Search NASA⌕ Search

SEARCH · Search NASA

Results for “Functional Fault”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 343 records · Page 19

6DOF Testing of the SLS Inertial Navigation Unit

The Navigation System on the NASA Space Launch System (SLS) Block 1 vehicle performs initial alignment of the Inertial Navigation System (INS) navigation frame through gyrocompass alignment (GCA). Because the navigation architecture for the SLS Block 1 vehicle is a purely inertial system, the accuracy of the achieved orbit relative to mission requirements is very sensitive to initial alignment accuracy. The assessment of this sensitivity and many others via simulation is a part of the SLS Model-Based Design and Model-Based Requirements approach. As a part of the aforementioned, 6DOF Monte Carlo simulation is used in large part to develop and demonstrate verification of program requirements. To facilitate this and the GN&C flight software design process, an SLS-Program-controlled Design Math Model (DMM) of the SLS INS was developed by the SLS Navigation Team. The SLS INS model implements all of the key functions of the hardware-namely, GCA, inertial navigation, and FDIR (Fault Detection, Isolation, and Recovery)-in support of SLS GN&C design requirements verification. Despite the strong sensitivity to initial alignment, GCA accuracy requirements were not verified by test due to program cost and schedule constraints. Instead, the system relies upon assessments performed using the SLS INS model. In order to verify SLS program requirements by analysis, the SLS INS model is verified and validated against flight hardware. In lieu of direct testing of GCA accuracy in support of requirement verification, the SLS Navigation Team proposed and conducted an engineering test to, among other things, validate the GCA performance and overall behavior of the SLS INS model through comparison with test data. This paper will detail dynamic hardware testing of the SLS INS, conducted by the SLS Navigation Team at Marshall Space Flight Center's 6DOF Table Facility, in support of GCA performance characterization and INS model validation. A 6-DOF motion platform was used to produce 6DOF pad twist and sway dynamics while a simulated SLS flight computer communicated with the INS. Tests conducted include an evaluation of GCA algorithm robustness to increasingly dynamic pad environments, an examination of GCA algorithm stability and accuracy over long durations, and a long-duration static test to gather enough data for Allan Variance analysis. Test setup, execution, and data analysis will be discussed, including analysis performed in support of SLS INS model validation.

Geohagan, Kevin↗

Safe and Optimal Techniques Enabling Recovery, Integrity, and Assurance

There is a trend in the aviation industry to go from federated to integrated computing systems. Combining a number of traditional stand-alone federated systems into an integrated common platform (called Integrated Modular Avionics, IMA) has the benefit of increased power efficiency, reduced support hardware, and reduced cabling. However, changing from federated to integrated has a significant impact on the system architecture and hence the process of how avionic systems are to be analyzed. Traditional approaches to safety analysis become inefficient when functional boundaries can no longer be assumed for failure independence and fault isolation. In this report, we describe a tool that we developed to accelerate the safety engineer's ability to perform safety analysis of IMA systems through modeling, as well as optimize the system engineer's ability to develop a system through architecture synthesis. This work was the result of a three-year research effort called SOTERIA (Safe and Optimal Techniques Enabling Recovery, Integrity, and Assurance). We developed a compositional modeling language that supports rapid development, modification, and evaluation of architectures. The modeling language is structured such that the end-user defines a library of components with information on component reliability, connectivity, and fault propagation logic. The system model is built by instantiating the components from the library, connecting the components, and identifying the top-level faults of interest. Our tool is compositional in that the end-user only needs to define safety aspects at the component level. The tool takes the model and automatically synthesizes both the qualitative and quantitative safety analyses. We go further by allowing users to describe system information such as components to use in an architecture and their connection compatibility and automatically synthesize an architecture that meets the top-level probability target adhering to end-user specified constraints. This capability allows users to rapidly explore a design space..

Siu, Kit Y.↗

Utilizing local phase transformation strengthening for nickel-based superalloys

Almost 75 years of research has been devoted to producing superalloys capable of higher operating temperatures in jet turbine engines, and there is an ongoing need to increase operating temperature further. Here, a new disk Nickel-base superalloy is designed to take advantage of strengthening atomic-scale dynamic complexions. This local phase transformation strengthening provides the alloy with a three times improvement in creep strength over similar disk superalloys and comparable strength to a single crystal blade alloy at 760 °C. Ultra-high-resolution chemical mapping reveals that the improvement in creep strength is a result of atomic-scale η (D024) and χ (D019) formation along superlattice stacking faults. To understand these results, the energy differences between the L12 and competing D024 and D019 stacking fault structures and their dependence on composition are computed by density functional theory. This study can help guide researchers to further optimize local phase transformation strengthening mechanisms for alloy development.

Timothy M. Smith↗

A study of the use of vibration and stress wave sensing for the detection of bearing failure

Results from an experimental study of vibrations and stress waves emitted from ball bearings are presented. Fatique tests were run with both high quality bearings and man faulted bearings, all of one size. Tests were instrumented with different sensors to detect the noises from 10 Hz to 1 MHz. Frequency spectrum plots are presented. The modulation characteristics of the ultrasonic noises were analyzed, and acoustic emission type measurements were conducted. Results are presented which show that there are usable acoustic signal levels even beyond 500 KHz. These signal levels are modulated by a low frequency carrier which is a function of the stress loading and acoustic transmissibility. The results were correlated to fault size in the bearings. The correlation shows that the sensor used for signals from 100 KHz to 1 MHz gave the best sensitivity and detected the generation of very small spalls or pits.

Ensor, L. C.↗

Compressor is A Sensor: A Universal Refrigerant Charge Fault Detection and Diagnostics Method Based on Pump Down Operation

The primary goal of this report is to develop a universal charge fault detection method that requires only a few experimental data with high prediction accuracy. Currently, pump-down operations is typical practices by HVAC technicians when they need to open the refrigerant circuit to make a repair. In addition, compressors have a built-in low-pressure cut-off protection function, and the compressor performance maps are commonly available from manufacturers. The new charge fault detection and diagnostics method innovatively utilizes the typical pump down operation, the compressor’s low-pressure cut-off protection, and the compressor performance map. It does not require any geometry information of heat exchangers, refrigerant lines, or charge buffers.

42 ENGINEERING↗

Fault Management Architectures and the Challenges of Providing Software Assurance

The satellite systems Fault Management (FM) is focused on safety, the preservation of assets, and maintaining the desired functionality of the system. How FM is implemented varies among missions. Common to most is system complexity due to a need to establish a multi-dimensional structure across hardware, software and operations. This structure is necessary to identify and respond to system faults, mitigate technical risks and ensure operational continuity. These architecture, implementation and software assurance efforts increase with mission complexity. Because FM is a systems engineering discipline with a distributed implementation, providing efficient and effective verification and validation (VV) is challenging. A breakout session at the 2012 NASA Independent Verification Validation (IVV) Annual Workshop titled VV of Fault Management: Challenges and Successes exposed these issues in terms of VV for a representative set of architectures. NASA's IVV is funded by NASA's Software Assurance Research Program (SARP) in partnership with NASA's Jet Propulsion Laboratory (JPL) to extend the work performed at the Workshop session. NASA IVV will extract FM architectures across the IVV portfolio and evaluate the data set for robustness, assess visibility for validation and test, and define software assurance methods that could be applied to the various architectures and designs. This work focuses efforts on FM architectures from critical and complex projects within NASA. The identification of particular FM architectures, visibility, and associated VVIVV techniques provides a data set that can enable higher assurance that a satellite system will adequately detect and respond to adverse conditions. Ultimately, results from this activity will be incorporated into the NASA Fault Management Handbook providing dissemination across NASA, other agencies and the satellite community. This paper discusses the approach taken to perform the evaluations and preliminary findings from the research including identification of FM architectures, visibility observations, and methods utilized for VVIVV.

Fault Management↗

Dynamic Rupture Modeling of the 1999 Chi-Chi, Taiwan Earthquake Using 3DFinite Element Method. Sensitivity Analysis of Slip Rate Function to Model Parameters of Crustal Weak-Zone

The main objective of this study was the dynamic rupture modeling of the M7.3 1999 Chi-Chi, Taiwan earthquake. The purpose of the numerical modeling was two folded. First, using models of rupture dynamics, derive kinematic rupture characteristics, including spatial and temporal variations of the slip rate time history and rupture speed, in the long-period ground motion generation area (LMGA), strong motion generation areas (SMGAs) and background fault area for a thrust shallow rupture. Second, investigate the sensitivity of source time function characteristics in the LMGA and SMGA areas to model parameterization of low-velocity weak zone, such as thickness and shear wave velocity.

58 GEOSCIENCES↗

Fault Management Architectures and the Challenges of Providing Software Assurance

Fault Management (FM) is focused on safety, the preservation of assets, and maintaining the desired functionality of the system. How FM is implemented varies among missions. Common to most missions is system complexity due to a need to establish a multi-dimensional structure across hardware, software and spacecraft operations. FM is necessary to identify and respond to system faults, mitigate technical risks and ensure operational continuity. Generally, FM architecture, implementation, and software assurance efforts increase with mission complexity. Because FM is a systems engineering discipline with a distributed implementation, providing efficient and effective verification and validation (V&V) is challenging. A breakout session at the 2012 NASA Independent Verification & Validation (IV&V) Annual Workshop titled "V&V of Fault Management: Challenges and Successes" exposed this issue in terms of V&V for a representative set of architectures. NASA's Software Assurance Research Program (SARP) has provided funds to NASA IV&V to extend the work performed at the Workshop session in partnership with NASA's Jet Propulsion Laboratory (JPL). NASA IV&V will extract FM architectures across the IV&V portfolio and evaluate the data set, assess visibility for validation and test, and define software assurance methods that could be applied to the various architectures and designs. This SARP initiative focuses efforts on FM architectures from critical and complex projects within NASA. The identification of particular FM architectures and associated V&V/IV&V techniques provides a data set that can enable improved assurance that a system will adequately detect and respond to adverse conditions. Ultimately, results from this activity will be incorporated into the NASA Fault Management Handbook providing dissemination across NASA, other agencies and the space community. This paper discusses the approach taken to perform the evaluations and preliminary findings from the research.

Fault Management↗

Mars 2020 Entry, Descent, and Landing Software Implementation

On February 18th, 2021, the Mars 2020 project's Perseverance Rover successfully touched down on the Martian surface after nearly eight years of development. The Mars 2020 Entry, Descent, and Landing (EDL) System largely leveraged heritage from the Mars Science Laboratory (MSL) EDL System while employing targeted technological advancements. The landing process is autonomously directed by a software behavior implemented in the rover's primary flight computer called the EDL Timeline that assumes control of the vehicle six days before atmospheric entry. In addition to performing the critical function of landing the rover on the Martian surface, the EDL timeline behavior must co-exist in a non-partitioned software and system environment with other high-level functions that accomplish the goals for the rest of the mission. Due to the criticality of EDL, the potential for loss of mission, and a need for complete system autonomy, the standard for how the EDL Timeline interacts with other functions in the system is highly constrained. This paper first walks through the basics of the EDL Timeline mechanics and how the behavior is designed to account for internal system variations and environmental unknowns. It then summarizes the interactions between the EDL timeline and other high-level system behaviors like spacecraft mode transitions and system fault protection, focusing on the complications that arise when passing spacecraft control between executive functions. Although the MSL-inherited EDL System is reliable and capable, targeted updates and a thorough verification and validation program were required for Mars 2020. This paper discusses changes made to close vulnerabilities discovered during both MSL and Mars 2020 development cycles, landing system capability enhancements that were enabling for Mars 2020's mission, and how these updates were integrated with the heritage system. It then describes how both analysis and testing campaigns were utilized to verify and validate all aspects of EDL and system behaviors that run during the six days before landing, as well as the operational workarounds that were needed to address problems found during the development and commissioning process. Finally, this paper imparts lessons learned from Mars 2020 EDL development, implementation, and operations, emphasizing how systems designed to conduct time-critical mission events with low margin of error can be improved in the future.

Stehura, Aaron↗

Stress effects on the energy barrier and mechanisms of cross-slip in FCC nickel

The energy barrier for homogeneous cross-slip of a screw dislocation in face-centered cubic (FCC) nickel is calculated using atomistic simulations as a function of the Escaig stress on the glide plane, the Escaig stress on the cross-slip plane, and the Schmid stress on the cross-slip plane. Two cross-slip mechanisms, Friedel-Escaig (FE) and Fleischer, are examined and their energy barriers are calculated for a large number of stress combinations. For each mechanism, the energy barrier as a function of three stress components can be reduced into a one-dimensional function of an effective stress. The stress domains in which FE and Fleischer mechanisms operate respectively are determined. Additionally, the FE mechanism dominates when the Escaig stress on the glide plane (in the direction that reduces the stacking fault width) is the largest stress component. Increasing the Schmid stress and Escaig stress (in the direction that expands the stacking fault width) on the cross slip plane promotes the Fleischer mechanism. The cross slip energy barrier functions obtained here can be used as input functions for computing cross slip rates in mesoscale dislocation dynamics simulations.

36 MATERIALS SCIENCE↗

Advanced information processing system: Input/output system services

The functional requirements and detailed specifications for the Input/Output (I/O) Systems Services of the Advanced Information Processing System (AIPS) are discussed. The introductory section is provided to outline the overall architecture and functional requirements of the AIPS system. Section 1.1 gives a brief overview of the AIPS architecture as well as a detailed description of the AIPS fault tolerant network architecture, while section 1.2 provides an introduction to the AIPS systems software. Sections 2 and 3 describe the functional requirements and design and detailed specifications of the I/O User Interface and Communications Management modules of the I/O System Services, respectively. Section 4 illustrates the use of the I/O System Services, while Section 5 concludes with a summary of results and suggestions for future work in this area.

Masotto, Tom↗

Empirically based analysis of failures in software systems

An empirical analysis of software-system failures is used to study several specific issues in software testing, reliability analysis, and reuse. Failure data from a large software manufacturer and a NASA production environment were collected and analyzed. The systems ranged in size from 30,000 to over 100,000 lines. The results show that (1) the first 15 percent of the test cases detected 67 percent of the high-severity failures and 50 percent of all failures; (2) multiple fault-detection and testing phases may result in a significant increase in reliability or none at all; (3) composite measures of system reliability did not adequately reflect reliability at the function or component level; (4) developers were biased toward portions of systems that would be heavily tested; (5) fault-proneness of reused or modified components was 74 percent less than that of newly developed components; and (6) systems with more reused software had lower component development effort, but not lower component fault-proneness.

Selby, Richard W.↗

Fault diagnosis

The objective of the research in this area of fault management is to develop and implement a decision aiding concept for diagnosing faults, especially faults which are difficult for pilots to identify, and to develop methods for presenting the diagnosis information to the flight crew in a timely and comprehensible manner. The requirements for the diagnosis concept were identified by interviewing pilots, analyzing actual incident and accident cases, and examining psychology literature on how humans perform diagnosis. The diagnosis decision aiding concept developed based on those requirements takes abnormal sensor readings as input, as identified by a fault monitor. Based on these abnormal sensor readings, the diagnosis concept identifies the cause or source of the fault and all components affected by the fault. This concept was implemented for diagnosis of aircraft propulsion and hydraulic subsystems in a computer program called Draphys (Diagnostic Reasoning About Physical Systems). Draphys is unique in two important ways. First, it uses models of both functional and physical relationships in the subsystems. Using both models enables the diagnostic reasoning to identify the fault propagation as the faulted system continues to operate, and to diagnose physical damage. Draphys also reasons about behavior of the faulted system over time, to eliminate possibilities as more information becomes available, and to update the system status as more components are affected by the fault. The crew interface research is examining display issues associated with presenting diagnosis information to the flight crew. One study examined issues for presenting system status information. One lesson learned from that study was that pilots found fault situations to be more complex if they involved multiple subsystems. Another was pilots could identify the faulted systems more quickly if the system status was presented in pictorial or text format. Another study is currently under way to examine pilot mental models of the aircraft subsystems and their use in diagnosis tasks. Future research plans include piloted simulation evaluation of the diagnosis decision aiding concepts and crew interface issues. Information is given in viewgraph form.

Abbott, Kathy↗

A Unique Power System For The ISS Fluids And Combustion Facility

Unique power control technology has been incorporated into an electrical power control unit (EPCU) for the Fluids and Combustion Facility (FCF). The objective is to maximize science throughput by providing a flexible power system that is easily reconfigured by the science payload. Electrical power is at a premium on the International Space Station (ISS). The EPCU utilizes advanced power management techniques to maximize the power available to the FCF experiments. The EPCU architecture enables dynamic allocation of power from two ISS power channels for experiments. Because of the unique flexible remote power controller (FRPC) design, power channels can be paralleled while maintaining balanced load sharing between the channels. With an integrated and redundant architecture, the EPCU can tolerate multiple faults and still maintain FCF operation. It is important to take full advantage of the EPCU functionality. The EPCU acts as a buffer between the experimenter and the ISS power system with all its complex requirements. However, FCF science payload developers will still need to follow guidelines when designing the FCF payload power system. This is necessary to ensure power system stability, fault coordination, electromagnetic compatibility, and maximum use of available power for gathering scientific data.

Fox, David A.↗

Refinements to the Graves–Pitarka Kinematic Rupture Generator, Including a Dynamically Consistent Slip-Rate Function, Applied to the 2019 Mw 7.1 Ridgecrest Earthquake

The main objective of this study is to develop physics–based constraints on the spatiotemporal variation of the slip–rate function using a simplified dynamic rupture model. First, we performed dynamic rupture modeling of the 2019 M w 7.1 Ridgecrest, California, earthquake, to analyze the effects of depth–dependent stress and material friction on slip rate. Then, we used our modeling results to guide refinements to the slip–rate function that were implemented in the Graves–Pitarka kinematic rupture generation technique. The dynamic ruptures were computed on a surface–rupturing, planar strike–slip fault that includes a weak (negative to low–stress–drop) zone in the upper 4 km of the crust. Below the weak zone, we placed high–stress–drop patches designed to mirror the large–slip areas seen in various rupture model inversions of the event. The locations of the high–stress–drop patches and the hypocenter were varied in multiple realizations to investigate how changing the dynamic conditions affected the resulting rupture kinematics, in particular, the slip rate. From these simulations, we observed a systematic change in the shape of the slip–rate function from Kostrov type below the weak zone to a predominantly symmetric shape within the weak zone, along with a depth–dependent reduction of peak slip rate. We generalized these shallow rupture features into a depth–dependent parametric variation of the slip–rate function and implemented it in the Graves–Pitarka kinematic rupture model generator. The performance of the updated kinematic approach was then verified in 0–4 Hz simulations of the M w 7.1 Ridgecrest earthquake, which showed that incorporating the depth–dependent variation in the shape of the slip–rate function improves the fit to the observed near–fault ground motions in the 0.5–3 s period range.

58 GEOSCIENCES↗

Fault Management Practice: A Roadmap for Improvement

Autonomous fault management (FM) is critical for deep space and planetary missions where the limited communication opportunities may prevent timely intervention by ground control. Evidence of pervasive architecture, design, and verification/validation problems with NASA FM engineering has been revealed both during technical reviews of spaceflight missions and in flight. These problems include FM design changes required late in the life-cycle, insufficient project insight into the extent of FM testing required, unexpected test results that require resolution, spacecraft operational limitations because certain functions were not tested, and in-flight anomalies and mission failures attributable to fault management. A recent NASA initiative has characterized the FM state-of-practice throughout the spacecraft development community and identified common NASA, DoD, and commercial concerns that can be addressed in the near term through the development of a FM Practitioner's Handbook and the formation of a FM Working Group. Initial efforts will focus on standardizing FM terminology, establishing engineering processes and tools, and training.

Fesq, Lorraine M.↗

Grid-Following Inverters and Synchronous Condensers: A Grid-Forming Pair?

As power systems across the globe continue to achieve higher instantaneous penetrations of power electronic converter-interfaced renewable sources, the stability of these power systems is challenged because of the removal of synchronous machines, from which stability is traditionally derived. Although technological solutions to these stability challenges are on the horizon, such as the use of grid-forming inverters, they are not yet widely applied to larger power systems, which presents operational challenges for power systems achieving these high instantaneous penetrations today. A potential interim solution using existing technologies is to pair synchronous condensers with grid-following inverters, which might prolong the stability of an operating power system while synchronous generators are turned off during periods of high renewable energy availability. This work examines the transient stability of such a solution using PSCAD simulations of a two-bus system coupled to a varied-length transmission line, with a synchronous condenser at one bus and a grid-following inverter with grid-support functionality at the other. The system is exposed to load step, balanced fault, and unbalanced fault perturbations. It was found that this simple system returned to a steady state for transmission line lengths up to 125 km after 10% load steps, or a variety of fault types.

grid-following inverters↗

Self-Checking Pairs Of Microprocessors

Method of imparting fault tolerance to computer system provides for immediate detection of faults at microprocessor level. Shadow microprocessor provides nominal duplicate outputs to verify functioning of main microprocessor. When output signal on any pin of one microprocessor differs from that on corresponding pin of other microprocessor, comparator puts out alarm signal.

Smith, Brian S.↗