precautionary landing. About 144 persons, on the average, are exposed to death and injury each year in accidents involving carburetor/induction icing as a probable cause/factor.

Obermayer, R. W.↗

Health Management and Prognostics for Electric Aircraft Powertrain

W and c Any air borne vehicle needs incorporating safety as key parameter of measure, and inclusion of autonomy raises the critical need for safety under autonomous operations. Management of faults and component degradation is key as complexity in autonomous operations grow over the period of time. Therefore, in addition to basic operational requirements, an autonomous electric vehicle should be able to make accurate estimates of its current system health and take the correct decisions to complete its mission successfully. Real-time safety and state-awareness tools are therefore essential for the vehicle to be able to reach its destination in a safe and successful manner. The need for safety assurance and health management capabilities is particularly relevant for aircraft electric propulsion systems, which are relatively new and with limited historical to learn. They are critical systems requiring high power density along with reliability, resilience, efficient management of weight, and operational costs. A model- based fault diagnosis and prognostics approach of complex critical systems can successfully accomplish the safety and state awareness goal for such electric propulsion systems, enabling autonomous decision making capability for safe and efficient operation. To identify critical components in the system a Qualitative Bayesian approach using FMECA is implemented. This requires the assessment of some quantities representing the state of the electric unmanned aerial systems (e-UAS), as well as look-ahead forecasts of such states during the entire flight, presented in form of safety metrics (SM). In-service data and performance data gathered from degraded components sup- ports diagnostic and prognostic methods for these systems, but this data can be difficult to obtain as weight and packaging restrictions reduce redundancy and instrumentation on-board the vehicle. Therefore, an model-based framework should be capable or operating with limited data. In addition to data scarcity, the variability of such complex critical systems re- quires the model-based framework to reason in the presence of uncertainty, such as sensor noise, and modeling imperfections. Quantification of errors and uncertainties in the measured states and quantities is therefore a fundamental step for a precise estimation of such SMs; un-modeled uncertainty may result in erroneous state assessment and un- reliable predictions of future states of e-UAVs. Typical, centralized model-based schemes suffer from inherent disadvantages such as computational complexity, single point of failure, and scalability issues, and therefore may fail in such a complex scenario. This paper presents a methodology for developing a system level diagnostics and prognostics approach using a Qualitative Bayesian FMECA approach along with a formal uncertainty management framework for an e-UAS. In this work we demonstrate the efficacy of the framework to predict effects of sub-system level degradation on vehicle operation incorporating uncertainty management to predict future behavior under different operating conditions.

Kulkarni, Chetan↗

Environmentally Sound Processing Technology: JANNAF Safety and Environmental Protection Subcommittee and Propellant Development and Characterization Subcommittee Joint Workshop

Topics covered include: Risk assessment of hazardous materials, Automated systems for pollution prevention and hazardous materials elimination, Study design for the toxicity evaluation of ammonium perchlorate, Plasma sprayed bondable stainless surface coatings, Development of CFC-free cleaning processes, New fluorinated solvent alternatives to ozone depleting solvents, Cleaning with highly fluorinated liquids, Biotreatment of propyleneglycol nitrate by anoxic denitrification, Treatment of hazardous waste with white rot fungus, Hydrothermal oxidation as an environmentally benign treatment technology, Treatment of solid propellant manufacturing wastes by base hydrolysis, Design considerations for cleaning using supercritical fluid technology, and Centrifugal shear carbon dioxide cleaning.

Pickett, Lorri A.↗

CAST Safety Enhancement Research on Airplane State Awareness and Prediction Technologies

Loss of control in flight (LOC-I) is the leading cause of fatal aircraft accidents. A study of LOC accidents and incidents, commissioned by the Commercial Aviation Safety Team (CAST) identified a growing trend in loss of Airplane State Awareness (ASA) by the flight crew. This has led to recommended safety enhancements that include flight deck technologies for improving current and predicted energy state awareness. In this talk, we discuss recent CAST motivated efforts to develop new information systems for predicting and assessing the future aircraft energy state and auto-flight configuration. The outputs from these systems can serve multiple purposes, including improved pilot alerting for anticipating and recovering from problematic flight conditions, as well as higher level flight safety assurance for autonomous operations.

Schuet, Stefan↗

Environmental assessment overview

The assessment program has as its objectives: to identify the environmental issues associated with the SPS Reference System; to prepare a preliminary assessment based on existing data; to suggest mitigating strategies and provide environmental data and guidance to other components of the program as required; and to plan long-range research to reduce the uncertainty in the preliminary assessment. The key environmental issues associated with the satellite power system are discussed and include human health and safety, ecosystems, climate, and interaction with electromagnetic systems.

Valentino, A. R.↗

Integration of a computerized two-finger gripper for robot workstation safety

A microprocessor-based controller has been developed that continuously monitors and adjusts the gripping force applied by a special two-finger gripper. This computerized force sensing gripper system enables the endeffector gripping action to be independently detected and corrected. The gripping force applied to a manipulated object is real-time monitored for problem situations, situations which can occur during both planned and errant robot arm manipulation. When unspecified force conditions occur at the gripper, the gripping force controller initiates specific reactions to cause dynamic corrections to the continuously variable gripping action. The force controller for this intelligent gripper has been interfaced to the controller of an industrial robot. The gripper and robot controllers communicate to accomplish the successful completion of normal gripper operations as well as unexpected hazardous situations. An example of an unexpected gripping condition would be the sudden deformation of the object being manipulated by the robot. The capabilities of the interfaced gripper-robot system to apply workstation safety measures (e.g., stop the robot) when these unexpected gripping effects occur have been assessed.

Sneckenberger, John E.↗

Five-Segment Reusable Solid Rocket Booster Upgrade

The Five Segment Reusable Solid Rocket Booster (RSRB) feasibility status is presented in viewgraph form. The Five Segment Booster (FSB) objective is to provide a low cost, low risk approach to increase reliability and safety of the Shuttle system. Topics include: booster upgrade requirements; design summary; reliability issues; booster trajectories; launch site assessment; and enhanced abort modes.

Sauvageau, Don↗

Structures and Materials Technologies for Extreme Environments Applied to Reusable Launch Vehicles

This paper provides an overview of the evolution of structures and materials technology approaches to survive the challenging extreme environments encountered by earth-to-orbit space transportation systems, with emphasis on more recent developments in the USA. The evolution of technology requirements and experience in the various approaches to meeting these requirements has significantly influenced the technology approaches. While previous goals were primarily performance driven, more recently dramatic improvements in costs/operations and in safety have been paramount goals. Technologies that focus on the cost/operations and safety goals in the area of hot structures and thermal protection systems for reusable launch vehicles are presented. Assessments of the potential ability of the various technologies to satisfy the technology requirements, and their current technology readiness status are also presented.

Scotti, Stephen J.↗

Impact of Pilot Delay and Non-Responsiveness on the Safety Performance of Airborne Separation

Assessing the safety effects of prediction errors and uncertainty on automationsupported functions in the Next Generation Air Transportation System concept of operations is of foremost importance, particularly safety critical functions such as separation that involve human decision-making. Both ground-based and airborne, the automation of separation functions must be designed to account for, and mitigate the impact of, information uncertainty and varying human response. This paper describes an experiment that addresses the potential impact of operator delay when interacting with separation support systems. In this study, we evaluated an airborne separation capability operated by a simulated pilot. The experimental runs are part of the Safety Performance of Airborne Separation (SPAS) experiment suite that examines the safety implications of prediction errors and system uncertainties on airborne separation assistance systems. Pilot actions required by the airborne separation automation to resolve traffic conflicts were delayed within a wide range, varying from five to 240 seconds while a percentage of randomly selected pilots were programmed to completely miss the conflict alerts and therefore take no action. Results indicate that the strategicAirborne Separation Assistance System (ASAS) functions exercised in the experiment can sustain pilot response delays of up to 90 seconds and more, depending on the traffic density. However, when pilots or operators fail to respond to conflict alerts the safety effects are substantial, particularly at higher traffic densities.

Consiglio, Maria↗

Failure-Tolerant Avionics for Crewed Space Systems Recommended Best Practices

This paper provides an overview of some of the major steps needed to mature and justify the design of an avionics system for crewed spacecraft. It is organized as a collection of artifacts or pieces of evidence that NASA needs to assess the system at design reviews, including a functional failure modes and effects analysis (FFMEA), fault containment region (FCR) definitions, the failure hypothesis, and reliability analysis. This paper is intended as a reference for designers working on NASA crewed spaceflight projects, reliability engineers responsible for avionics system assessments, and program managers wanting to understand what evidence is required at design reviews to ensure crew safety and mission success.

Avionics↗