Search NASA⌕ Search

SEARCH · Search NASA

Results for “System Safety Assessment”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 307 records · Page 17

Failure-Tolerant Avionics for Crewed Space Systems Recommended Best Practices

This paper provides an overview of some of the major steps needed to mature and justify the design of an avionics system for crewed spacecraft. It is organized as a collection of artifacts or pieces of evidence that NASA needs to assess the system at design reviews, including a functional failure modes and effects analysis (FFMEA), fault containment region (FCR) definitions, the failure hypothesis, and reliability analysis. This paper is intended as a reference for designers working on NASA crewed spaceflight projects, reliability engineers responsible for avionics system assessments, and program managers wanting to understand what evidence is required at design reviews to ensure crew safety and mission success.

Avionics↗

Reusable Rocket Engine Advanced Health Management System. Architecture and Technology Evaluation: Summary

In this study, we proposed an Advanced Health Management System (AHMS) functional architecture and conducted a technology assessment for liquid propellant rocket engine lifecycle health management. The purpose of the AHMS is to improve reusable rocket engine safety and to reduce between-flight maintenance. During the study, past and current reusable rocket engine health management-related projects were reviewed, data structures and health management processes of current rocket engine programs were assessed, and in-depth interviews with rocket engine lifecycle and system experts were conducted. A generic AHMS functional architecture, with primary focus on real-time health monitoring, was developed. Fourteen categories of technology tasks and development needs for implementation of the AHMS were identified, based on the functional architecture and our assessment of current rocket engine programs. Five key technology areas were recommended for immediate development, which (1) would provide immediate benefits to current engine programs, and (2) could be implemented with minimal impact on the current Space Shuttle Main Engine (SSME) and Reusable Launch Vehicle (RLV) engine controllers.

Pettit, C. D.↗

A feasibility assessment of nuclear reactor power system concepts for the NASA Growth Space Station

A preliminary feasibility assessment of the integration of reactor power system concepts with a projected growth Space Station architecture was conducted to address a variety of installation, operational, disposition and safety issues. A previous NASA sponsored study, which showed the advantages of Space Station - attached concepts, served as the basis for this study. A study methodology was defined and implemented to assess compatible combinations of reactor power installation concepts, disposal destinations, and propulsion methods. Three installation concepts that met a set of integration criteria were characterized from a configuration and operational viewpoint, with end-of-life disposal mass identified. Disposal destinations that met current aerospace nuclear safety criteria were identified and characterized from an operational and energy requirements viewpoint, with delta-V energy requirement as a key parameter. Chemical propulsion methods that met current and near-term application criteria were identified and payload mass and delta-V capabilities were characterized. These capabilities were matched against concept disposal mass and destination delta-V requirements to provide a feasibility of each combination.

Bloomfield, H. S.↗

A feasibility assessment of installation, operation and disposal options for nuclear reactor power system concepts for a NASA growth space station

A preliminary feasibility assessment of the integration of reactor power system concepts with a projected growth space station architecture was conducted to address a variety of installation, operational disposition, and safety issues. A previous NASA sponsored study, which showed the advantages of space station - attached concepts, served as the basis for this study. A study methodology was defined and implemented to assess compatible combinations of reactor power installation concepts, disposal destinations, and propulsion methods. Three installation concepts that met a set of integration criteria were characterized from a configuration and operational viewpoint, with end-of-life disposal mass identified. Disposal destinations that met current aerospace nuclear safety criteria were identified and characterized from an operational and energy requirements viewpoint, with delta-V energy requirement as a key parameter. Chemical propulsion methods that met current and near-term application criteria were identified and payload mass and delta-V capabilities were characterized. These capabilities were matched against concept disposal mass and destination delta-V requirements to provide the feasibility of each combination.

Bloomfield, Harvey S.↗

Case Study of Meteoroid Fluence on a Mars Sample Return Mission

The Mars Sample Return Campaign must satisfy a Back Planetary Protection requirement that limits the risk of biological contamination of the Earth by Martian microbes. The Earth Re-turn Orbiter (ERO), being developed by the European Space Agency (ESA), will carry a Capture, Containment and Return System (CCRS), which is being developed by NASA to retrieve orbiting samples (OS) from Mars orbit, surround them with two containment layers to create a Contained OS (COS), and transfer the COS to the Earth Entry System (EES), which will be re-leased by ERO to carry the samples through entry, descent and landing at the Utah Test and Training Range. Micrometeoroid impact damage to the Thermal Protection System (TPS) of the EES, which may occur at any time in the ERO mission, is recognized as a potential risk driver for loss of sample containment that needs to be rigorously assessed. A Micrometeoroid Protection System (MMPS) will be implemented to limit that risk. The MMPS consists of a shield covering the TPS called the Micrometeoroid Garage (MMG) and a system of cameras to inspect the TPS. An extensive study was performed by the CCRS Project in collaboration with the NASA Engineering and Safety Center (NESC)to assess the probability of damage to the MMG and TPS by meteoroids over the entire ERO mission. This included the computation of the meteoroid fluence on the MMG and directly on the TPS after EES separation, and assessment of damage to the MMG and TPS via hypervelocity impact tests, hydrocode simulations, and empirical damage prediction and ballistic limit equations (BLEs). The focus of this paper is the meteoroid fluence on the MMG.

Micrometeoroid↗

Case Study of Meteoroid Fluence on a Mars Sample Return Mission

The Mars Sample Return Campaign must satisfy a Back Planetary Protection requirement that limits the risk of biological contamination of the Earth by Martian microbes. The Earth Re-turn Orbiter (ERO), being developed by the European Space Agency (ESA), will carry a Capture, Containment and Return System (CCRS), which is being developed by NASA to retrieve orbiting samples (OS) from Mars orbit, surround them with two containment layers to create a Contained OS (COS), and transfer the COS to the Earth Entry System (EES), which will be re-leased by ERO to carry the samples through entry, descent and landing at the Utah Test and Training Range. Micrometeoroid impact damage to the Thermal Protection System (TPS) of the EES, which may occur at any time in the ERO mission, is recognized as a potential risk driver for loss of sample containment that needs to be rigorously assessed. A Micrometeoroid Protection System (MMPS) will be implemented to limit that risk. The MMPS consists of a shield covering the TPS called the Micrometeoroid Garage (MMG) and a system of cameras to inspect the TPS. An extensive study was performed by the CCRS Project in collaboration with the NASA Engineering and Safety Center (NESC)to assess the probability of damage to the MMG and TPS by meteoroids over the entire ERO mission. This included the computation of the meteoroid fluence on the MMG and directly on the TPS after EES separation, and assessment of damage to the MMG and TPS via hypervelocity impact tests, hydrocode simulations, and empirical damage prediction and ballistic limit equations (BLEs). The focus of this paper is the meteoroid fluence on the MMG.

micrometeoroid↗

In-Time Non-Participant Casualty Risk Assessment to Support Onboard Decision Making for Autonomous Unmanned Aircraft

Numerous operational paradigms, technologies, and missions are emerging as newcomers to the National Airspace System (NAS) develop small Unmanned Aircraft Systems (sUAS), personal air vehicles and other Urban Air Mobility (UAM) concepts. As the list of applications expands, maintaining the safety of the current airspace system remains one of the core concerns preventing widespread commercial implementation of these concepts. Further, the risks associated with unmanned aircraft operations themselves have to be recognized and mitigated in a timely manner. Safety-critical risks include, but are not limited to, flight outside of approved airspace, unsafe proximity to people or property, critical system failures, loss-of control, and cyber-security related risks. Instead of reacting to accidents, a set of predictive and data-driven risk monitoring, assessment, and mitigation capabilities are envisioned to help capture and eliminate hazards as these systems become operational. NASA’s System-wide Safety project is performing R&D on such a safety assurance concept. As part of this concept, this paper describes an architecture that continuously monitors a diverse set of onboard and ground-based sources to estimate and predict non-participant casualty risk during flight. Timely identification of the changing nature of this risk can inform decision making processes to mitigate current and impending situations.

Ancel, Ersin↗

Human Systems Integration (HSI) for Safety- Critical Range Operations at Wallops Flight Facility (WFF)

The NASA Engineering and Safety Center (NESC) Human Factors (HF) Technical Discipline Team (TDT) funded a preliminary study in 2017 that was narrowly focused within the Range Data Display System (RDDS) scope of display design requirements based on schedule and resources. Wallops Flight Facility (WFF) personnel involved in the previous study asked for a broader Human Systems Integration (HSI) involvement that would span both the RDDS and Flight Termination System (FTS) projects and assist with identifying HSI best practices, via appropriate standards and guidelines, that if properly implemented should result in a more effective and efficient Range Safety Operations. WFF Range Safety Operations has expressed a need to assess the roles, responsibilities, and functions of the various personnel on console during launches to identify existing and potential efficiencies and incorporate them in the new system design. This assessment addresses that need.

Cynthia H Null↗

A Briefing on Metrics and Risks for Autonomous Decision-Making in Aerospace Applications

Significant technology advances will enable future aerospace systems to safely and reliably make decisions autonomously, or without human interaction. The decision-making may result in actions that enable an aircraft or spacecraft in an off-nominal state or with slightly degraded components to achieve mission performance and safety goals while reducing or avoiding damage to the aircraft or spacecraft. Some key technology enablers for autonomous decision-making include: a continuous state awareness through the maturation of the prognostics health management field, novel sensor development, and the considerable gains made in computation power and data processing bandwidth versus system size. Sophisticated algorithms and physics based models coupled with these technological advances allow reliable assessment of a system, subsystem, or components. Decisions that balance mission objectives and constraints with remaining useful life predictions can be made autonomously to maintain safety requirements, optimal performance, and ensure mission objectives. This autonomous approach to decision-making will come with new risks and benefits, some of which will be examined in this paper. To start, an account of previous work to categorize or quantify autonomy in aerospace systems will be presented. In addition, a survey of perceived risks in autonomous decision-making in the context of piloted aircraft and remotely piloted or completely autonomous unmanned autonomous systems (UAS) will be presented based on interviews that were conducted with individuals from industry, academia, and government.

Frost, Susan↗

Autonomous Assessment and Predictive Capabilities for Low-Altitude Urban Flight Operations

The integration of unmanned aerial vehicles in the national airspace will introduce new vehicle types, technologies, and operational paradigms for which safety must be maintained and hazards mitigated. One approach is to attempt to design for possible hazards and unsafe incidents that can occur at different phases of flight (pre-flight, in-flight, and post-flight) and during ground operations. Another is to mitigate safety incidents by implementing changes to policies, procedures, regulations, and design to cover personnel, equipment, and aircraft during operations. These and other techniques, not described herein, are typically conservative or adhoc in that they reduce the likelihood of risk after safety incidents have occurred. In this work, the goal is to develop a more predictive capability to monitor and mitigate risk and hazards to safety “in-time” enough for decisions to be made. In line with NASA’s Aeronautics Mission Directorate Strategic Thrust 5 [1] (In-Time System-Wide Safety Assurance), the System-Wide Safety (SWS) project under which this work falls, is developing and demonstrating innovative and safety-oriented solutions that enable modernization and aviation transformation. To that effect, this work will detail data-driven efforts on the SWS project to develop a number of safety-critical services for in-time monitoring and mitigation of hazards to low-altitude flight operations. First, hazards to these operations are identified based on previous work by NASA [2,3] and others in the aerospace industry. These hazards include (i) unsafe proximity to other vehicles, property, and people on the ground, (ii) critical system failures such as communication signal/GPS loss, unexpected propulsion system degradation, engine/power failure, and (iii) operational/environmental issues such as severe weather and gusty winds. For these hazards, safety metrics, which can be quantified and assessed are defined, models to monitor and predict them are developed, and flight test data is generated to develop, validate, and test these models, considering the complex interplay of the different hazards that define them [4-6]. In addition, the uncertainty in the non-deterministic effects that cannot be modeled nor predicted and unknown unknowns that arise after design/testing and during operations must be handled in rigorous manner. As a result, for each of the developed safety metrics, their dependencies on one another are characterized and a framework for handling the uncertainties inherent in the modeling, algorithms, and measurements required for prediction is also developed [7]. To that effect, this presentation will describe the safety metrics and services already developed and underway under the System-Wide Safety project that utilize data-driven techniques for the identification of anomalies, precursors, and trends (APTs) to monitor and mitigate hazards to safety, in-time, for urban flight operations in low-altitude airspace.

Okolo, Wendy A.↗

Architectural Modeling and Analysis for Safety Engineering

Model-based development tools are increasingly being used for system-level development of safety-critical systems. Architectural and behavioral models provide important information that can be leveraged to improve the system safety analysis process. Model-based design artifacts produced in early stage development activities can be used to perform system safety analysis, reducing costs and providing accurate results throughout the system life-cycle. In this report we describe an extension to the Architecture Analysis and Design Language (AADL) that supports modeling of system behavior under failure conditions. This Safety Annex enables the independent modeling of component failures and allows safety engineers to weave various types of fault behavior into the nominal system model. The accompanying tool support uses model checking to propagate errors from their source to their effect on safety properties without the need to add separate propagation specifications. The tool also captures all minimal set of fault combinations that can cause violation of the safety properties, that can be compared to qualitative and quantitative objectives as part of the safety assessment process. We describe the Safety Annex, illustrate its use with a representative example, and discuss and demonstrate the tool support enabling an analyst to investigate the system behavior under failure conditions.

FTA↗

Conversion-Integration of MSFC Nonlinear Signal Diagnostic Analysis Algorithms for Realtime Execution of MSFC's MPP Prototype System

NASA's advanced propulsion system Small Scale Magnetic Disturbances/Advanced Technology Development (SSME/ATD) has been undergoing extensive flight certification and developmental testing, which involves large numbers of health monitoring measurements. To enhance engine safety and reliability, detailed analysis and evaluation of the measurement signals are mandatory to assess its dynamic characteristics and operational condition. Efficient and reliable signal detection techniques will reduce the risk of catastrophic system failures and expedite the evaluation of both flight and ground test data, and thereby reduce launch turn-around time. During the development of SSME, ASRI participated in the research and development of several advanced non- linear signal diagnostic methods for health monitoring and failure prediction in turbomachinery components. However, due to the intensive computational requirement associated with such advanced analysis tasks, current SSME dynamic data analysis and diagnostic evaluation is performed off-line following flight or ground test with a typical diagnostic turnaround time of one to two days. The objective of MSFC's MPP Prototype System is to eliminate such 'diagnostic lag time' by achieving signal processing and analysis in real-time. Such an on-line diagnostic system can provide sufficient lead time to initiate corrective action and also to enable efficient scheduling of inspection, maintenance and repair activities. The major objective of this project was to convert and implement a number of advanced nonlinear diagnostic DSP algorithms in a format consistent with that required for integration into the Vanderbilt Multigraph Architecture (MGA) Model Based Programming environment. This effort will allow the real-time execution of these algorithms using the MSFC MPP Prototype System. ASRI has completed the software conversion and integration of a sequence of nonlinear signal analysis techniques specified in the SOW for real-time execution on MSFC's MPP Prototype. This report documents and summarizes the results of the contract tasks; provides the complete computer source code; including all FORTRAN/C Utilities; and all other utilities/supporting software libraries that are required for operation.

Jong, Jen-Yi↗

Aircraft Icing Weather Data Reporting and Dissemination System

The long-term operational concept of this research is to develop an onboard aircraft system that assesses and reports atmospheric icing conditions automatically and in a timely manner in order to improve aviation safety and the efficiency of aircraft operations via improved real-time and forecast weather products. The idea is to use current measurement capabilities on aircraft equipped with icing sensors and in-flight data communication technologies as a reporting source. Without requiring expensive avionics upgrades, aircraft data must be processed and available for downlink. Ideally, the data from multiple aircraft can then be integrated (along with other real-time and modeled data) on the ground such that aviation-centered icing hazard metrics for volumes of airspace can be assessed. As the effect of icing on different aircraft types can vary, the information should be displayed in meaningful ways such that multiple types of users can understand the information. That is, information must be presented in a manner to allow users to understand the icing conditions with respect to individual concerns and aircraft capabilities. This research provides progress toward this operational concept by: identifying an aircraft platform capable of digitally capturing, processing, and downlinking icing data; identifying the required in situ icing data processing; investigating the requirements for routing the icing data for use by weather products; developing an icing case study in order to gain insight into major air carrier needs; developing and prototyping icing display concepts based on the National Center for Atmospheric Research's existing diagnostic and forecast experimental icing products; and conducting a usability study for the prototyped icing display concepts.

Bass, Ellen J.↗

Designing a Better Spacecraft: Assessing Flight Operability of Human Rated Spacecraft

The design of a human rated spacecraft is a complex and costly process requiring the integrated assessment of many individual criteria. Historically, it has been difficult to include in that integrated assessment the design s full impact on the flight operations community and its costs. The unique "operability requirements" have not been well understood, nor has there been a well-defined set of criteria for assessing operability. As a result, flight operations organizations and program managers are often faced with difficult and costly operations phase implementations. In response, the Mission Operations Directorate at NASA s Lyndon B. Johnson Space Center has established a formal technique to evaluate and communicate the operational characteristics of spacecraft system designs for the Constellation Program. This process is not intended to replace or replicate other critical assessments such as risk, reliability and safety assessments. Instead, this new technique adds to the assessment toolset a means to address the concerns and potential cost drivers that are unique to the operational phase of a program and the flight operations community. This paper describes the implementation and application of this "Spacecraft Flight Operability Assessment Scale" in supporting vehicle design efforts. The six key factors of flight operability are defined, with guiding principles and goals stated for each factor. A standardized rating technique provides feedback that is useful to both the operations and program management communities. Sample assessments of legacy spacecraft, including the Space Shuttle and International Space Station systems, are provided to provide real world examples of this technique s application.

Crocker, Alan R.↗

Reducing the Risk of Human Space Missions with INTEGRITY

The INTEGRITY Program will design and operate a test bed facility to help prepare for future beyond-LEO missions. The purpose of INTEGRITY is to enable future missions by developing, testing, and demonstrating advanced human space systems. INTEGRITY will also implement and validate advanced management techniques including risk analysis and mitigation. One important way INTEGRITY will help enable future missions is by reducing their risk. A risk analysis of human space missions is important in defining the steps that INTEGRITY should take to mitigate risk. This paper describes how a Probabilistic Risk Assessment (PRA) of human space missions will help support the planning and development of INTEGRITY to maximize its benefits to future missions. PRA is a systematic methodology to decompose the system into subsystems and components, to quantify the failure risk as a function of the design elements and their corresponding probability of failure. PRA provides a quantitative estimate of the probability of failure of the system, including an assessment and display of the degree of uncertainty surrounding the probability. PRA provides a basis for understanding the impacts of decisions that affect safety, reliability, performance, and cost. Risks with both high probability and high impact are identified as top priority. The PRA of human missions beyond Earth orbit will help indicate how the risk of future human space missions can be reduced by integrating and testing systems in INTEGRITY.

Jones, Harry W.↗

Develop advanced nonlinear signal analysis topographical mapping system

The SSME has been undergoing extensive flight certification and developmental testing, which involves some 250 health monitoring measurements. Under the severe temperature pressure, and dynamic environments sustained during operation, numerous major component failures have occurred, resulting in extensive engine hardware damage and scheduling losses. To enhance SSME safety and reliability, detailed analysis and evaluation of the measurements signal are mandatory to assess its dynamic characteristics and operational condition. Efficient and reliable signal detection techniques will reduce catastrophic system failure risks and expedite the evaluation of both flight and ground test data, and thereby reduce launch turn-around time. The basic objective of this contract are threefold: (1) Develop and validate a hierarchy of innovative signal analysis techniques for nonlinear and nonstationary time-frequency analysis. Performance evaluation will be carried out through detailed analysis of extensive SSME static firing and flight data. These techniques will be incorporated into a fully automated system. (2) Develop an advanced nonlinear signal analysis topographical mapping system (ATMS) to generate a Compressed SSME TOPO Data Base (CSTDB). This ATMS system will convert tremendous amounts of complex vibration signals from the entire SSME test history into a bank of succinct image-like patterns while retaining all respective phase information. A high compression ratio can be achieved to allow the minimal storage requirement, while providing fast signature retrieval, pattern comparison, and identification capabilities. (3) Integrate the nonlinear correlation techniques into the CSTDB data base with compatible TOPO input data format. Such integrated ATMS system will provide the large test archives necessary for a quick signature comparison. This study will provide timely assessment of SSME component operational status, identify probable causes of malfunction, and indicate feasible engineering solutions. The final result of this program will yield an ATMS system of nonlinear and nonstationary spectral analysis software package integrated with the Compressed SSME TOPO Data Base (CSTDB) on the same platform. This system will allow NASA engineers to retrieve any unique defect signatures and trends associated with different failure modes and anomalous phenomena over the entire SSME test history across turbo pump families.

Jong, Jen-Yi↗

Intelligent Elements for the ISHM Testbed and Prototypes (ITP) Project

Deep-space manned missions will require advanced automated health assessment capabilities. Requirements such as in-space assembly, long dormant periods and limited accessibility during flight, present significant challenges that should be addressed through Integrated System Health Management (ISHM). The ISHM approach will provide safety and reliability coverage for a complete system over its entire life cycle by determining and integrating health status and performance information from the subsystem and component levels. This paper will focus on the potential advanced diagnostic elements that will provide intelligent assessment of the subsystem health and the planned implementation of these elements in the ISHM Testbed and Prototypes (ITP) Project under the NASA Exploration Systems Research and Technology program.

Maul, William A.↗

Failure Assessment of Stainless Steel and Titanium Brazed Joints

Following successful application of Coulomb-Mohr and interaction equations for evaluation of safety margins in Albemet 162 brazed joints, two additional base metal/filler metal systems were investigated. Specimens consisting of stainless steel brazed with silver-base filler metal and titanium brazed with 1100 Al alloy were tested to failure under combined action of tensile, shear, bending and torsion loads. Finite Element Analysis (FEA), hand calculations and digital image comparison (DIC) techniques were used to estimate failure stresses and construct Failure Assessment Diagrams (FAD). This study confirms that interaction equation R(sub sigma) + R(sub tau) = 1, where R(sub sigma) and R(sub t u) are normal and shear stress ratios, can be used as conservative lower bound estimate of the failure criterion in stainless steel and titanium brazed joints.

Flom, Yury A.↗