Search NASA⌕ Search

SEARCH · Search NASA

Results for “risk constraints”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 289 records · Page 16
All sourcesNASA NTRSDOE OSTI
NASA NTRSDate not supplied

Quantifying Medical Risk on a Long Duration Lunar Mission: A Demonstration of NASA’s IMPACT Tradespace Analysis Tool

Background NASA’s human exploration spaceflight missions to the Moon and Mars present unprecedented challenges for in-mission medical care. The distance from Earth will mean increased mission durations, communication delays, limited to no resupply opportunities, and constraints on the medical evacuation of astronauts. Mass, volume, power, and data will be limited while higher demands will be placed on the crew to manage medical care. NASA’s Moon to Mars exploration strategy lays out increasingly complex Artemis missions both in terms of duration and operations. In these more challenging deep space missions, it is important to quantitatively estimate the human medical risk to inform a traditional heuristic approach to medical risk. Prior tools have been developed for missions in low Earth orbit, but a new tool is required to plan for future exploration missions. Methods IMPACT (Informing Mission Planning via Analysis of Complex Tradespaces) is a risk assessment tool developed by NASA to advance exploration mission medical system design by quantitatively estimating mission medical risk. IMPACT v1.0 includes a novel evidence library baselined to exploration environments; an expanded list of 119 medical conditions; the addition of medical resources; and the ability for rapid and iterative analysis. Medical system risk estimates include loss of crew life, consideration of the need for return to definitive care (medical evacuation), and an estimate of crew time affected due to medical conditions. A notional long duration lunar orbit and lunar surface design reference mission (DRM) was chosen with a 4-astronaut crew to represent a sustained exploration Artemis mission. Results/Discussion Overall, IMPACT successfully quantified medical risk and derived an optimized medical system to support crew on a long duration lunar mission. In this DRM, the calculated loss of crew life from a medical event was 0.008 events per mission, risk of potential need for evacuation was 0.30 events per mission, and cumulative crew time affected by medical conditions was 103 days. The medical conditions that most contributed to overall medical risk were decompression sickness, trauma conditions, and respiratory failure. The conditions that had the largest effects on crew performance included musculoskeletal injuries and lunar dust exposure. The IMPACT-generated medical system included resources that target the most common and highest risk conditions. This systematic analysis demonstrates the value of the IMPACT tool in medical system design for human exploration spaceflight missions.

Missions to Mars↗
NASA NTRS2024

Quantifying Medical Risk on a Long Duration Lunar Mission: A Demonstration of NASA’s IMPACT Tradespace Analysis Tool

Background NASA’s human exploration spaceflight missions to the Moon and Mars present unprecedented challenges for in-mission medical care. The distance from Earth will mean increased mission durations, communication delays, limited to no resupply opportunities, and constraints on the medical evacuation of astronauts. Mass, volume, power, and data will be limited while higher demands will be placed on the crew to manage medical care. NASA’s Moon to Mars exploration strategy lays out increasingly complex Artemis missions both in terms of duration and operations. In these more challenging deep space missions, it is important to quantitatively estimate the human medical risk to inform a traditional heuristic approach to medical risk. Prior tools have been developed for missions in low Earth orbit, but a new tool is required to plan for future exploration missions. Methods IMPACT (Informing Mission Planning via Analysis of Complex Tradespaces) is a risk assessment tool developed by NASA to advance exploration mission medical system design by quantitatively estimating mission medical risk. IMPACT v1.0 includes a novel evidence library baselined to exploration environments; an expanded list of 119 medical conditions; the addition of medical resources; and the ability for rapid and iterative analysis. Medical system risk estimates include loss of crew life, consideration of the need for return to definitive care (medical evacuation), and an estimate of crew time affected due to medical conditions. A notional long duration lunar orbit and lunar surface design reference mission (DRM) was chosen with a 4-astronaut crew to represent a sustained exploration Artemis mission. Results/Discussion Overall, IMPACT successfully quantified medical risk and derived an optimized medical system to support crew on a long duration lunar mission. In this DRM, the calculated loss of crew life from a medical event was 0.008 events per mission, risk of potential need for evacuation was 0.30 events per mission, and cumulative crew time affected by medical conditions was 103 days. The medical conditions that most contributed to overall medical risk were decompression sickness, trauma conditions, and respiratory failure. The conditions that had the largest effects on crew performance included musculoskeletal injuries and lunar dust exposure. The IMPACT-generated medical system included resources that target the most common and highest risk conditions. This systematic analysis demonstrates the value of the IMPACT tool in medical system design for human exploration spaceflight missions.

Missions to Mars↗
NASA NTRS2006

Planned Environmental Microbiology Aspects of Future Lunar and Mars Missions

With the establishment of the Constellation Program, NASA has initiated efforts designed similar to the Apollo Program to return to the moon and subsequently travel to Mars. Early lunar sorties will take 4 crewmembers to the moon for 4 to 7 days. Later missions will increase in duration up to 6 months as a lunar habitat is constructed. These missions and vehicle designs are the forerunners of further missions destined for human exploration of Mars. Throughout the planning and design process, lessons learned from the International Space Station (ISS) and past programs will be implemented toward future exploration goals. The standards and requirements for these missions will vary depending on life support systems, mission duration, crew activities, and payloads. From a microbiological perspective, preventative measures will remain the primary techniques to mitigate microbial risk. Thus, most of the effort will focus on stringent preflight monitoring requirements and engineering controls designed into the vehicle, such as HEPA air filters. Due to volume constraints in the CEV, in-flight monitoring will be limited for short-duration missions to the measurement of biocide concentration for water potability. Once long-duration habitation begins on the lunar surface, a more extensive environmental monitoring plan will be initiated. However, limited in-flight volume constraints and the inability to return samples to Earth will increase the need for crew capabilities in determining the nature of contamination problems and method of remediation. In addition, limited shelf life of current monitoring hardware consumables and limited capabilities to dispose of biohazardous trash will drive flight hardware toward non-culture based methodologies, such as hardware that rapidly distinguishes biotic versus abiotic surface contamination. As missions progress to Mars, environmental systems will depend heavily on regeneration of air and water and biological waste remediation and regeneration systems, increasing the need for environmental monitoring. Almost complete crew autonomy will be needed for assessment and remediation of contamination problems. Cabin capacity will be limited; thus, current methods of microbial monitoring will be inadequate. Future methodology must limit consumables, and these consumables must have a shelf life of over three years. In summary, missions to the moon and Mars will require a practical design that prudently uses available resources to mitigate microbial risk to the crew.

Ott, C. Mark↗
DOE OSTI2021

Optimization models for integrated biorefinery operations

Variations of physical and chemical characteristics of biomass lead to an uneven flow of biomass in a biorefinery, which reduces equipment utilization and increases operational costs. Uncertainty of biomass supply and high processing costs increase the risk of investing in the US’s cellulosic biofuel industry. We propose a stochastic programming model to streamline processes within a biorefinery. A chance constraint models system’s reliability requirement that the reactor is operating at a high utilization rate given uncertain biomass moisture content, particle size distribution, and equipment failure. The model identifies operating conditions of equipment and inventory level to maintain a continuous flow of biomass to the reactor. Furthermore, the sample average approximation method approximates the chance constraint and a bisection search-based heuristic solves this approximation. A case study is developed using real-life data collected at Idaho National Laboratory’s biomass processing facility. An extensive computational analysis indicates that sequencing of biomass bales based on moisture level, increasing storage capacity, and managing particle size distribution, increases utilization of the reactor and reduces operational costs.

09 BIOMASS FUELS↗
DOE OSTI2021

Plant Water Profiler: A Water Balance and True Cost of Water Calculator for Manufacturing Plants

As the uncertainty of a sustained water supply, regulatory constraints, competition among end users, and public scrutiny increases, a growing number of manufacturing sectors are adapting to current and emerging water-related risks by optimizing productivity and reducing waste. As a step toward increasing water use efficiency and making informed business decisions, corporations must make an effort to understand and track their water demands, losses, and costs associated with each subsystem within their facilities. Manufacturers are often unaware of the “true cost of water” (i.e., the total costs associated with procurement, treatment, and consumption of water, and wastewater disposal), which reduces the visibility of the actual impact of water-saving measures. To help manufacturers account for water procurement and use in manufacturing operations, quantify the true cost of water, and identify potential areas for water and associated energy cost savings, an open access tool—Plant Water Profiler (PWP)—was developed. The tool is based on water mass balance analysis and has been adopted as the core analysis tool for plant water use assessments, Water In-Plant Training (Water INPLT), as part of the US Department of Energy’s Better Plants program. During three pilot INPLTs conducted in 2019 at three manufacturing facilities, the PWP tool allowed users to understand water flows within the facilities and provided additional capabilities to analyze their water use. This paper describes the methodology behind the PWP tool and its implementation through pilot Water INPLT trainings delivered in three manufacturing facilities in the United States. The three case studies demonstrate opportunities to improve water efficiency and reduce associated costs and the challenges encountered in three different manufacturing sectors.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗
NASA NTRS1993

Risk management for the Space Exploration Initiative

Probabilistic Risk Assessment (PRA) is a quantitative engineering process that provides the analytic structure and decision-making framework for total programmatic risk management. Ideally, it is initiated in the conceptual design phase and used throughout the program life cycle. Although PRA was developed for assessment of safety, reliability, and availability risk, it has far greater application. Throughout the design phase, PRA can guide trade-off studies among system performance, safety, reliability, cost, and schedule. These studies are based on the assessment of the risk of meeting each parameter goal, with full consideration of the uncertainties. Quantitative trade-off studies are essential, but without full identification, propagation, and display of uncertainties, poor decisions may result. PRA also can focus attention on risk drivers in situations where risk is too high. For example, if safety risk is unacceptable, the PRA prioritizes the risk contributors to guide the use of resources for risk mitigation. PRA is used in the Space Exploration Initiative (SEI) Program. To meet the stringent requirements of the SEI mission, within strict budgetary constraints, the PRA structure supports informed and traceable decision-making. This paper briefly describes the SEI PRA process.

Buchbinder, Ben↗
NASA NTRS1993

Supersonic airplane study and design

A supersonic airplane creates shocks which coalesce and form a classical N-wave on the ground, forming a double bang noise termed sonic boom. A recent supersonic commercial transport (the Concorde) has a loud sonic boom (over 100 PLdB) and low aerodynamic performance (cruise lift-drag ratio 7). To enhance the U.S. market share in supersonic transport, an airframer's market risk for a low-boom airplane has to be reduced. Computational fluid dynamics (CFD) is used to design airplanes to meet the dual constraints of low sonic boom and high aerodynamic performance. During the past year, a research effort was focused on three main topics. The first was to use the existing design tools, developed in past years, to design one of the low-boom wind-tunnel configurations (Ames Model 3) for testing at Ames Research Center in April 1993. The second was to use a Navier-Stokes code (Overflow) to support the Oblique-All-Wing (OAW) study at Ames. The third was to study an optimization technique applied on a Haack-Adams body to reduce aerodynamic drag.

Cheung, Samson↗
NASA NTRS1999

Advanced Refrigerator/Freezer Technology Development Project

The Advanced Refrigerator/Freezer (R/F) Technology Development Project was initiated in 1994, on the basis of recommendations of a team of NASA Scientists and engineers, who assessed the need for advanced technology to support future life and biomedical sciences space flight missions. The project, which was cofunded by NASA's Office of Aerospace Technology and Life and Biomedical Sciences & Applications Division, has two phases. In the Phase I Advanced R/F Technology Assessment, candidate technologies were identified and ranked, on the basis of a combination of their effect on system performance and their risk of developmental success. In Phase II Technology Development, the advanced technologies with the highest combined ranking, which could be accomplished within the budgetary constraints, were pursued. The effort has been mainly by contract, with a modest in-house effort at the NASA Lewis Research Center. Oceaneering Space Systems (OSS) of Houston, Texas, was selected as the prime contractor for both contract phases.

Cairelli, James E.↗
NASA NTRS2007

iPhone in NASA Ground Operations

A comprehensive review of the literature and historical background of NASA established a need for an easy-to-implement technological improvement to displaying procedures which is cost effective and risk reducing. Previous unsuccessful attempts have led this team to explore the practicality of using a mobile handheld device. The major products, inputs, resources, constraints, planning and effort required for consideration of this type of solution were outlined. After analyzing the physical, environmental, life-cycle, functional, and socio-technical requirements, a Functional Analysis was performed to describe the top-level, second-level, and third-level functions of the system requirements. In addition, the risk/value proposition of conversion to a new technology was considered and gave a blueprint for transitioning along with the tasks necessary to implement the device into the Vehicle Assembly Building's (VAB) current infrastructure. A Work Breakdown Structure (WBS) described the elemental work items of the implementation. Once the viability of this system was confirmed, a device was selected through use of technical design comparison methods including the Pugh Matrix and House of Quality. Comparison and evaluation of the Apple iPhone, Motorola Q, Blackberry, PC Notebook, and PDA revealed that the iPhone is the most suitable device for this task. This paper outlines the device design/ architecture, as well as some of the required infrastructure.

Benedict, Ashley↗
DOE OSTI2020

STOCHASTIC OPTIMIZATION FOR LONG TERM CAPITAL STRUCTURES, SYSTEMS, AND COMPONENTS REFURBISHMENT AND REPLACEMENT

As commercial nuclear power plants (NPPs) pursue extended plant operations in the form of Second License Renewals (SLRs), opportunities exist for these plants to provide capital investments to ensure long-term, safe, and economic performance. Several utilities have already announced their intention to pursue extended operations for one or more of their NPPs via SLR2. The goal of this research is to develop a riskinformed approach to evaluate and prioritize plant capital investments made in preparation for, and during the period of, extended plant operations to support decisions in NPP operations. In order to prioritize project selection via a riskinformed approach we developed a single decision-making tool that integrates safety/reliability, cost, and stochastic optimization models to provide users with data analysis capabilities to more cost effectively manage plant assets. Both stochastic analysis methods—such as Monte Carlo-based sampling strategies—and multi-stage stochastic optimization strategies are employed to provide priority lists to decisionmakers in support of risk-informed decisions. We applied the proposed method to a trial application of projected replacement/refurbishment expenditures for plant capital assets (i.e., Structures, Systems, and Components [SSCs]). The objective is to optimize the SSC replacement/refurbishment schedule in terms of economic constraints, data uncertainties, and SSC reliability data, as well to generate a priority list for maximizing returns on investment.

42 ENGINEERING↗
NASA NTRS2013

Orion MPCV GN and C End-to-End Phasing Tests

End-to-end integration tests are critical risk reduction efforts for any complex vehicle. Phasing tests are an end-to-end integrated test that validates system directional phasing (polarity) from sensor measurement through software algorithms to end effector response. Phasing tests are typically performed on a fully integrated and assembled flight vehicle where sensors are stimulated by moving the vehicle and the effectors are observed for proper polarity. Orion Multi-Purpose Crew Vehicle (MPCV) Pad Abort 1 (PA-1) Phasing Test was conducted from inertial measurement to Launch Abort System (LAS). Orion Exploration Flight Test 1 (EFT-1) has two end-to-end phasing tests planned. The first test from inertial measurement to Crew Module (CM) reaction control system thrusters uses navigation and flight control system software algorithms to process commands. The second test from inertial measurement to CM S-Band Phased Array Antenna (PAA) uses navigation and communication system software algorithms to process commands. Future Orion flights include Ascent Abort Flight Test 2 (AA-2) and Exploration Mission 1 (EM-1). These flights will include additional or updated sensors, software algorithms and effectors. This paper will explore the implementation of end-to-end phasing tests on a flight vehicle which has many constraints, trade-offs and compromises. Orion PA-1 Phasing Test was conducted at White Sands Missile Range (WSMR) from March 4-6, 2010. This test decreased the risk of mission failure by demonstrating proper flight control system polarity. Demonstration was achieved by stimulating the primary navigation sensor, processing sensor data to commands and viewing propulsion response. PA-1 primary navigation sensor was a Space Integrated Inertial Navigation System (INS) and Global Positioning System (GPS) (SIGI) which has onboard processing, INS (3 accelerometers and 3 rate gyros) and no GPS receiver. SIGI data was processed by GN&C software into thrust magnitude and direction commands. The processing changes through three phases of powered flight: pitchover, downrange and reorientation. The primary inputs to GN&C are attitude position, attitude rates, angle of attack (AOA) and angle of sideslip (AOS). Pitch and yaw attitude and attitude rate responses were verified by using a flight spare SIGI mounted to a 2-axis rate table. AOA and AOS responses were verified by using a data recorded from SIGI movements on a robotic arm located at NASA Johnson Space Center. The data was consolidated and used in an open-loop data input to the SIGI. Propulsion was the Launch Abort System (LAS) Attitude Control Motor (ACM) which consisted of a solid motor with 8 nozzles. Each nozzle has active thrust control by varying throat area with a pintle. LAS ACM pintles are observable through optically transparent nozzle covers. SIGI movements on robot arm, SIGI rate table movements and LAS ACM pintle responses were video recorded as test artifacts for analysis and evaluation. The PA-1 Phasing Test design was determined based on test performance requirements, operational restrictions and EGSE capabilities. This development progressed during different stages. For convenience these development stages are initial, working group, tiger team, Engineering Review Team (ERT) and final.

Neumann, Brian C.↗
NASA NTRS1998

Evaluation of risk from space radiation with high-energy heavy ion beams

The most challenging radiation in space consists of fully ionized atomic elements with high energy for which only the few lowest energy ions can be stopped in shielding materials. The health risk from exposure to these ions and their secondary radiations generated in shield materials is poorly understood since there are few human data and a systematic study in relevant animal model systems has not been made. The accuracy of risk prediction is described as the major limiting factor in the management of space radiation risk. The expected impact of systematic studies is examined using the limited available biological data and models. Given the limitations of current predictions, models must be developed that are able to incorporate the required fundamental scientific data into accurate risk estimates. The important radiation components that can be provided for laboratory testing are identified. The use of ground-based accelerator beams to simulate space radiation is explained and quantitative scientific constraints on such facilities are derived. Three facilities, one each in the United States, in Germany and in Japan, currently have the partial capability to satisfy these constraints. A facility has been proposed using the Brookhaven National Laboratory Booster Synchrotron in the United States; in conjuction with other on-site accelerators, it will be able to provide the full range of heavy ion beams and energies required.

NASA Discipline Radiation Health↗
NASA NTRS2003

High Power Laser Diode Arrays for 2-Micron Solid State Coherent Lidars Applications

Laser diode arrays are critical components of any diode-pumped solid state laser systems, constraining their performance and reliability. Laser diode arrays (LDAs) are used as the pump source for energizing the solid state lasing media to generate an intense coherent laser beam with a high spatial and spectral quality. The solid state laser design and the characteristics of its lasing materials define the operating wavelength, pulse duration, and power of the laser diodes. The pump requirements for high pulse energy 2-micron solid state lasers are substantially different from those of more widely used 1-micron lasers and in many aspects more challenging [1]. Furthermore, the reliability and lifetime demanded by many coherent lidar applications, such as global wind profiling from space and long-range clear air turbulence detection from aircraft, are beyond the capability of currently available LDAs. In addition to the need for more reliable LDAs with longer lifetime, further improvement in the operational parameters of high power quasi-cw LDAs, such as electrical efficiency, brightness, and duty cycle, are also necessary for developing cost-effective 2-micron coherent lidar systems for applications that impose stringent size, heat dissipation, and power constraints. Global wind sounding from space is one of such applications, which is the main driver for this work as part of NASA s Laser Risk Reduction Program. This paper discusses the current state of the 792 nm LDA technology and the technology areas being pursued toward improving their performance. The design and development of a unique characterization facility for addressing the specific issues associated with the LDAs for pumping 2-micron coherent lidar transmitters and identifying areas of technological improvement will be described. Finally, the results of measurements to date on various standard laser diode packages, as well as custom-designed packages with potentially longer lifetime, will be reported.

Amzajerdian, Farzin↗
NASA NTRS2006

START Analysis for ESAS Capability Needs Prioritization

START is a tool to optimize research and development primarily for NASA missions. It was developed within the Strategic Systems Technology Program Office, a division of the Office of the Chief Technologist at NASA's Jet Propulsion Laboratory. START is capable of quantifying and comparing the risks, costs, and potential returns of technologies that are candidates for funding. START can be enormously helpful both in selecting technologies for development -- within the constraints of budget, schedule, and other resources -- and in monitoring their progress. START's methods are applicable to everything from individual tasks to multiple projects comprising entire programs of investigation. They can address virtually any technology assessment and capability prioritization issue. In this report, START is used to analyze the capability needs using data from NASA's Exploration Systems Architecture Study (ESAS).

optimization↗
NASA NTRS2011

Space: The Final Frontier of Bone Density

It is a medical requirement at NASA to evaluate the skeletal integrity of "long-duration" astronauts by measuring bone mineral density [BMD] with DXA technology. A long-duration mission is a spaceflight that is greater than 30 days but is typically the continuous 120-180 day missions aboard the International Space Station [ISS]. Not only does NASA use the BMD index to monitor fracture risk in this astronaut population, but these measures are also used to describe the effects of spaceflight, to certify skeletal health readiness for flight, to monitor the recovery of lost bone mass after return to earth, and to evaluate the efficacy of countermeasures to bone loss. However, despite the fact that DXA-based BMD is a widely-applied surrogate for bone strength that is grounded in an abundance of population-based fracture data, its applicability to the long-duration astronaut is limited. The cohort of long-duration astronauts is not the typical group for evaluating osteoporosis or determining age-related fracture risk. The cohort is young (< 55 years), predominantly male and exposed to novel risk factors for bone loss besides the weightlessness of space. NASA is concerned about early onset osteoporosis in the astronaut exposed to long-duration spaceflight, especially since any detectable symptoms are likely to manifest after return to earth and perhaps years after space travel. This risk raises the question: is NASA doing enough now to mitigate a fracture event that may manifest later? This presentation will discuss the limitations and constraints to understanding skeletal changes due to prolonged spaceflight and the recommendations, by clinical experts in osteoporosis and BMD, to transition research technologies for clinical decision-making by NASA.

Sibonga, Jean D.↗
NASA NTRS2015

A Vehicle Management End-to-End Testing and Analysis Platform for Validation of Mission and Fault Management Algorithms to Reduce Risk for NASAs Space Launch System

The engineering development of the National Aeronautics and Space Administration's (NASA) new Space Launch System (SLS) requires cross discipline teams with extensive knowledge of launch vehicle subsystems, information theory, and autonomous algorithms dealing with all operations from pre-launch through on orbit operations. The nominal and off-nominal characteristics of SLS's elements and subsystems must be understood and matched with the autonomous algorithm monitoring and mitigation capabilities for accurate control and response to abnormal conditions throughout all vehicle mission flight phases, including precipitating safing actions and crew aborts. This presents a large and complex systems engineering challenge, which is being addressed in part by focusing on the specific subsystems involved in the handling of off-nominal mission and fault tolerance with response management. Using traditional model-based system and software engineering design principles from the Unified Modeling Language (UML) and Systems Modeling Language (SysML), the Mission and Fault Management (M&FM) algorithms for the vehicle are crafted and vetted in Integrated Development Teams (IDTs) composed of multiple development disciplines such as Systems Engineering (SE), Flight Software (FSW), Safety and Mission Assurance (S&MA) and the major subsystems and vehicle elements such as Main Propulsion Systems (MPS), boosters, avionics, Guidance, Navigation, and Control (GNC), Thrust Vector Control (TVC), and liquid engines. These model-based algorithms and their development lifecycle from inception through FSW certification are an important focus of SLS's development effort to further ensure reliable detection and response to off-nominal vehicle states during all phases of vehicle operation from pre-launch through end of flight. To test and validate these M&FM algorithms a dedicated test-bed was developed for full Vehicle Management End-to-End Testing (VMET). For addressing fault management (FM) early in the development lifecycle for the SLS program, NASA formed the M&FM team as part of the Integrated Systems Health Management and Automation Branch under the Spacecraft Vehicle Systems Department at the Marshall Space Flight Center (MSFC). To support the development of the FM algorithms, the VMET developed by the M&FM team provides the ability to integrate the algorithms, perform test cases, and integrate vendor-supplied physics-based launch vehicle (LV) subsystem models. Additionally, the team has developed processes for implementing and validating the M&FM algorithms for concept validation and risk reduction. The flexibility of the VMET capabilities enables thorough testing of the M&FM algorithms by providing configurable suites of both nominal and off-nominal test cases to validate the developed algorithms utilizing actual subsystem models such as MPS, GNC, and others. One of the principal functions of VMET is to validate the M&FM algorithms and substantiate them with performance baselines for each of the target vehicle subsystems in an independent platform exterior to the flight software test and validation processes. In any software development process there is inherent risk in the interpretation and implementation of concepts from requirements and test cases into flight software compounded with potential human errors throughout the development and regression testing lifecycle. Risk reduction is addressed by the M&FM group but in particular by the Analysis Team working with other organizations such as S&MA, Structures and Environments, GNC, Orion, Crew Office, Flight Operations, and Ground Operations by assessing performance of the M&FM algorithms in terms of their ability to reduce Loss of Mission (LOM) and Loss of Crew (LOC) probabilities. In addition, through state machine and diagnostic modeling, analysis efforts investigate a broader suite of failure effects and associated detection and responses to be tested in VMET to ensure reliable failure detection, and confirm responses do not create additional risks or cause undesired states through interactive dynamic effects with other algorithms and systems. VMET further contributes to risk reduction by prototyping and exercising the M&FM algorithms early in their implementation and without any inherent hindrances such as meeting FSW processor scheduling constraints due to their target platform - the ARINC 6535-partitioned Operating System, resource limitations, and other factors related to integration with other subsystems not directly involved with M&FM such as telemetry packing and processing. The baseline plan for use of VMET encompasses testing the original M&FM algorithms coded in the same C++ language and state machine architectural concepts as that used by FSW. This enables the development of performance standards and test cases to characterize the M&FM algorithms and sets a benchmark from which to measure their effectiveness and performance in the exterior FSW development and test processes. This paper is outlined in a systematic fashion analogous to a lifecycle process flow for engineering development of algorithms into software and testing. Section I describes the NASA SLS M&FM context, presenting the current infrastructure, leading principles, methods, and participants. Section II defines the testing philosophy of the M&FM algorithms as related to VMET followed by section III, which presents the modeling methods of the algorithms to be tested and validated in VMET. Its details are then further presented in section IV followed by Section V presenting integration, test status, and state analysis. Finally, section VI addresses the summary and forward directions followed by the appendices presenting relevant information on terminology and documentation.

Trevino, Luis↗
NASA NTRS2015

A Vehicle Management End-to-End Testing and Analysis Platform for Validation of Mission and Fault Management Algorithms to Reduce Risk for NASA's Space Launch System

The engineering development of the new Space Launch System (SLS) launch vehicle requires cross discipline teams with extensive knowledge of launch vehicle subsystems, information theory, and autonomous algorithms dealing with all operations from pre-launch through on orbit operations. The characteristics of these spacecraft systems must be matched with the autonomous algorithm monitoring and mitigation capabilities for accurate control and response to abnormal conditions throughout all vehicle mission flight phases, including precipitating safing actions and crew aborts. This presents a large and complex system engineering challenge, which is being addressed in part by focusing on the specific subsystems involved in the handling of off-nominal mission and fault tolerance with response management. Using traditional model based system and software engineering design principles from the Unified Modeling Language (UML) and Systems Modeling Language (SysML), the Mission and Fault Management (M&FM) algorithms for the vehicle are crafted and vetted in specialized Integrated Development Teams (IDTs) composed of multiple development disciplines such as Systems Engineering (SE), Flight Software (FSW), Safety and Mission Assurance (S&MA) and the major subsystems and vehicle elements such as Main Propulsion Systems (MPS), boosters, avionics, Guidance, Navigation, and Control (GNC), Thrust Vector Control (TVC), and liquid engines. These model based algorithms and their development lifecycle from inception through Flight Software certification are an important focus of this development effort to further insure reliable detection and response to off-nominal vehicle states during all phases of vehicle operation from pre-launch through end of flight. NASA formed a dedicated M&FM team for addressing fault management early in the development lifecycle for the SLS initiative. As part of the development of the M&FM capabilities, this team has developed a dedicated testbed that integrates specific M&FM algorithms, specialized nominal and off-nominal test cases, and vendor-supplied physics-based launch vehicle subsystem models. Additionally, the team has developed processes for implementing and validating these algorithms for concept validation and risk reduction for the SLS program. The flexibility of the Vehicle Management End-to-end Testbed (VMET) enables thorough testing of the M&FM algorithms by providing configurable suites of both nominal and off-nominal test cases to validate the developed algorithms utilizing actual subsystem models such as MPS. The intent of VMET is to validate the M&FM algorithms and substantiate them with performance baselines for each of the target vehicle subsystems in an independent platform exterior to the flight software development infrastructure and its related testing entities. In any software development process there is inherent risk in the interpretation and implementation of concepts into software through requirements and test cases into flight software compounded with potential human errors throughout the development lifecycle. Risk reduction is addressed by the M&FM analysis group working with other organizations such as S&MA, Structures and Environments, GNC, Orion, the Crew Office, Flight Operations, and Ground Operations by assessing performance of the M&FM algorithms in terms of their ability to reduce Loss of Mission and Loss of Crew probabilities. In addition, through state machine and diagnostic modeling, analysis efforts investigate a broader suite of failure effects and associated detection and responses that can be tested in VMET to ensure that failures can be detected, and confirm that responses do not create additional risks or cause undesired states through interactive dynamic effects with other algorithms and systems. VMET further contributes to risk reduction by prototyping and exercising the M&FM algorithms early in their implementation and without any inherent hindrances such as meeting FSW processor scheduling constraints due to their target platform - ARINC 653 partitioned OS, resource limitations, and other factors related to integration with other subsystems not directly involved with M&FM such as telemetry packing and processing. The baseline plan for use of VMET encompasses testing the original M&FM algorithms coded in the same C++ language and state machine architectural concepts as that used by Flight Software. This enables the development of performance standards and test cases to characterize the M&FM algorithms and sets a benchmark from which to measure the effectiveness of M&FM algorithms performance in the FSW development and test processes.

Trevino, Luis↗
NASA NTRS2015

A Vehicle Management End-to-End Testing and Analysis Platform for Validation of Mission and Fault Management Algorithms to Reduce Risk for NASA's Space Launch System

The development of the Space Launch System (SLS) launch vehicle requires cross discipline teams with extensive knowledge of launch vehicle subsystems, information theory, and autonomous algorithms dealing with all operations from pre-launch through on orbit operations. The characteristics of these systems must be matched with the autonomous algorithm monitoring and mitigation capabilities for accurate control and response to abnormal conditions throughout all vehicle mission flight phases, including precipitating safing actions and crew aborts. This presents a large complex systems engineering challenge being addressed in part by focusing on the specific subsystems handling of off-nominal mission and fault tolerance. Using traditional model based system and software engineering design principles from the Unified Modeling Language (UML), the Mission and Fault Management (M&FM) algorithms are crafted and vetted in specialized Integrated Development Teams composed of multiple development disciplines. NASA also has formed an M&FM team for addressing fault management early in the development lifecycle. This team has developed a dedicated Vehicle Management End-to-End Testbed (VMET) that integrates specific M&FM algorithms, specialized nominal and off-nominal test cases, and vendor-supplied physics-based launch vehicle subsystem models. The flexibility of VMET enables thorough testing of the M&FM algorithms by providing configurable suites of both nominal and off-nominal test cases to validate the algorithms utilizing actual subsystem models. The intent is to validate the algorithms and substantiate them with performance baselines for each of the vehicle subsystems in an independent platform exterior to flight software test processes. In any software development process there is inherent risk in the interpretation and implementation of concepts into software through requirements and test processes. Risk reduction is addressed by working with other organizations such as S&MA, Structures and Environments, GNC, Orion, the Crew Office, Flight Operations, and Ground Operations by assessing performance of the M&FM algorithms in terms of their ability to reduce Loss of Mission and Loss of Crew probabilities. In addition, through state machine and diagnostic modeling, analysis efforts investigate a broader suite of failure effects and detection and responses that can be tested in VMET and confirm that responses do not create additional risks or cause undesired states through interactive dynamic effects with other algorithms and systems. VMET further contributes to risk reduction by prototyping and exercising the M&FM algorithms early in their implementation and without any inherent hindrances such as meeting FSW processor scheduling constraints due to their target platform - ARINC 653 partitioned OS, resource limitations, and other factors related to integration with other subsystems not directly involved with M&FM. The plan for VMET encompasses testing the original M&FM algorithms coded in the same C++ language and state machine architectural concepts as that used by Flight Software. This enables the development of performance standards and test cases to characterize the M&FM algorithms and sets a benchmark from which to measure the effectiveness of M&FM algorithms performance in the FSW development and test processes. This paper is outlined in a systematic fashion analogous to a lifecycle process flow for engineering development of algorithms into software and testing. Section I describes the NASA SLS M&FM context, presenting the current infrastructure, leading principles, methods, and participants. Section II defines the testing philosophy of the M&FM algorithms as related to VMET followed by section III, which presents the modeling methods of the algorithms to be tested and validated in VMET. Its details are then further presented in section IV followed by Section V presenting integration, test status, and state analysis. Finally, section VI addresses the summary and forward directions followed by the appendices presenting relevant information on terminology and documentation.

Trevino, Luis↗