Search NASA⌕ Search

SEARCH · Search NASA

Results for “safety management system”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 307 records · Page 17

Sensor Selection and Data Validation for Reliable Integrated System Health Management

For new access to space systems with challenging mission requirements, effective implementation of integrated system health management (ISHM) must be available early in the program to support the design of systems that are safe, reliable, highly autonomous. Early ISHM availability is also needed to promote design for affordable operations; increased knowledge of functional health provided by ISHM supports construction of more efficient operations infrastructure. Lack of early ISHM inclusion in the system design process could result in retrofitting health management systems to augment and expand operational and safety requirements; thereby increasing program cost and risk due to increased instrumentation and computational complexity. Having the right sensors generating the required data to perform condition assessment, such as fault detection and isolation, with a high degree of confidence is critical to reliable operation of ISHM. Also, the data being generated by the sensors needs to be qualified to ensure that the assessments made by the ISHM is not based on faulty data. NASA Glenn Research Center has been developing technologies for sensor selection and data validation as part of the FDDR (Fault Detection, Diagnosis, and Response) element of the Upper Stage project of the Ares 1 launch vehicle development. This presentation will provide an overview of the GRC approach to sensor selection and data quality validation and will present recent results from applications that are representative of the complexity of propulsion systems for access to space vehicles. A brief overview of the sensor selection and data quality validation approaches is provided below. The NASA GRC developed Systematic Sensor Selection Strategy (S4) is a model-based procedure for systematically and quantitatively selecting an optimal sensor suite to provide overall health assessment of a host system. S4 can be logically partitioned into three major subdivisions: the knowledge base, the down-select iteration, and the final selection analysis. The knowledge base required for productive use of S4 consists of system design information and heritage experience together with a focus on components with health implications. The sensor suite down-selection is an iterative process for identifying a group of sensors that provide good fault detection and isolation for targeted fault scenarios. In the final selection analysis, a statistical evaluation algorithm provides the final robustness test for each down-selected sensor suite. NASA GRC has developed an approach to sensor data qualification that applies empirical relationships, threshold detection techniques, and Bayesian belief theory to a network of sensors related by physics (i.e., analytical redundancy) in order to identify the failure of a given sensor within the network. This data quality validation approach extends the state-of-the-art, from red-lines and reasonableness checks that flag a sensor after it fails, to include analytical redundancy-based methods that can identify a sensor in the process of failing. The focus of this effort is on understanding the proper application of analytical redundancy-based data qualification methods for onboard use in monitoring Upper Stage sensors.

Garg, Sanjay↗

Independent Assessment of Instrumentation for ISS On-Orbit NDE

International Space Station (ISS) Structural and Mechanical Systems Manager, requested that the NASA Engineering and Safety Center (NESC) provide a quantitative assessment of commercially available nondestructive evaluation (NDE) instruments for potential application to the ISS. This work supports risk mitigation as outlined in the ISS Integrated Risk Management Application (IRMA) Watch Item #4669, which addresses the requirement for structural integrity after an ISS pressure wall leak in the event of a penetration due to micrometeoroid or debris (MMOD) impact. This document contains the outcome of the NESC assessment.

Madaras, Eric I↗

Towards a Rigorous Basis for Specific Operations Risk Assessment of UAS

The Specific Operations Risk Assessment (SORA) guidance represents the consensus of various national aviation authorities on a common process to identify, qualitatively assess, and manage the safety risk posed by unmanned aircraft systems (UAS), when preparing the safety case required for regulatory approval to conduct certain types of operations. As such, it can be considered a de facto standard, being increasingly adopted by various relevant stakeholders. This paper first gives an overview of the SORA process and associated methods, identifying a number of inconsistencies in risk identification and assessment, also discussing plausible strategies to close the associated gaps. Then, we give a well-founded basis for the applicable concepts, such as barrier integrity, assurance, and robustness, following which we present a preliminary and simple probabilistic formalization of the underpinning barrier-based safety model. We illustrate our overall approach through a worked example, also discussing how a Bayesian framework can facilitate extending and enhancing our initial formalization. We conclude with a discussion of the opportunities afforded by our approach, such as a well-founded basis for barrier selection, whilst addressing the associated challenges. The main objective of this work is to complement the current SORA guidance through a principled, mathematicallybased approach to risk assessment, particularly when it is applied to higher-risk operational concepts that warrant greater rigor in safety assessment and assurance.

Safety Cases↗

Propulsion Health Management System Development for Affordable and Reliable Operation of Space Exploration Systems

The constraints of future Exploration Missions will require unique integrated system health management capabilities throughout the mission. An ambitious launch schedule, human-rating requirements, long quiescent periods, limited human access for repair or replacement, and long communication delays, all require an integrated approach to health management that can span distinct, yet interdependent vehicle subsystems, anticipate failure states, provide autonomous remediation and support the Exploration Mission from beginning to end. Propulsion is a critical part of any space exploration mission, and monitoring the health of the propulsion system is an integral part of assuring mission safety and success. Health management is a somewhat ubiquitous technology that encompasses a large spectrum of physical components and logical processes. For this reason, it is essential to develop a systematic plan for propulsion health management system development. This paper provides a high-level perspective of propulsion health management systems, and describes a logical approach for the future planning and early development that are crucial to planned space exploration programs. It also presents an overall approach, or roadmap, for propulsion health management system development and a discussion of the associated roadblocks and challenges.

Melcher, Kevin J.↗

Sensor Technology for Integrated Vehicle Health Management of Aerospace Vehicles

NASA is focusing considerable efforts on technology development for Integrated Vehicle Health Management systems. The research in this area is targeted toward increasing aerospace vehicle safety and reliability, while reducing vehicle operating and maintenance costs. Onboard, real-time sensing technologies that can provide detailed information on structural integrity are central to such a health management system. This paper describes a number of sensor technologies currently under development for integrated vehicle health management. The capabilities, current limitations, and future research needs of these technologies are addressed.

Prosser, W. H.↗

Making the Hubble Space Telescope servicing mission safe

The implementation of the HST system safety program is detailed. Numerous safety analyses are conducted through various phases of design, test, and fabrication, and results are presented to NASA management for discussion during dedicated safety reviews. Attention is given to the system safety assessment and risk analysis methodologies used, i.e., hazard analysis, fault tree analysis, and failure modes and effects analysis, and to how they are coupled with engineering and test analysis for a 'synergistic picture' of the system. Some preliminary safety analysis results, showing the relationship between hazard identification, control or abatement, and finally control verification, are presented as examples of this safety process.

Bahr, N. J.↗

Cyber Physical Security (CPS) Extension to Air Traffic Management (ATM) Testbed

The Air Traffic Management (ATM) Testbed is being developed at NASA to enable benefit, impact, safety and cost assessments for accelerating the deployment of Concept and Technologies (C&T) in the National Airspace System (NAS). Today, C&T introduction into the NAS takes decades. The primary reason for this is an inability to assess the operational impact of the interaction between the proposed C&T and operationally deployed systems (Realistic Technologies) in terms of NAS-wide safety, traffic flow efficiency, roles and workload of controllers and traffic managers, and impact on airline fleet operations. Transition of C&T to operations requires mathematical modeling and simulation, Human-in-the-Loop (HITL) testing and shadow-mode evaluation driven by operational data. Whereas interaction with the operational system during testing and stages of deployment is not permissible due to safety concerns, it is certainly possible to create a simulation environment that closely mimics the NAS using the same operational systems/hardware for enabling such assessments. This presentation focuses on a proposed Cyber Physical Security extension to the ATM Testbed for creating a modeling and simulation architecture to study how well the Air Traffic Management system will perform and analyze effectiveness of mitigating security measures against particular cyber-attack scenarios.

Datta, Koushik↗

Continuously Connected With Mobile IP

Cisco Systems developed Cisco Mobile Networks, making IP devices mobile. With this innovation, a Cisco router and its connected IP devices can roam across network boundaries and connection types. Because a mobile user is able to keep the same IP address while roaming, a live IP connection can be maintained without interruption. Glenn Research Center jointly tested the technology with Cisco, and is working to use it on low-earth-orbiting research craft. With Cisco's Mobile Networks functionality now available in Cisco IOS Software release 12.2(4)T, the commercial advantages and benefits are numerous. The technology can be applied to public safety, military/homeland security, emergency management services, railroad and shipping systems, and the automotive industry. It will allow ambulances, police, firemen, and the U.S. Coast Guard to stay connected to their networks while on the move. In the wireless battlefield, the technology will provide rapid infrastructure deployment for U.S. national defense. Airline, train, and cruise passengers utilizing Cisco Mobile Networks can fly all around the world with a continuous Internet connection. Cisco IOS(R) Software is a registered trademark of Cisco Systems.

Source record↗

Accelerating Transitions to Zero Carbon Power Systems

As power systems evolve, becoming increasingly renewable, distributed, dynamic, and digital, managing them becomes ever more challenging and complex. System operators serve as the "air traffic controllers" for electricity grids, working to balance supply and demand, manage evolving electricity markets, and ensure the safety and reliability of electricity systems. To adapt to the rapidly changing energy landscape and support the transition to modern, zero carbon power systems, system operators must develop and adopt new technologies, approaches, and frameworks. The Global Power System Transformation (G-PST) Consortium is a network of system operators, research institutions, and industry partners working to accelerate and scale the technical solutions required to transform our world's power systems. By developing and sharing robust models and tools, research and demonstration results, knowledge, and innovation, the G-PST Consortium is empowering system operators to transition to 100% renewable energy while ensuring the reliability, safety, and cost-effectiveness of grid operations.

ENERGY PLANNING, POLICY, AND ECONOMY,POWER TRANSMI↗

WTEC monograph on instrumentation, control and safety systems of Canadian nuclear facilities

This report updates a 1989-90 survey of advanced instrumentation and controls (I&C) technologies and associated human factors issues in the U.S. and Canadian nuclear industries carried out by a team from Oak Ridge National Laboratory (Carter and Uhrig 1990). The authors found that the most advanced I&C systems are in the Canadian CANDU plants, where the newest plant (Darlington) has digital systems in almost 100 percent of its control systems and in over 70 percent of its plant protection system. Increased emphasis on human factors and cognitive science in modern control rooms has resulted in a reduced workload for the operators and the elimination of many human errors. Automation implemented through digital instrumentation and control is effectively changing the role of the operator to that of a systems manager. The hypothesis that properly introducing digital systems increases safety is supported by the Canadian experience. The performance of these digital systems has been achieved using appropriate quality assurance programs for both hardware and software development. Recent regulatory authority review of the development of safety-critical software has resulted in the creation of isolated software modules with well defined interfaces and more formal structure in the software generation. The ability of digital systems to detect impending failures and initiate a fail-safe action is a significant safety issue that should be of special interest to nuclear utilities and regulatory authorities around the world.

Uhrig, Robert E.↗

Demonstration of a Safety Analysis on a Complex System

For the past 17 years, Professor Leveson and her graduate students have been developing a theoretical foundation for safety in complex systems and building a methodology upon that foundation. The methodology includes special management structures and procedures, system hazard analyses, software hazard analysis, requirements modeling and analysis for completeness and safety, special software design techniques including the design of human-machine interaction, verification, operational feedback, and change analysis. The Safeware methodology is based on system safety techniques that are extended to deal with software and human error. Automation is used to enhance our ability to cope with complex systems. Identification, classification, and evaluation of hazards is done using modeling and analysis. To be effective, the models and analysis tools must consider the hardware, software, and human components in these systems. They also need to include a variety of analysis techniques and orthogonal approaches: There exists no single safety analysis or evaluation technique that can handle all aspects of complex systems. Applying only one or two may make us feel satisfied, but will produce limited results. We report here on a demonstration, performed as part of a contract with NASA Langley Research Center, of the Safeware methodology on the Center-TRACON Automation System (CTAS) portion of the air traffic control (ATC) system and procedures currently employed at the Dallas/Fort Worth (DFW) TRACON (Terminal Radar Approach CONtrol). CTAS is an automated system to assist controllers in handling arrival traffic in the DFW area. Safety is a system property, not a component property, so our safety analysis considers the entire system and not simply the automated components. Because safety analysis of a complex system is an interdisciplinary effort, our team included system engineers, software engineers, human factors experts, and cognitive psychologists.

Leveson, Nancy↗

Development and Evaluation of an Airborne Separation Assurance System for Autonomous Aircraft Operations

NASA Langley Research Center is developing an Autonomous Operations Planner (AOP) that functions as an Airborne Separation Assurance System for autonomous flight operations. This development effort supports NASA s Distributed Air-Ground Traffic Management (DAG-TM) operational concept, designed to significantly increase capacity of the national airspace system, while maintaining safety. Autonomous aircraft pilots use the AOP to maintain traffic separation from other autonomous aircraft and managed aircraft flying under today's Instrument Flight Rules, while maintaining traffic flow management constraints assigned by Air Traffic Service Providers. AOP is designed to facilitate eventual implementation through careful modeling of its operational environment, interfaces with other aircraft systems and data links, and conformance with established flight deck conventions and human factors guidelines. AOP uses currently available or anticipated data exchanged over modeled Arinc 429 data buses and an Automatic Dependent Surveillance Broadcast 1090 MHz link. It provides pilots with conflict detection, prevention, and resolution functions and works with the Flight Management System to maintain assigned traffic flow management constraints. The AOP design has been enhanced over the course of several experiments conducted at NASA Langley and is being prepared for an upcoming Joint Air/Ground Simulation with NASA Ames Research Center.

Barhydt, Richard↗

Handling Trajectory Uncertainties for Airborne Conflict Management

Airborne conflict management is an enabling capability for NASA's Distributed Air-Ground Traffic Management (DAG-TM) concept. DAGTM has the goal of significantly increasing capacity within the National Airspace System, while maintaining or improving safety. Under DAG-TM, autonomous aircraft maintain separation from each other and from managed aircraft unequipped for autonomous flight. NASA Langley Research Center has developed the Autonomous Operations Planner (AOP), an onboard decision support system that provides airborne conflict management (ACM) and strategic flight planning support for autonomous aircraft pilots. The AOP performs conflict detection, prevention, and resolution from nearby traffic aircraft and area hazards. Traffic trajectory information is assumed to be provided by Automatic Dependent Surveillance Broadcast (ADS-B). Reliable trajectory prediction is a key capability for providing effective ACM functions. Trajectory uncertainties due to environmental effects, differences in aircraft systems and performance, and unknown intent information lead to prediction errors that can adversely affect AOP performance. To accommodate these uncertainties, the AOP has been enhanced to create cross-track, vertical, and along-track buffers along the predicted trajectories of both ownship and traffic aircraft. These buffers will be structured based on prediction errors noted from previous simulations such as a recent Joint Experiment between NASA Ames and Langley Research Centers and from other outside studies. Currently defined ADS-B parameters related to navigation capability, trajectory type, and path conformance will be used to support the algorithms that generate the buffers.

Barhydt, Richard↗

Nuclear Safety [Vol. 37, No. 1, January-March 1996]

Nuclear Safety is a journal that covers significant issues in the field of nuclear safety. Its primary scope is safety in the design, construction, operation, and decommissioning of nuclear power reactors worldwide and the research and analysis activities that promote this goal, but it also encompasses the safety aspects of the entire nuclear fuel cycle, including fuel fabrication, spent-fuel processing and handling, and nuclear waste disposal, the handling of fissionable materials and radioisotopes, and the environmental effects of all these activities. Table of Contents for this issue follows. GENERAL SAFETY CONSIDERATIONS: 1 A Decision Support System for Maintenance Management of a Boiling-Water Reactor Power Plant, J. H. Shen, A. Ray, and S. Levine; ACCIDENT ANALYSIS: 12 On Prediction of the Ignition Potential of Uranium Metal and Hydride, M. Epstein, W. Luangdilok, M. G. Plys, and H. K. Fauske; 26 An Overview of the Primary Parameters and Methods for Determining Condensation Heat Transfer to Containment Structures, J. Green and K. Almenas; DESIGN FEATURES: 49 Modem Tornado Design of Nuclear and Other Potentially Hazardous Facilities, J. D. Stevenson and Y. Zaho; U.S. NUCLEAR REGULATORY COMMISSION INFORMATION AND ANALYSES: 73 1994 Accident Sequence Precursor Program Results, R. J. Belles, J. W. Cletcher, D. A. Coplnger, B. W. Dolan, J. W. Minarick, and P. D. O'Reilly; ANNOUNCEMENTS: 93 American Institute of Chemical Engineers (AlChE) Spring 1997 National Meeting; 94 European Safety and Reliability Association International Conference on Safety and Reliability ESREL ’97; 95 Criticality Safety Challenges in the Next Decade; 96 21st International Symposium on the Scientific Basis for Nuclear Waste Management; 84 The Authors; 88 Letter to the Editor; 90 Indexes to Nuclear Safety, Volume 36.

05 NUCLEAR FUELS↗

Nuclear Safety [Vol. 37, No. 1, January-March 1996]

Nuclear Safety is a journal that covers significant issues in the field of nuclear safety. Its primary scope is safety in the design, construction, operation, and decommissioning of nuclear power reactors worldwide and the research and analysis activities that promote this goal, but it also encompasses the safety aspects of the entire nuclear fuel cycle, including fuel fabrication, spent-fuel processing and handling, and nuclear waste disposal, the handling of fissionable materials and radioisotopes, and the environmental effects of all these activities. Table of Contents for this issue follows. GENERAL SAFETY CONSIDERATIONS: 1 A Decision Support System for Maintenance Management of a Boiling-Water Reactor Power Plant, J. H. Shen, A. Ray, and S. Levine; ACCIDENT ANALYSIS: 12 On Prediction of the Ignition Potential of Uranium Metal and Hydride, M. Epstein, W. Luangdilok, M. G. Plys, and H. K. Fauske; 26 An Overview of the Primary Parameters and Methods for Determining Condensation Heat Transfer to Containment Structures, J. Green and K. Almenas; DESIGN FEATURES: 49 Modem Tornado Design of Nuclear and Other Potentially Hazardous Facilities, J. D. Stevenson and Y. Zaho; U.S. NUCLEAR REGULATORY COMMISSION INFORMATION AND ANALYSES: 73 1994 Accident Sequence Precursor Program Results, R. J. Belles, J. W. Cletcher, D. A. Copinger, B. W. Dolan, J. W. Minarick, and P. D. O'Reilly; ANNOUNCEMENTS: 93 American Institute of Chemical Engineers (AlChE) Spring 1997 National Meeting; 94 European Safety and Reliability Association International Conference on Safety and Reliability ESREL ’97; 95 Criticality Safety Challenges in the Next Decade; 96 21st International Symposium on the Scientific Basis for Nuclear Waste Management; 84 The Authors; 88 Letter to the Editor; 90 Indexes to Nuclear Safety, Volume 36.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

Safety management of complex research operations

Complex research and technology operations present many varied potential hazards which must be addressed in a disciplined independent safety review and approval process. The research and technology effort at the Lewis Research Center is divided into programmatic areas of aeronautics, space and energy. Potential hazards vary from high energy fuels to hydrocarbon fuels, high pressure systems to high voltage systems, toxic chemicals to radioactive materials and high speed rotating machinery to high powered lasers. A Safety Permit System presently covers about 600 potentially hazardous operations. The Safety Management Program described in this paper is believed to be a major factor in maintaining an excellent safety record at the Lewis Research Center.

Brown, W. J.↗

Incorporating UAS Traffic Management into Wildland Firefighting Operations: Initial Findings of Subject Matter Expert Interviews

Uncrewed Aircraft Systems (UASs) are being utilized throughout the disaster and emergency response domain, including in wildland firefighting operations. While UASs can offer safety benefits in comparison to crewed aircraft, such as removing the human pilot from the vehicle so that they are not exposed to the same risks and the ability to operate in low-visibility conditions, they are not without tradeoffs. For example, it can be challenging for UAS pilots (UASPs) to build situation awareness of the airspace in which their UAS is operating. In order to address some of the challenges associated with using UASs and provide greater assistance to the firefighters and incident personnel in the wildland firefighting environment, the National Aeronautics and Space Administration (NASA) launched the Advanced Capabilities for Emergency Response Operations (ACERO) project. Building on previous NASA research, ACERO will explore the implementation of a traffic management system in the wildland fire environment to enhance safety and support situation awareness. ACERO draws on the UAS Traffic Management (UTM) system previously demonstrated in an urban environment. However, a traffic management system implemented in the wildland fire environment is expected to look and function much differently in order to meet the unique needs of this domain. At the outset of the ACERO project, interviews were conducted with five UASPs who operate UASs at wildland fire incidents. The interviews focused on exploring UASPs’ initial insights about the application of a traffic management system in wildland firefighting and understanding the unique needs of this environment. The UASPs discussed a range of topics including, the shape, size, and organization of UAS operations in the wildland fire environment, information needs for a user interface, such as traffic and map information, an alerting function when other traffic nears their operation area, and the importance of conformance monitoring. The UASPs also discussed their willingness to share operational information to support safety. In this paper, we describe the foundational work upon which ACERO will build and summarize the information and insights gathered during the UASP interviews, some of which have already informed the development of the ACERO work.

Uncrewed Aircraft System (UAS)↗

Incorporating UAS Traffic Management into Wildland Firefighting Operations: Initial Findings of Subject Matter Expert Interviews

Uncrewed Aircraft Systems (UASs) are being utilized throughout the disaster and emergency response domain, including in wildland firefighting operations. While UASs can offer safety benefits in comparison to crewed aircraft, such as removing the human pilot from the vehicle so that they are not exposed to the same risks and the ability to operate in low-visibility conditions, they are not without tradeoffs. For example, it can be challenging for UAS pilots (UASPs) to build situation awareness of the airspace in which their UAS is operating. In order to address some of the challenges associated with using UASs and provide greater assistance to the firefighters and incident personnel in the wildland firefighting environment, the National Aeronautics and Space Administration (NASA) launched the Advanced Capabilities for Emergency Response Operations (ACERO) project. Building on previous NASA research, ACERO will explore the implementation of a traffic management system in the wildland fire environment to enhance safety and support situation awareness. ACERO draws on the UAS Traffic Management (UTM) system previously demonstrated in an urban environment. However, a traffic management system implemented in the wildland fire environment is expected to look and function much differently in order to meet the unique needs of this domain. At the outset of the ACERO project, interviews were conducted with five UASPs who operate UASs at wildland fire incidents. The interviews focused on exploring UASPs’ initial insights about the application of a traffic management system in wildland firefighting and understanding the unique needs of this environment. The UASPs discussed a range of topics including, the shape, size, and organization of UAS operations in the wildland fire environment, information needs for a user interface, such as traffic and map information, an alerting function when other traffic nears their operation area, and the importance of conformance monitoring. The UASPs also discussed their willingness to share operational information to support safety. In this presentation, we describe the foundational work upon which ACERO will build and summarize the information and insights gathered during the UASP interviews, some of which have already informed the development of the ACERO work.

Uncrewed Aircraft Systems (UAS)↗