Search NASA⌕ Search

SEARCH · Search NASA

Results for “Design Safety”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 325 records · Page 18

HESTIA Commodities Exchange Pallet and Sounding Rocket Test Stand

During my Spring 2016 internship, my two major contributions were the design of the Commodities Exchange Pallet and the design of a test stand for a 100 pounds-thrust sounding rocket. The Commodities Exchange Pallet is a prototype developed for the Human Exploration Spacecraft Testbed for Integration and Advancement (HESTIA) program. Under the HESTIA initiative the Commodities Exchange Pallet was developed as a method for demonstrating multi-system integration thru the transportation of In-Situ Resource Utilization produced oxygen and water to a human habitat. Ultimately, this prototype's performance will allow for future evaluation of integration, which may lead to the development of a flight capable pallet for future deep-space exploration missions. For HESTIA, my main task was to design the Commodities Exchange Pallet system to be used for completing an integration demonstration. Under the guidance of my mentor, I designed, both, the structural frame and fluid delivery system for the commodities pallet. The fluid delivery system includes a liquid-oxygen to gaseous-oxygen system, a water delivery system, and a carbon-dioxide compressors system. The structural frame is designed to meet safety and transportation requirements, as well as the ability to interface with the ER division's Portable Utility Pallet. The commodities pallet structure also includes independent instrumentation oxygen/water panels for operation and system monitoring. My major accomplishments for the commodities exchange pallet were the completion of the fluid delivery systems and the structural frame designs. In addition, parts selection was completed in order to expedite construction of the prototype, scheduled to begin in May of 2016. Once the commodities pallet is assembled and tested it is expected to complete a fully integrated transfer demonstration with the ISRU unit and the Environmental Control and Life Support System test chamber in September of 2016. In addition to the development of the Commodities Exchange Pallet, I also assisted in preparation for testing the upper stage of a sounding rocket developed as a Center Innovation Fund project. The main objective of this project is to demonstrate the integration between a propulsion system and a solid oxide fuel cell (SOFC). The upper stage and SOFC are scheduled to complete an integrated test in August of 2016. As part of preparation for scheduled testing, I was responsible for designing the upper stage's test stand/support structure and main engine plume deflector to be used during hot-fire testing (fig. 3). The structural components of the test stand need to meet safety requirements for operation of the propulsion system, which consist of a 100 pounds-thrust main engine and two 15 pounds-thrust reaction control thrusters. My main accomplishment for this project was the completion of the design and the parts selection for construction of the structure, scheduled to begin late April of 2016.

Chaparro, Javier↗

GPM Timeline Inhibits For IT Processing

The Safety Inhibit Timeline Tool was created as one approach to capturing and understanding inhibits and controls from IT through launch. Global Precipitation Measurement (GPM) Mission, which launched from Japan in March 2014, was a joint mission under a partnership between the National Aeronautics and Space Administration (NASA) and the Japan Aerospace Exploration Agency (JAXA). GPM was one of the first NASA Goddard in-house programs that extensively used software controls. Using this tool during the GPM buildup allowed a thorough review of inhibit and safety critical software design for hazardous subsystems such as the high gain antenna boom, solar array, and instrument deployments, transmitter turn-on, propulsion system release, and instrument radar turn-on. The GPM safety team developed a methodology to document software safety as part of the standard hazard report. As a result of this process, a new tool safety inhibit timeline was created for management of inhibits and their controls during spacecraft buildup and testing during IT at GSFC and at the launch range in Japan. The Safety Inhibit Timeline Tool was a pathfinder approach for reviewing software that controls the electrical inhibits. The Safety Inhibit Timeline Tool strengthens the Safety Analysts understanding of the removal of inhibits during the IT process with safety critical software. With this tool, the Safety Analyst can confirm proper safe configuration of a spacecraft during each IT test, track inhibit and software configuration changes, and assess software criticality. In addition to understanding inhibits and controls during IT, the tool allows the Safety Analyst to better communicate to engineers and management the changes in inhibit states with each phase of hardware and software testing and the impact of safety risks. Lessons learned from participating in the GPM campaign at NASA and JAXA will be discussed during this session.

Inhibits↗

Fire hazard considerations for composites in vehicle design

Military ground vehicles fires are a significant cause of system loss, equipment damage, and crew injury in both combat and non-combat situations. During combat, the ability to successfully fight an internal fire, without losing fighting and mobility capabilities, is often the key to crew survival and mission success. In addition to enemy hits in combat, vehicle fires are initiated by electrical system failures, fuel line leaks, munitions mishaps and improper personnel actions. If not controlled, such fires can spread to other areas of the vehicle, causing extensive damage and the potential for personnel injury and death. The inherent fire safety characteristics (i.e. ignitability, compartments of these vehicles play a major roll in determining rather a newly started fire becomes a fizzle or a catastrophe. This paper addresses a systems approach to assuring optimum vehicle fire safety during the design phase of complex vehicle systems utilizing extensive uses of composites, plastic and related materials. It provides practical means for defining the potential fire hazard risks during a conceptual design phase, and criteria for the selection of composite materials based on its fire safety characteristics.

Gordon, Rex B.↗

A Safety-Driven Approach to Exploring and Comparing Air Traffic Management Concepts for Enabling Urban Air Mobility

There is broad recognition that the high tempo and density of Urban Air Mobility (UAM) operations will require identifying new Air Traffic Management (ATM) concepts to safely integrate UAM air traffic into the airspace alongside existing air traffic. However, the simulation models used to compare ATM concepts today are difficult to apply during the early stages of concept development and do not offer enough support in identifying potential new concepts. In addition, they have limited ability to evaluate ATM concepts in terms of safety, security, and other key emergent properties. Instead of using simulation to evaluate ATM concepts, this paper demonstrates how a safety-driven systems engineering approach based on Systems-Theoretic Accident Model and Processes (STAMP) can be used to design properties such as safety into an ATM system from the earliest stages of development. Using a hazard analysis technique called Systems-Theoretic Process Analysis (STPA), system requirements and the desired ATM behavior are derived. As an example, two possible ATM concepts to implement that behavior are compared to identify their safety-related benefits and tradeoffs. This new approach enables (1) systematic exploration of alternative ATM concepts and (2) identification of the safety-related tradeoffs between concepts as early as possible in the development process.

system safety↗

Space transportation system payload safety guidelines handbook

This handbook provides the payload developer with a uniform description and interpretation of the potential hazards which may be caused by or associated with a payload element, operation, or interface with other payloads or with the STS. It also includes guidelines describing design or operational safety measures which suggest means of alleviating a particular hazard or group of hazards, thereby improving payload safety.

Source record↗

Liquefied natural gas (LNG) safety

Bibliography, assembled from computer search of NASA Aerospace Safety Data Bank, including title of report, author, abstract, source, description of figures, key references, and key words or subject terms. Publication is indexed by key subjects and by authors. Items are relevant to design engineers and safety specialists.

Ordin, P. M.↗

Mitigating Motion Base Safety Issues: The NASA LaRC CMF Implementation

The NASA Langley Research Center (LaRC), Cockpit Motion Facility (CMF) motion base design has taken advantage of inherent hydraulic characteristics to implement safety features using hardware solutions only. Motion system safety has always been a concern and its implementation is addressed differently by each organization. Some approaches rely heavily on software safety features. Software which performs safety functions is subject to more scrutiny making its approval, modification, and development time consuming and expensive. The NASA LaRC's CMF motion system is used for research and, as such, requires that the software be updated or modified frequently. The CMF's customers need the ability to update the simulation software frequently without the associated cost incurred with safety critical software. This paper describes the CMF engineering team's approach to achieving motion base safety by designing and implementing all safety features in hardware, resulting in applications software (including motion cueing and actuator dynamic control) being completely independent of the safety devices. This allows the CMF safety systems to remain intact and unaffected by frequent research system modifications.

Bryant, Richard B., Jr.↗

Evaluation of Human and Anthropomorphic Test Device Finite Element Models under Spaceflight Loading Conditions

In an effort to develop occupant protection standards for future multipurpose crew vehicles, the National Aeronautics and Space Administration (NASA) has looked to evaluate the test device for human occupant restraint with the modification kit (THOR‐K) anthropomorphic test device (ATD) in relevant impact test scenarios. With the allowance and support of the National Highway Traffic Safety Administration, NASA has performed a series of sled impact tests on the latest developed THOR‐K ATD. These tests were performed to match test conditions from human volunteer data previously collected by the U.S. Air Force. The objective of this study was to evaluate the THOR‐K finite element (FE) model and the Total HUman Model for Safety (THUMS) FE model with respect to the tests performed. These models were evaluated in spinal and frontal impacts against kinematic and kinetic data recorded in ATD and human testing. Methods: The FE simulations were developed based on recorded pretest ATD/human position and sled acceleration pulses measured during testing. Predicted responses by both human and ATD models were compared to test data recorded under the same impact conditions. The kinematic responses of the models were quantitatively evaluated using the ISO‐metric curve rating system. In addition, ATD injury criteria and human stress/strain data were calculated to evaluate the risk of injury predicted by the ATD and human model, respectively. Results: Preliminary results show well‐correlated response between both FE models and their physical counterparts. In addition, predicted ATD injury criteria and human model stress/strain values are shown to positively relate. Kinematic comparison between human and ATD models indicates promising biofidelic response, although a slightly stiffer response is observed within the ATD. Conclusion: As a compliment to ATD testing, numerical simulation provides efficient means to assess vehicle safety throughout the design process and further improve the design of physical ATDs. The assessment of the THOR‐K and THUMS FE models in a spaceflight testing condition is an essential first step to implementing these models in the computational evaluation of spacecraft occupant safety. Promising results suggest future use of these models in the aerospace field.

Putnam, Jacob P.↗

Formal Verification of Safety Properties for Aerospace Systems Through Algorithms Based on Exhaustive State-Space Exploration

The Runway Safety Monitor (RSM) designed by Lockheed Martin is part of NASA's effort to reduce aviation accidents. We developed a Petri net model of the RSM protocol and used the model checking functions of our tool SMART to investigate a number of safety properties in RSM. To mitigate the impact of state-space explosion, we built a highly discretized model of the system, obtained by partitioning the monitored runway zone into a grid of smaller volumes and by considering scenarios involving only two aircraft. The model also assumes that there are no communication failures, such as bad input from radar or lack of incoming data, thus it relies on a consistent view of reality by all participants. In spite of these simplifications, we were able to expose potential problems in the RSM conceptual design. Our findings were forwarded to the design engineers, who undertook corrective action. Additionally, the results stress the efficiency attained by the new model checking algorithms implemented in SMART, and demonstrate their applicability to real-world systems. Attempts to verify RSM with NuSMV and SPIN have failed due to excessive memory consumption.

Ciardo, Gianfranco↗

Formal Verification of the Runway Safety Monitor

The Runway Safety Monitor (RSM) designed by Lockheed Martin is part of NASA's effort to reduce runway accidents. We developed a Petri net model of the RSM protocol and used the model checking functions of our tool SMART to investigate a number of safety properties in RSM. To mitigate the impact of state-space explosion, we built a highly discretized model of the system, obtained by partitioning the monitored runway zone into a grid of smaller volumes and by considering scenarios involving only two aircraft. The model also assumes that there are no communication failures, such as bad input from radar or lack of incoming data, thus it relies on a consistent view of reality by all participants. In spite of these simplifications, we were able to expose potential problems in the RSM conceptual design. Our findings were forwarded to the design engineers, who undertook corrective action. Additionally, the results stress the efficiency attained by the new model checking algorithms implemented in SMART, and demonstrate their applicability to real-world systems.

Siminiceanu, Radu↗

Manufacture and static firing of X259-E6 rocket motor serial number XJ04/0001

A single motor was cast and static fired to demonstrate the performance of high energy crosslinked double base (XLDB) propellant in standard X259 rocket motor hardware. Prior to motor fabrication, the motor was analyzed to predict the results of static firing the X259 motor loaded with XLDB propellant. As a result of the analyses, a forward dome shrinkage liner was added to the design. With this design change it was determined that adequate margins of safety existed. The motor, designated the X259-E6 model with serial number XJ04/0001, was fabricated using a slurry-casting technique and was assembled with a standard X259-B4 nozzle which had the nozzle throat machined to a smaller inside diameter than the B4 model and the exit cone cut short for Bacchus Works altitude expansion. The motor was static fired on 20 February 1974 with the nozzle failing during motor operation. Nozzle failure was attributed to spalling of the throat material leading to complete nozzle break-up. However, the propellant functioned as predicted in the motor chamber, ignition was normal, and char and erosion of the internal insulator were as expected.

Robertson, D. R.↗

Proceedings of the 8th Annual Summer Conference: NASA/USRA Advanced Design Program

Papers presented at the 8th Annual Summer Conference are categorized as Space Projects and Aeronautics projects. Topics covered include: Systematic Propulsion Optimization Tools (SPOT), Assured Crew Return Vehicle Post Landing Configuration Design and Test, Autonomous Support for Microorganism Research in Space, Bioregenerative System Components for Microgravity, The Extended Mission Rover (EMR), Planetary Surface Exploration MESUR/Autonomous Lunar Rover, Automation of Closed Environments in Space for Human Comfort and Safety, Walking Robot Design, Extraterrestrial Surface Propulsion Systems, The Design of Four Hypersonic Reconnaissance Aircraft, Design of a Refueling Tanker Delivering Liquid Hydrogen, The Design of a Long-Range Megatransport Aircraft, and Solar Powered Multipurpose Remotely Powered Aircraft.

Source record↗

Inflatable Habitats Technology Development

For many years inflatable structures have been theorized for use as satellite dishes, deployable arrays and human habitats. They fall into human-rated and non-human rated structures. As such the structural design requirements and safety redundancy are much different. This paper will discuss the Habitat and Surface Construction Technology that would support the development of Mars greenhouses as well as habitats. This paper will briefly describe the ISS TransHab architectural design and structural testing for the proposed as a habitation module for the International Space Station. It will also discuss inflatable greenhouse design considerations and examples.

Kennedy, Kriss J.↗

Lunar and Mars Ascent and Descent/Entry Crew Abort Modes for the Hercules Single-Stage Reusable Vehicle

The Hercules single-stage reusable vehicle is designed to support crewed missions to both the lunar surface and Mars surface. The design maximizes crew safety by providing full coverage crew abort capability during ascent and entry/descent, either through abort-to-surface or abort-to-orbit. This paper outlines each of the abort modes and discuss the Hercules vehicle design along with the base and orbital infrastructure required to enable the full coverage abort capability. For each abort mode, trajectory simulations are flown that illustrate the requisite design capabilities and highlight the sensitivity to key design variables.

Komar, David R.↗

Apollo Spacecraft and Saturn V Launch Vehicle Pyrotechnics/Explosive Devices

The Apollo Mission employs more than 210 pyrotechnic devices per mission.These devices are either automatic of commanded from the Apollo spacecraft systems. All devices require high reliability and safety and most are classified as either crew safety critical or mission critical. Pyrotechnic devices have a wide variety of applications including: launch escape tower separation, separation rocket ignition, parachute deployment and release and electrical circuit opening and closing. This viewgraph presentation identifies critical performance, design requirements and safety measures used to ensure quality, reliability and performance of Apollo pyrotechnic/explosive devices. The major components and functions of a typical Apollo pyrotechnic/explosive device are listed and described (initiators, cartridge assemblies, detonators, core charges). The presentation also identifies the major locations and uses for the devices on: the Command and Service Module, Lunar Module and all stages of the launch vehicle.

Interbartolo, Michael↗

A Safety Index and Method for Flightdeck Evaluation

If our goal is to improve safety through machine, interface, and training design, then we must define a metric of flightdeck safety that is usable in the design process. Current measures associated with our notions of "good" pilot performance and ultimate safety of flightdeck performance fail to provide an adequate index of safe flightdeck performance for design evaluation purposes. The goal of this research effort is to devise a safety index and method that allows us to evaluate flightdeck performance holistically and in a naturalistic experiment. This paper uses Reason's model of accident causation (1990) as a basis for measuring safety, and proposes a relational database system and method for 1) defining a safety index of flightdeck performance, and 2) evaluating the "safety" afforded by flightdeck performance for the purpose of design iteration. Methodological considerations, limitations, and benefits are discussed as well as extensions to this work.

Latorella, Kara A.↗

Human-rated Safety Certification of a High Voltage Robonaut Lithium-ion Battery

NASA's rigorous certification process is being followed for the R2 high voltage battery program for use of R2 on International Space Station (ISS). Rigorous development testing at appropriate levels to credible off-nominal conditions and review of test data led to design improvements for safety at the virtual cell, cartridge and battery levels. Tests were carried out at all levels to confirm that both hardware and software controls work. Stringent flight acceptance testing of the flight battery will be completed before launch for mission use on ISS.

Jeevarajan, Judith↗

The Ultimate Factor of Safety for Aircraft and Spacecraft Its History, Applications and Misconceptions

The ultimate factor of safety (FOSULT) concept used in aircraft and spacecraft has evolved over many decades. Currently an FOSULT 1.5 is the FAR‐mandated value for aircraft while an FOSULT of 1.4 has been used in various spacecraft. This paper was motivated by the desire to concisely explain the origins, proper interpretation and application of the ultimate factor of safety concept, since the authors have seen throughout their careers many misconceptions and incorrect applications of this concept. The history of the ultimate factor of safety concept is briefly summarized, the proper application of the factor of safety in aircraft design, structural analysis and operations is covered in detail, examples of limit load exceedance in aircraft and spacecraft are discussed, the evolution of the 1.4 FOSULT for spacecraft is described and some misconceptions regarding the ultimate factor of safety concept are addressed. It is hoped that this paper can be a summary resource for engineers to understand the origin, purpose and proper application of the ultimate factor of safety.

Zipay, John J.↗