Search NASA⌕ Search

SEARCH · Search NASA

Results for “concurrent engineering design”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 307 records · Page 17

Achieving dependability throughout the development process - A distributed software experiment

Distributed software engineering techniques and methods for improving the specification and testing phases are considered. With multiversion development, multiple implementations allow the use of an automated approach to testing called back-to-back (B/B) testing in which the outputs are compared to detect any discrepancies. However, a specification defect may lead to similar errors in the multiple versions and the underlying fault may not be detected with a B/B testing approach. The use of diverse formal specifications has been proposed as a solution to this problem, since defects in independently written specifications are likely to be different. To examine these issues, an experiment was performed using the design diversity approach in the specification, design, implementation, and testing of distributed software. In the experiment, three diverse formal specifications were used to produce multiple independent implementations of a distributed communication protocol in Ada. The problems encountered in building complex concurrent processing systems in Ada were also studied. Many pitfalls were discovered in mapping the formal specifications into Ada implementations.

Kelly, John P. J.↗

Strategy for Developing Technologies for Megawatt-class Nuclear Electric Propulsion Systems

In late fiscal year 2020, the Space Nuclear Propulsion (SNP) project began the process of formulating an investment strategy to support development of the technologies required for a high-power (megawatt-class) nuclear electric propulsion (NEP) system capable of performing human-scale missions. This activity was initiated concurrent with several high-level studies and assessments were either under way or had just concluded. Studies of human-scale Mars missions have been performed several times over the past two decades. One of the most recent studies examined opposition-class human Mars missions to occur in the late 2030s timeframe [1,2]. The mission architecture assumed a hybrid NEP/chem-propelled vehicle that used a high specific impulse (Isp) NEP-system and a liquid oxygen (LOx)-liquid methane high thrust chemical stage (two 110 kN (25 klbf) thrust, 365 s Isp engines) for maneuvers performed to enter and exit gravity wells. Trajectory analyses performed in this study showed that such a mission could be performed with 2-4 MWe directed into the electric propulsion system (operating for 20,000+ hours), with the large range representing different opposition-class Mars mission opportunities and permutations on the trajectory design, concept of operations, and technology choices. In 2020, the NASA Engineering and Safety Center (NESC) performed a study to evaluate the maturity of the different technologies required for nuclear propulsion systems [3]. The executive summary of this report provided the following top-level conclusions: • “The majority of critical technologies for… NEP/Chem… systems are relatively immature” • “TRLs [technology readiness levels] in the literature are often overestimated” • “The majority of critical technologies… for NEP/Chem… systems are at a relatively high level of advancement degree of difficulty (AD2 > 4) for maturation, requiring a dual development approach” • “The proper assessment of baseline TRL and AD2 values and the estimation of requirements and resources required for advancement have been consistent issues for NEP,” • “Non-advocate reviews should occur at the start of a technology program and at all key milestones.” In 2021, the National Academies of Science, Engineering, and Medicine (NASEM) issued a separate report [4] identifying the “primary technical and programmatic challenges, merits, and risks for maturing space nuclear propulsion technologies of interest to a future human Mars exploration mission.” That work contained several important findings, including: • “Developing a MWe-class NEP system for the baseline mission would require increasing power by orders of magnitude relative to NEP system flight- or ground-based technology demonstrations completed to date.” • “Subscale in-space flight testing of NEP systems cannot address many of the risks and potential failure modes associated with the baseline mission NEP system. With sufficient M&S [modeling & simulation] and ground testing, including modular subsystem tests at full scale and power, flight qualification requirements can be met by the cargo missions that will precede the first crewed mission to Mars. Fully integrated ground testing may not be required.” • “As a result of low and intermittent investment over the past several decades, it is unclear if even an aggressive program would be able to develop an NEP system capable of executing the baseline mission in 2039.” These efforts motivated the SNP project to investigate the technologies available for a megawatt-class high power nuclear electric propulsion system. That system is illustrated schematically in Figure 1 and is comprised of five separate top-level critical technology elements (CTEs). 1. Nuclear Reactor – Thermal power source for the system, utilizing high-assay low enriched uranium (HALEU) as the nuclear fuel. Reactor radiation shielding is also included in this CTE. 2. Power Conversion – Operates as a thermodynamic cycle, accepting nuclear reactor thermal power as an input and converting it to mechanical power. 3. Power Management and Distribution (PMAD) – Accepts as an input mechanical power from the power conversion system, which is used to generate electrical power. The PMAD system also distributes the generated electrical power to all other parts of the spacecraft, including the high-power EP system. The PMAD system may also perform duties such as isolation, fault detection, and power transformation/rectification for different spacecraft systems, including the thrusters. 4. Electric Propulsion (EP) – Accepts as an input electrical power, which is used to accelerate a propellant to high speeds to produce thrust. This system includes the power processing unit (PPU), which converts the power it receives to the correct current and voltage required by the thrusters, and the propellant storage and feed systems, which contain and meter the flow of propellant to the thrusters. 5. Thermal Management (Radiators/Heat Rejection) – The cold side of the thermodynamic power conversion cycle, accepts thermal power from the power conversion system and radiatively rejects that heat to space. In this paper, we describe the SNP project formulation and investment strategy that aims to accomplish the research and development required to advance the technology readiness for each CTE. The strategy relies heavily upon experimental testing supported by modeling and simulation to yield realistic assessments of the technologies, which in turn will be used to inform future NEP system-level design decisions and any potential technology downselects.

Kurt A Polzin↗

Design of object-oriented distributed simulation classes

Distributed simulation of aircraft engines as part of a computer aided design package is being developed by NASA Lewis Research Center for the aircraft industry. The project is called NPSS, an acronym for 'Numerical Propulsion Simulation System'. NPSS is a flexible object-oriented simulation of aircraft engines requiring high computing speed. It is desirable to run the simulation on a distributed computer system with multiple processors executing portions of the simulation in parallel. The purpose of this research was to investigate object-oriented structures such that individual objects could be distributed. The set of classes used in the simulation must be designed to facilitate parallel computation. Since the portions of the simulation carried out in parallel are not independent of one another, there is the need for communication among the parallel executing processors which in turn implies need for their synchronization. Communication and synchronization can lead to decreased throughput as parallel processors wait for data or synchronization signals from other processors. As a result of this research, the following have been accomplished. The design and implementation of a set of simulation classes which result in a distributed simulation control program have been completed. The design is based upon MIT 'Actor' model of a concurrent object and uses 'connectors' to structure dynamic connections between simulation components. Connectors may be dynamically created according to the distribution of objects among machines at execution time without any programming changes. Measurements of the basic performance have been carried out with the result that communication overhead of the distributed design is swamped by the computation time of modules unless modules have very short execution times per iteration or time step. An analytical performance model based upon queuing network theory has been designed and implemented. Its application to realistic configurations has not been carried out.

Schoeffler, James D.↗

Design of Object-Oriented Distributed Simulation Classes

Distributed simulation of aircraft engines as part of a computer aided design package being developed by NASA Lewis Research Center for the aircraft industry. The project is called NPSS, an acronym for "Numerical Propulsion Simulation System". NPSS is a flexible object-oriented simulation of aircraft engines requiring high computing speed. It is desirable to run the simulation on a distributed computer system with multiple processors executing portions of the simulation in parallel. The purpose of this research was to investigate object-oriented structures such that individual objects could be distributed. The set of classes used in the simulation must be designed to facilitate parallel computation. Since the portions of the simulation carried out in parallel are not independent of one another, there is the need for communication among the parallel executing processors which in turn implies need for their synchronization. Communication and synchronization can lead to decreased throughput as parallel processors wait for data or synchronization signals from other processors. As a result of this research, the following have been accomplished. The design and implementation of a set of simulation classes which result in a distributed simulation control program have been completed. The design is based upon MIT "Actor" model of a concurrent object and uses "connectors" to structure dynamic connections between simulation components. Connectors may be dynamically created according to the distribution of objects among machines at execution time without any programming changes. Measurements of the basic performance have been carried out with the result that communication overhead of the distributed design is swamped by the computation time of modules unless modules have very short execution times per iteration or time step. An analytical performance model based upon queuing network theory has been designed and implemented. Its application to realistic configurations has not been carried out.

Schoeffler, James D.↗

Methodology for object-oriented real-time systems analysis and design: Software engineering

Successful application of software engineering methodologies requires an integrated analysis and design life-cycle in which the various phases flow smoothly 'seamlessly' from analysis through design to implementation. Furthermore, different analysis methodologies often lead to different structuring of the system so that the transition from analysis to design may be awkward depending on the design methodology to be used. This is especially important when object-oriented programming is to be used for implementation when the original specification and perhaps high-level design is non-object oriented. Two approaches to real-time systems analysis which can lead to an object-oriented design are contrasted: (1) modeling the system using structured analysis with real-time extensions which emphasizes data and control flows followed by the abstraction of objects where the operations or methods of the objects correspond to processes in the data flow diagrams and then design in terms of these objects; and (2) modeling the system from the beginning as a set of naturally occurring concurrent entities (objects) each having its own time-behavior defined by a set of states and state-transition rules and seamlessly transforming the analysis models into high-level design models. A new concept of a 'real-time systems-analysis object' is introduced and becomes the basic building block of a series of seamlessly-connected models which progress from the object-oriented real-time systems analysis and design system analysis logical models through the physical architectural models and the high-level design stages. The methodology is appropriate to the overall specification including hardware and software modules. In software modules, the systems analysis objects are transformed into software objects.

Schoeffler, James D.↗

Multiuser Collaboration with Networked Mobile Devices

In this paper we describe a multiuser collaboration infrastructure that enables multiple mission scientists to remotely and collaboratively interact with visualization and planning software, using wireless networked personal digital assistants(PDAs) and other mobile devices. During ground operations of planetary rover and lander missions, scientists need to meet daily to review downlinked data and plan science activities. For example, scientists use the Science Activity Planner (SAP) in the Mars Exploration Rover (MER) mission to visualize downlinked data and plan rover activities during the science meetings [1]. Computer displays are projected onto large screens in the meeting room to enable the scientists to view and discuss downlinked images and data displayed by SAP and other software applications. However, only one person can interact with the software applications because input to the computer is limited to a single mouse and keyboard. As a result, the scientists have to verbally express their intentions, such as selecting a target at a particular location on the Mars terrain image, to that person in order to interact with the applications. This constrains communication and limits the returns of science planning. Furthermore, ground operations for Mars missions are fundamentally constrained by the short turnaround time for science and engineering teams to process and analyze data, plan the next uplink, generate command sequences, and transmit the uplink to the vehicle [2]. Therefore, improving ground operations is crucial to the success of Mars missions. The multiuser collaboration infrastructure enables users to control software applications remotely and collaboratively using mobile devices. The infrastructure includes (1) human-computer interaction techniques to provide natural, fast, and accurate inputs, (2) a communications protocol to ensure reliable and efficient coordination of the input devices and host computers, (3) an application-independent middleware that maintains the states, sessions, and interactions of individual users of the software applications, (4) an application programming interface to enable tight integration of applications and the middleware. The infrastructure is able to support any software applications running under the Windows or Unix platforms. The resulting technologies not only are applicable to NASA mission operations, but also useful in other situations such as design reviews, brainstorming sessions, and business meetings, as they can benefit from having the participants concurrently interact with the software applications (e.g., presentation applications and CAD design tools) to illustrate their ideas and provide inputs.

ground operations↗

Hardware-Accelerated Ray Tracing of CAD-Based Geometry for Monte Carlo Radiation Transport

Monte Carlo radiation transport (MCRT) methods have been used to simulate radiation environments for many decades by tracking individual particles through a model to accumulate statistical information. MCRT geometry is historically formed using the constructive solid geometry (CSG). Recently, significant work has been performed to support simulations using computer-aided design (CAD)-based tessellated surfaces to support highly complex geometries. Ray tracing acceleration data structures from the rendering and visualization community are applied to accelerate particle tracking in CAD-based models. Despite these efforts, CSG representations provide the superior performance in surface intersection operations during particle flight. Concurrently, pseudo Monte Carlo methods have become prevalent in rendering applications to support more realistic models for scattering media, motivating innovations that are advantageous for MCRT simulations. Finally, the authors’ work extends these innovations by employing Intel’s Embree ray tracing kernel within a geometry toolkit for Monte Carlo to improve the simulation performance using CAD-based models by factors of 1.5 to 2.

42 ENGINEERING↗

Analytical Fuel Property Effects - Small Combustors. Phase II

A test program was conducted to study the effects of non-standard aviation fuels on a typical small gas turbine combustor, and to evaluate the effectiveness of design changes intended to counter the effects of these fuels. This study was a follow on to an earlier analytical study to predict the fuel effects and generate the design modifications evaluated in this program. The T700/CT7 engine family was chosen for both studies as being representative of the class of aircraft power plants desired for this study. Fuel properties, as specified by NASA, are characterized by low hydrogen content and high aromatics levels. No. 2 diesel fuel was also evaluated in this program. The tests demonstrated the anticipated higher than normal smoke output and flame radiation intensity with resulting increased metal temperatures on the baseline T700 combustor. Three new designs were evaluated using the non standard fuels. The three designs incorporated enhanced cooling features and smoke reduction features. All three designs, when burning the broad specification fuels, exhibited metal temperatures at or below the baseline combustor temperatures on JP-5. Smoke levels were acceptable but higher than predicted. This was partly due to the increase in baseline combustor smoke levels with the broad spec fuels being higher than anticipated. One combustor of the three clearly demonstrated the best smoke and metal temperature characteristics. It was also easiest to manufacture and incorporate into a production design. GE with NASA's concurrence selected and subjected this combustor to a final component test program.

Monty, J.↗

Predictive Engineering of Interfaces and Cathodes for High-Performance All Solid-State Lithium-Sulfur Batteries

The primary goal of this project is to leverage data-driven methods and machine learning strategies to develop accurate multi-physics models for all-solid-state Li-S battery (ASLSB) materials that can capture electrochemical and transport phenomena over atomic to mesoscopic length/timescales. These models will be rigorously validated by synthesis and advanced characterization experiments. The team will leverage the predictive power of these models, alongside synthesis/characterization experiments and battery fabrication to address longstanding issues at the electrode/electrolyte interfaces in ASLSBs. The project’s proposed technology involves the following: (1) halide-doped solid sulfide electrolytes that can concurrently provide high Li + ion conductivity and suppress dendrite growth; (2) novel mesoporous cathode composed of super-P and carbon nanotubes co-infiltrated with sulfur and sulfide electrolyte, which hold potential to allow high sulfur loading and optimal ion/electron pathways; and (3) functionalization of sulfide electrolyte with ionic liquids to improve physical contact and minimize impedance at the cathode/electrolyte interface. Successful development of proposed predictive models (at multiple scales) will bridge this knowledge gap and will advance fundamental understanding of reaction chemistry, kinetics, charge transfer, and dendrite growth at electrified SSIs. This will enable predictive design of effective strategies to mitigate interfacial problems in ASSLSBs, including poor interfacial contact, interfacial impedance to Li + ion transport, and poor electron/ion conduction within cathodes. Ultimately, the fundamental knowledge gained will lead to development of high-performance ASSLSBs.

25 ENERGY STORAGE↗

Explanation Constraint Programming for Model-based Diagnosis of Engineered Systems

We can expect to see an increase in the deployment of unmanned air and land vehicles for autonomous exploration of space. In order to maintain autonomous control of such systems, it is essential to track the current state of the system. When the system includes safety-critical components, failures or faults in the system must be diagnosed as quickly as possible, and their effects compensated for so that control and safety are maintained under a variety of fault conditions. The Livingstone fault diagnosis and recovery kernel and its temporal extension L2 are examples of model-based reasoning engines for health management. Livingstone has been shown to be effective, it is in demand, and it is being further developed. It was part of the successful Remote Agent demonstration on Deep Space One in 1999. It has been and is being utilized by several projects involving groups from various NASA centers, including the In Situ Propellant Production (ISPP) simulation at Kennedy Space Center, the X-34 and X-37 experimental reusable launch vehicle missions, Techsat-21, and advanced life support projects. Model-based and consistency-based diagnostic systems like Livingstone work only with discrete and finite domain models. When quantitative and continuous behaviors are involved, these are abstracted to discrete form using some mapping. This mapping from the quantitative domain to the qualitative domain is sometimes very involved and requires the design of highly sophisticated and complex monitors. We propose a diagnostic methodology that deals directly with quantitative models and behaviors, thereby mitigating the need for these sophisticated mappings. Our work brings together ideas from model-based diagnosis systems like Livingstone and concurrent constraint programming concepts. The system uses explanations derived from the propagation of quantitative constraints to generate conflicts. Fast conflict generation algorithms are used to generate and maintain multiple candidates whose consistency can be tracked across multiple time steps.

Narasimhan, Sriram↗

Evaluation of Additively Manufactured Monolithic SiC and SiC-Matrix Ceramic Matrix Composites for Concentrating Solar Receiver Applications - Fabrication and Testing of Receiver Design Feature Specimens in a Simulating Lab Test via Laser Heating

Increasing operating temperatures of solar receivers is paramount to the efficiency of concentrated solar thermal (CST) and solar power (CSP) systems. Owing to its high temperature stability combined with excellent thermal and optical properties, SiC has been the material of choice for application in high-temperature solar receivers. We report the results of our study of the effective heat transfer characteristics of several candidate SiC structure motifs, or feature geometries, which are fabricated via additive manufacturing. The SiC structure motifs studied include different permutations of three-dimensional periodic lattices and defined shapes. A solar-thermal simulating laboratory test setup is constructed using a 4kW CO2 laser system with beam shaping optics to apply concurrent radiative heating power on one face of 2”-diameter cylindrical feature specimens, representing the structure motifs of interest for receiver element design, while flowing through the sample as heat transfer fluid. Using the test setup, simulative test conditions representative of a concentrated solar flux of up to ~2000 suns could be achieved in the lab tests under varying air flow through the test structure. A simple 1D numerical analysis scheme is developed to extract an effective or compound heat transfer coefficient representative of the test structure under steady-state heat flow conditions. The test results and their use to guide the selection and optimization of SiC material and structure motifs for the receiver element design fabrication are discussed.

14 SOLAR ENERGY↗

Enabling off-highway diesel engine downsizing and performance improvement using electrically assisted turbocharging

Internal combustion engine (ICE) downsizing through various turbocharging configurations is generally known by the powertrain design community as an effective means to reduce frictional losses, increase waste heat recovery, and improve fuel efficiency while increasing engine power density. However, often is the case that turbocharging strategies, including variable geometry turbochargers, and regulated two-stage turbochargers, incur the performance tradeoff between transient response and fuel economy (pumping losses) at high engine speeds. For off-highway vehicles having particularly transient and high-powered duty cycles, efforts to improve this tradeoff and increase operational flexibility have turned to evaluating various electrified air system architectures. In this study, a 4.5 L diesel-ICE configured with an electrically driven compressor (eBooster ® ) is placed in series with a conventional turbocharger and integrated into a 48 V mild-hybrid powertrain architecture. The objective of this powertrain configuration is to enable engine downsizing by 34%, replacing the current 6.8 L ICE platform with the hybridized 4.5 L ICE concept. The commercial 1-D simulation software GT-SUITE is used for powertrain system development and system optimization. Development and validation of the GT-SUITE model and air system controls is concurrently supported through experimental data collection. The simulation model development includes using machine learning methods for optimizing exhaust gas dilution, injection timing, and eBooster ® power to improve steady-state and transient brake-specific fuel consumption while minimizing criteria pollutant emissions. It was found that total specific fluid consumption over the standardized non-road transient engine duty cycle could be reduced by 18% over the current 6.8 L engine by using an optimized eBoosted 4.5 L engine. The hybridized 4.5 L engine concept concurrently showed sufficient transient response capability and nearly an order of magnitude reduction in duty cycle total soot production.

25 ENERGY STORAGE↗

Fluid inertia controls mineral precipitation and clogging in pore to network-scale flows

Mineral precipitation caused by fluid mixing presents complex control and predictability challenges in a variety of natural and engineering processes, including carbon mineralization, geothermal energy, and microfluidics. Precipitation dynamics, particularly under the influence of fluid flow, remain poorly understood. Combining microfluidic experiments and three-dimensional reactive transport simulations, we demonstrate that fluid inertia controls mineral precipitation and clogging at flow intersections, even in laminar flows. We observe distinct precipitation regimes as a function of Reynolds number (Re). At low Reynolds numbers (Re < 10), precipitates form a thin, dense layer along the mixing interface, which shuts precipitation off, while at high Reynolds numbers (Re > 50), strong three-dimensional flows significantly enhance precipitation over the entire intersection, resulting in rapid clogging. When injection rates from two inlets are uneven, flow symmetry-breaking leads to unexpected flow bifurcation phenomena, which result in enhanced concurrent precipitation in both downstream channels. Finally, we extend our findings to rough channel networks and demonstrate that the identified inertial effects on precipitation at the intersection scale are also present and even more dramatic at the network scale. This study sheds light on the fundamental mechanisms underlying mixing-induced mineral precipitation and provides a framework for designing and optimizing processes involving mineral precipitation.

Science & Technology - Other Topics↗

Mechanical Testing of PMCs under Simulated Rapid Heat-Up Propulsion Environments: In-Plane Compressive Behavior - II

Carbon fiber thermoset polymer matrix composites (PMC) with high temperature polyimide based in-situ polymerized monomer reactant (PMR) resin has been used for some time in applications which can see temperatures up to 550 F. Currently, graphite fiber PMR based composites are used in several aircraft engine components including the outer bypass duct for the GE F-404, exit flaps for the P&W F-100-229, and the core cowl for the GE/Snecma CF6-80A3. Newer formulations, including PMR-II-50 are being investigated as potential weight reduction replacements of various metallic components in next generation high performance propulsion rocket engines that can see temperatures which exceed 550 F. Extensive FEM thermal modeling indicates that these components are exposed to rapid heat-up rates (up to -200 F/sec) and to a maximum temperature of around 600 F. Even though the predicted maximum part temperatures were within the capability of PW-II-50, the rapid heat-up causes significant through-thickness thermal gradients in the composite part and even more unstable states when combined with moisture. Designing composite parts for such extreme service environments will require accurate measurement of intrinsic and transient mechanical properties and the hygrothermal performance of these materials under more realistic use conditions. The mechanical properties of polymers degrade when exposed to elevated temperatures even in the absence of gaseous oxygen. Accurate mechanical characterization of the material is necessary in order to reduce system weight while providing sufficient factors of safety. Historically, the testing of PMCs at elevated temperatures has been plagued by the antagonism between two factors. First, moisture has been shown to profoundly affect the mechanical response of these materials at temperatures above their glass transition temperature while concurrently lowering the material's Tg. Moisture phenomena is due to one or a combination of three effects, i.e., plastization of polymeric material by water, the internal pressure generated by the volatilization of water at elevated temperatures, and hydrolytic chemical decomposition. However, moisture is lost from the material at increasing rates as temperature increases. Second, because PMCs are good thermal insulators, when they are externally heated at even mild rates large thermal gradients can develop within the material. At temperatures where a material property changes rapidly with temperature the presence of a large thermal gradient is unacceptable for intrinsic property characterization purposes. Therefore, long hold times are required to establish isothermal conditions. However, in the service environments high-heating-rates, high temperatures, high-loading rates are simultaneous present along with residual moisture. In order to capture the effects of moisture on the material, holding at- temperature until isothermal conditions are reached is unacceptable particularly in materials with small physical dimensions. Thus, the effects due to moisture on the composite's mechanical characteristics, ie., their so-called analog response, may be instructive. One approach employed in this program was rapid heat-up (approx. 200 F/sec.) and loading of both dry and wet in-plane compressive specimens to examine the effects of moisture on this resin dominated mechanical property of the material.

Stokes, Eric H.↗

Synthesis of Correct Digital Controller Models from Specifications by Model Transformation (21-0320)

The design of high consequence controllers (in weapons systems, autonomy, etc.) that do what they are supposed to do is a significant challenge. Testing simply does not come close to meeting the requirements for assurance. Today circuit designers at Sandia (and elsewhere) typically capture the core behavior of their components using state models in tools such as STATEFLOW. They then check that their models meet certain requirements (e.g. “The system bus must not deadlock” or “both traffic lights at an intersection must not be green at the same time”) using tools called model checkers. If the model checker returns “yes” then the property is guaranteed to be satisfied by the model. However, there are several drawbacks to this industry practice: (1) there is a lot of detail to get right, this is particularly challenging when there are multiple components requiring complex coordination (2) any errors returned by the model checker have to be traced back through the design and fixed, necessitating rework, (3) there are severe scalability problems with this approach, particularly when dealing with concurrency. All this places high demands on the designers who now face not only an accelerated schedule but also controllers of increasing complexity. This report describes a new and fundamentally different approach to the construction of safety-critical digital controllers. Instead of directly constructing a complete model and then trying to verify it, the designer can start with an initial abstract (think “sketch”) model plus the requirements, from which a correct concrete model is automatically synthesized. There is no need for post-hoc verification of required functional properties. Having tool to carry this out will significantly impact the nation’s ability to ensure the safety of high-consequence digital systems. The approach has been implemented in a prototype tool, along with a suite of examples, including ones that reflect actual problems faced by designers. Our approach operates on a variant of Statecharts developed at Sandia called Qspecs. Statecharts are a widely used formalism for developing concurrent reactive systems, supporting scalability through allowing state models containing composite states, which are the serial or parallel composition of substates which can themselves contain statecharts. Statecharts enable an incremental style of development, in which states are progressively refined to incorporate greater detail in an incremental model of software development. Our approach formulates a set of constraints from the structure of the models and the requirements and propagates these constraints to a fixpoint. The solution to the constraints is an inductive invariant along with guards on the transitions. We also show how our approach extends to implementation refinement, decomposition, composition, and elaboration. We currently handle safety requirements written in LTL (Linear Temporal Logic)

42 ENGINEERING↗

Biomedical and Human Factors Requirements for a Manned Earth Orbiting Station

The primary objective of this study is to determine which biomedical and human factors measurements must be made aboard a space station to assure adequate evaluation of the astronaut's health and performance during prolonged space flights. The study has employed, where possible, a medical and engineering systems analysis to define the pertinent life sciences and space station design parameters and their influence on a measurement program. The major areas requiring evaluation in meeting the study objectives include a definition of the space environment, man's response to the environment, selection of measurement and data management techniques, experimental program, space station design requirements, and a trade-off analysis with final recommendations. The space environment factors that are believed to have a significant effect on man were evaluated. This includes those factors characteristic of the space environment (e. g. weightlessness, radiation) as well as those created within the space station (e. g. toxic contaminants, capsule atmosphere). After establishing the general features of the environment, an appraisal was made of the anticipated response of the astronaut to each of these factors. For thoroughness, the major organ systems and functions of the body were delineated, and a determination was made of their anticipated response to each of the environmental categories. A judgment was then made on the medical significance or importance of each response, which enabled a determination of which physiological and psychological effects should be monitored. Concurrently, an extensive list of measurement techniques and methods of data management was evaluated for applicability to the space station program. The various space station configurations and design parameters were defined in terms of the biomedical and human factors requirements to provide the measurements program. Research design of experimental programs for various station configurations, mission durations, and crew sizes were prepared, and, finally, a trade-off analysis of the critical variables in the station planning was completed with recommendations to enhance the confidence in the measurement program.

EARTH ORBIT↗

Ares I-X Roll Control System Development

Project Managers often face challenging technical, schedule and budget issues. This presentation will explore how the Ares I-X Roll Control System Integrated Product Team (IPT) mitigated challenges such as concurrent engineering requirements and environments and evolving program processes, while successfully managing an aggressive project schedule and tight budget. IPT challenges also included communications and negotiations among inter- and intra-government agencies, including the US Air Force, NASA/MSFC Propulsion Engineering, LaRC, GRC, KSC, WSTF, and the Constellation Program. In order to successfully meet these challenges it was essential that the IPT define those items that most affected the schedule critical path, define early mitigation strategies to reduce technical, schedule, and budget risks, and maintain the end-product focus of an "unmanned test flight" context for the flight hardware. The makeup of the IPT and how it would function were also important considerations. The IPT consisted of NASA/MSFC (project management, engineering, and safety/quality) and contractors (Teledyne Brown Engineering and Pratt and Whitney Rocketdyne, who supplied heritage hardware experience). The early decision to have a small focused IPT working "badgelessly" across functional lines to eliminate functional stove-piping allowed for many more tasks to be done by fewer people. It also enhanced a sense of ownership of the products, while still being able to revert back to traditional roles in order to provide the required technical independence in design reviews and verification closures. This presentation will highlight several prominent issues and discuss how they were mitigated and the resulting Lessons Learned that might benefit other projects.

Unger, Ronald J.↗

High-Frequency Testing of Composite Fan Vanes With Erosion-Resistant Coating Conducted

The mechanical integrity of hard, erosion-resistant coatings were tested using the Structural Dynamics Laboratory at the NASA Glenn Research Center. Under the guidance of Structural Mechanics and Dynamics Branch personnel, fixturing and test procedures were developed at Glenn to simulate engine vibratory conditions on coated polymer-matrix- composite bypass vanes using a slip table in the Structural Dynamics Laboratory. Results from the high-frequency mechanical bench testing, along with concurrent erosion testing of coupons and vanes, provided sufficient confidence to engine-endurance test similarly coated vane segments. The knowledge gained from this program will be applied to the development of oxidation- and erosion-resistant coatings for polymer matrix composite blades and vanes in future advanced turbine engines. Fan bypass vanes from the AE3007 (Rolls Royce America, Indianapolis, IN) gas turbine engine were coated by Engelhard (Windsor, CT) with compliant bond coatings and hard ceramic coatings. The coatings were developed collaboratively by Glenn and Allison Advanced Development Corporation (AADC)/Rolls Royce America through research sponsored by the High-Temperature Engine Materials Technology Project (HITEMP) and the Higher Operating Temperature Propulsion Components (HOTPC) project. High-cycle fatigue was performed through high-frequency vibratory testing on a shaker table. Vane resonant frequency modes were surveyed from 50 to 3000 Hz at input loads from 1g to 55g on both uncoated production vanes and vanes with the erosion-resistant coating. Vanes were instrumented with both lightweight accelerometers and strain gauges to establish resonance, mode shape, and strain amplitudes. Two high-frequency dwell conditions were chosen to excite two strain levels: one approaching the vane's maximum allowable design strain and another near the expected maximum strain during engine operation. Six specimens were tested per dwell condition. Pretest and posttest inspections were performed optically at up to 60 magnification and using a fluorescent-dye penetrant. Accumulation of 10 million cycles at a strain amplitude of two to three times that expected in the engine (approximately 670 Hz and 20g) led to the development of multiple cracks in the coating that were only detectable using fluorescent-dye penetrant inspection. Cracks were prevalent on the trailing edge and on the convex side of the midsection. No cracking or spalling was evident using standard optical inspection at up to 60 magnification. Further inspection may reveal whether these fine cracks penetrated the coating or were strictly on the surface. The dwell condition that simulated actual engine conditions produced no obvious surface flaws even after up to 80 million cycles had been accumulated at strain amplitudes produced at approximately 1500 Hz and 45g.

Bowman, Cheryl L.↗