Search NASA⌕ Search

SEARCH · Search NASA

Results for “Safety”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 343 records · Page 19

Planning the Unplanned Experiment: Towards Assessing the Efficacy of Standards for Safety-Critical Software

Safe use of software in safety-critical applications requires well-founded means of determining whether software is fit for such use. While software in industries such as aviation has a good safety record, little is known about whether standards for software in safety-critical applications 'work' (or even what that means). It is often (implicitly) argued that software is fit for safety-critical use because it conforms to an appropriate standard. Without knowing whether a standard works, such reliance is an experiment; without carefully collecting assessment data, that experiment is unplanned. To help plan the experiment, we organized a workshop to develop practical ideas for assessing software safety standards. In this paper, we relate and elaborate on the workshop discussion, which revealed subtle but important study design considerations and practical barriers to collecting appropriate historical data and recruiting appropriate experimental subjects. We discuss assessing standards as written and as applied, several candidate definitions for what it means for a standard to 'work,' and key assessment strategies and study techniques and the pros and cons of each. Finally, we conclude with thoughts about the kinds of research that will be required and how academia, industry, and regulators might collaborate to overcome the noted barriers.

Graydon, Patrick J.↗

Comprehensive Lifecycle for Assuring System Safety

CLASS is a novel approach to the enhancement of system safety in which the system safety case becomes the focus of safety engineering throughout the system lifecycle. CLASS also expands the role of the safety case across all phases of the system's lifetime, from concept formation to decommissioning. As CLASS has been developed, the concept has been generalized to a more comprehensive notion of assurance becoming the driving goal, where safety is an important special case. This report summarizes major aspects of CLASS and contains a bibliography of papers that provide additional details.

Knight, John C.↗

Cyber Safety and Security for Reduced Crew Operations (RCO)

NASA and the Aviation Industry is looking into reduced crew operations (RCO) that would cut today's required two-person flight crews down to a single pilot with support from ground-based crews. Shared responsibility across air and ground personnel will require highly reliable and secure data communication and supporting automation, which will be safety-critical for passenger and cargo aircraft. This paper looks at the different types and degrees of authority delegation given from the air to the ground and the ramifications of each, including the safety and security hazards introduced, the mitigation mechanisms for these hazards, and other demands on an RCO system architecture which would be highly invasive into (almost) all safety-critical avionics. The adjacent fields of unmanned aerial systems and autonomous ground vehicles are viewed to find problems that RCO may face and related aviation accident scenarios are described. The paper explores possible data communication architectures to meet stringent performance and information security (INFOSEC) requirements of RCO. Subsequently, potential challenges for RCO data communication authentication, encryption and non-repudiation are identified. The approach includes a comprehensive safety-hazard analysis of the RCO system to determine top level INFOSEC requirements for RCO and proposes an option for effective RCO implementation. This paper concludes with questioning the economic viability of RCO in light of the expense of overcoming the operational safety and security hazards it would introduce.

Aircraft Communication↗

Quantifying Pilot Contribution to Flight Safety during Drive Shaft Failure

Accident statistics cite the flight crew as a causal factor in over 60% of large transport aircraft fatal accidents. Yet, a well-trained and well-qualified pilot is acknowledged as the critical center point of aircraft systems safety and an integral safety component of the entire commercial aviation system. The latter statement, while generally accepted, cannot be verified because little or no quantitative data exists on how and how many accidents/incidents are averted by crew actions. A joint NASA/FAA high-fidelity motion-base simulation experiment specifically addressed this void by collecting data to quantify the human (pilot) contribution to safety-of-flight and the methods they use in today's National Airspace System. A human-in-the-loop test was conducted using the FAA's Oklahoma City Flight Simulation Branch Level D-certified B-737-800 simulator to evaluate the pilot's contribution to safety-of-flight during routine air carrier flight operations and in response to aircraft system failures. These data are fundamental to and critical for the design and development of future increasingly autonomous systems that can better support the human in the cockpit. Eighteen U.S. airline crews flew various normal and non-normal procedures over a two-day period and their actions were recorded in response to failures. To quantify the human's contribution to safety of flight, crew complement was used as the experiment independent variable in a between-subjects design. Pilot actions and performance during single pilot and reduced crew operations were measured for comparison against the normal two-crew complement during normal and non-normal situations. This paper details the crew's actions, including decision-making, and responses while dealing with a drive shaft failure - one of 6 non-normal events that were simulated in this experiment.

Kramer, Lynda J.↗

Quantifying Pilot Contribution to Flight Safety During Dual Generator Failure

Accident statistics cite flight crew error in over 60% of accidents involving transport category aircraft. Yet, a well-trained and well-qualified pilot is acknowledged as the critical center point of aircraft systems safety and an integral safety component of the entire commercial aviation system. No data currently exists that quantifies the contribution of the flight crew in this role. Neither does data exist for how often the flight crew handles non-normal procedures or system failures on a daily basis in the National Airspace System. A pilot-in-the-loop high fidelity motion simulation study was conducted by the NASA Langley Research Center in partnership with the Federal Aviation Administration (FAA) to evaluate the pilot's contribution to flight safety during normal flight and in response to aircraft system failures. Eighteen crews flew various normal and non-normal procedures over a two-day period and their actions were recorded in response to failures. To quantify the human's contribution, crew complement was used as the experiment independent variable in a between-subjects design. Pilot actions and performance when one of the flight crew was unavailable were also recorded for comparison against the nominal two-crew operations. This paper details diversion decisions, perceived safety of flight, workload, time to complete pertinent checklists, and approach and landing results while dealing with a complete loss of electrical generators. Loss of electrical power requires pilots to complete the flight without automation support of autopilots, flight directors, or auto throttles. For reduced crew complements, the additional workload and perceived safety of flight was considered unacceptable.

Etherington, Timothy J.↗

Airspace Safety Threshold Study: NAS-Wide Encounter Rate Evaluation Using Historical Radar Data and ACES

Realization of the expected proliferation of Unmanned Aircraft System (UAS) operations in the National Airspace System (NAS) depends on the development and validation of performance standards for UAS Detect and Avoid (DAA) Systems. The RTCA Special Committee 228 (SC-228) is charged with leading the development of draft Minimum Operational Performance Standards (MOPS) for UAS DAA Systems. NASA, as a participating member of RTCA SC-228 is committed to supporting the development and validation of draft requirements as well as the safety substantiation and end-to-end assessment of DAA system performance. With regard to the safety aspect being studied by the SC-228 DAA Safety sub-group, NASA has conducted a study using the ACES (Airspace Concept Evaluation System) simulation capability to determine: 1) the rate at which IFR aircraft encounter other IFR and VFR aircraft, and 2) the rate at which UAS aircraft encounter VFR aircraft as well as the corresponding encounter geometries. Five different separation thresholds were used (two for encounter and one each for well-clear, near mid-air collision, and closest point of approach). The results will be used by the SC-228 DAA Safety sub-group to inform decisions about the safety aspect of UAS DAA systems and future requirements development and validation efforts.

encounter geometry↗

Urban Area Unmanned Aerial Systems Sensor Capabilities for Ensuring Ground Hazards Safety

Unmanned aerial systems (UASs) in urban areas can pose significant safety risks to dynamic ground objects (DGOs) such as people, pets, and bikes; especially for off-nominal emergency traverses and landings. This paper will examine a framework for evaluating the UAS safety benefits which can be achieved by classifying DGO hazards, modeling their behavior, and assigning collision costs. DGOs are assumed to be any ground objects which are either moving or capable of moving. Safety benefits will be assessed by analyzing metrics computed from UAS and DGO trajectories which take into account intent and uncertainties. This paper will establish the theoretical relationships mapping these trajectories and DGO classifications to safety levels. Sensor capabilities will be mapped to DGO trajectory uncertainties, so that safety can be directly estimated from the sensor specifications for a given UAS trajectory.

Bouyssounouse, Xavier↗

Solid-state Architecture Batteries for Enhanced Rechargeability and Safety (SABERS)

All-electric vertical take-off and landing vehicles (eVTOL) for urban air mobility (UAM) concepts face numerous challenging technical barriers before their introduction into the consumer marketplace. The most challenging of these technical barriers to overcome is developing an energy storage system capable of meeting the rigorous aerospace safety and performance criteria. The performance metrics for eVTOL craft, such as specific energy and cycle life, are at least 2 times greater than those of electric automobiles. Furthermore, safety is essential for operation of commercial electric aerovehicles. Preliminary systems level analysis studies have indicated that there are five key properties which must be optimized for successful implementation of battery systems. Those five key criteria are safety, energy density, power, packaging design and scalability. Current state-of-the-art (SOA) lithium-ion batteries meet or exceed the requirements for electric aviation in the areas of power and scalability, yet are insufficient in the key performance criteria of energy, safety and packaging design. The SABERS concept proposes a battery that meets all five key performance criteria through the development of a solid-state architecture cell design utilizing high energy density and power density sulfur-selenium cathode with a lithium metal anode. Data will be presented demonstrating high performing sulfur - selenium cathode that offers a balanced energy to power density ratio, which can be tailored to the specific application by altering the stoichiometric ratios of sulfur to selenium. This cathode is being developed by implementing NASA patented holey graphene technology as a highly conductive, ultra-lightweight electrode scaffold. Novel processing methods allow developing solid-state electrolyte that is a safe, non-flammable replacement to the highly flammable liquid organic electrolytes currently used in SOA lithium-ion batteries. The all solid-state lithium-sulfur-selenium cell design enables the implementation of a bipolar stack configuration, which has the advantages of reducing overall cell weight, reducing the amount of interfaced connections for the cell, and minimizing cooling requirements for the battery. In particular, the solid-state design allows for a serial stacking configuration to enable dense packaging of the cells within the bipolar stack. Lastly, optimization of battery components occurs through a robust and rigorous combination of various computational modeling techniques covering multiple length scales. The expected result will be a solid-state battery with operational temperatures from 0 °C to 150 °C which provides the required energy density, discharge rate, and inherent safety to meet strict aerospace performance criteria.

solid state batteries↗

Solid-state Architecture Batteries for Enhanced Rechargeability and Safety for Electric Aircraft

All electric vertical take-off and landing vehicles (eVTOL) for urban air mobility (UAM) concepts face numerous challenging technical barriers before their introduction into the consumer marketplace. The most challenging of these technical barriers to overcome is developing an energy storage system capable of meeting the rigorous aerospace safety and performance criteria. The performance metrics for eVTOL craft are at least 2 times greater than those of electric automobiles. Furthermore, safety is essential for operation of commercial electric aerovehicles. Preliminary systems level analysis has indicated that there are five key properties which must be optimized for successful implementation of battery systems. Those five key criteria are: safety, energy density, power, packaging design and scalability. Current state-of-the-art (SOA) lithium-ion batteries meet or exceed the requirements for electric aviation in the areas of power and scalability, yet are insufficient in the key performance criteria of energy, safety and packaging design. The SABERS concept proposes a battery that meets all five key performance criteria through development of a solid-state architecture battery utilizing high energy density and power density sulfur-selenium cathode with a lithium metal anode. The combination of sulfur and selenium offers a balanced energy-to-power density ratio, which can be tailored to the specific application by altering the stoichiometric ratios of sulfur to selenium. This cathode will be developed by implementing NASA patented holey graphene technology as a highly conductive, ultra-lightweight electrode scaffold. A solid-state electrolyte will be used as a safe, non-flammable replacement to the highly flammable liquid organic electrolytes currently used in SOA lithium-ion batteries. This solid-state lithium-sulfur-selenium cell will be designed into a serial stacking configuration to enable dense packaging of the battery cells. The serial stacking configuration is termed a bipolar stack, which has the advantages of reducing overall cell weight, reducing the amount of interfaced connections for the cell, and minimizing the cooling requirements for the cell. Lastly, optimization of battery components will occur through a robust and rigorous combination of various computational modeling techniques covering multiple length scales. The expected result will be a fully solid-state battery with operational temperatures from 0 °C to 150 °C which provides the required energy density, discharge rates, and inherent safety to meet the strict aerospace performance criteria. This presentation will show initial results that demonstrate the SABERS Team has developed a composite carbon-sulfur cathode which exceeds 1100 Wh/kg at a discharge rate of 0.4C, and 804 Wh/kg at a discharge rate of 1C. Additionally, this presentation will show the SABERS Team multiscale computational modeling approach and has produced a novel particle dynamics method called Solid Electrolyte Sphere Approximation Model (SESAM). SESAM is on the 1-10 µm scale and provides electromechanical and grain interactions for predictive design guidelines for the experimental team to follow.

Urban Air Mobility (UAM) Vehicles↗

Computational Modeling Development of Solid-state Architecture Batteries for Enhanced Rechargeability and Safety for Electric Aircraft

All electric vertical take-off and landing vehicles (eVTOL) for urban air mobility (UAM) concepts face numerous challenging technical barriers before their introduction into the consumer marketplace. The most challenging of these technical barriers to overcome is developing an energy storage system capable of meeting the rigorous aerospace safety and performance criteria. The performance metrics for eVTOL craft are at least 2 times greater than those of electric automobiles. Furthermore, safety is essential for operation of commercial electric aerovehicles. Preliminary systems level analysis has indicated that there are five key properties which must be optimized for successful implementation of battery systems. Those five key criteria are: safety, energy density, power, packaging design and scalability. Current state-of-the-art (SOA) lithium-ion batteries meet or exceed the requirements for electric aviation in the areas of power and scalability, yet are insufficient in the key performance criteria of energy, safety and packaging design. The SABERS concept proposes a battery that meets all five key performance criteria through development of a solid-state architecture battery utilizing high energy density and power density sulfur-selenium cathode with a lithium metal anode. The combination of sulfur and selenium offers a balanced energy-to-power density ratio, which can be tailored to the specific application by altering the stoichiometric ratios of sulfur to selenium. This cathode will be developed by implementing NASA patented holey graphene technology as a highly conductive, ultra-lightweight electrode scaffold. A solid-state electrolyte will be used as a safe, non-flammable replacement to the highly flammable liquid organic electrolytes currently used in SOA lithium-ion batteries. This solid-state lithium-sulfur-selenium cell will be designed into a serial stacking configuration to enable dense packaging of the battery cells. The serial stacking configuration is termed a bipolar stack, which has the advantages of reducing overall cell weight, reducing the amount of interfaced connections for the cell, and minimizing the cooling requirements for the cell. Lastly, optimization of battery components will occur through a robust and rigorous combination of various computational modeling techniques covering multiple length scales. The expected result will be a fully solid-state battery with operational temperatures from 0 °C to 150 °C which provides the required energy density, discharge rates, and inherent safety to meet the strict aerospace performance criteria. This presentation will show initial results that demonstrate the SABERS Team has developed a composite carbon-sulfur cathode which exceeds 1100 Wh/kg at a discharge rate of 0.4C, and 804 Wh/kg at a discharge rate of 1C. Additionally, this presentation will show the SABERS Team multiscale computational modeling approach and has produced a novel particle dynamics method called Solid Electrolyte Sphere Approximation Model (SESAM). SESAM is on the 1-10 µm scale and provides electromechanical and grain interactions for predictive design guidelines for the experimental team to follow.

Urban Air Mobility (UAM) Vehicles↗

Concept of Operations for an In-time Aviation Safety Management System (IASMS) for Upper E Airspace

The National Airspace System undergoes continuous change including in the Upper Class E airspace involving increasingly complex operations and a widening diversity of vehicles. To secure a safe future system, the National Academies recommended an In-time Aviation Safety Management System (IASMS) that is extensible to Upper E. Current Air Traffic Management is not cost-effective to scale for future Upper E operations and diversity of vehicles so the Federal Aviation Administration developed an Upper E Traffic Management ConOps to safely integrate the diverse operations and vehicles having different performance characteristics and flight missions without disrupting current operations including space launch and reentry, suborbital flights, supersonic and hypersonic flights, slow moving or stationary unmanned balloons, and long endurance fixed wing vehicles that are slow, stationary, or high speed. IASMS integrates state-of-the-art predictive modeling with reactive and proactive analytics to detect hazards and mitigate risk precursors for Upper E operators. IASMS identifies emergent safety risks exposed by transformation of the NAS with new and increasingly complex operations. Safety intelligence will also expand the data available and offer insight to new approaches for implementing safety improvements to mitigate risk with more seamless “in-time” integration across the policy, risk management, safety assurance, and promotion pillars of SMS.

K Ellis↗

Human Factors Research Needs for In-Time Aviation Safety Management Systems (IASMS) Design: Enabling the NASA “Sky for All” Future Airspace Vision

Integrated safety management will be paramount for safely enabling the envisioned transformations of the future National Airspace System. Addressing the increasing need for advanced data analytics and fusion of aviation safety data, managed by human decision-makers, is essential for realizing the vision. The proposal, if accepted, will discuss safety management system challenges and how the concept of In-time Aviation Safety Management Systems addresses the need. It will also discuss human factors challenges involved in future integrated safety management, including trust, over-reliance, human-optimized data visualization, human-autonomy teaming, training, communication and dissemination of data, situation awareness, task load, and accountability.

Lawrence J Prinzel III↗

Ensuring Safety of Government Personnel During Suborbital Spaceflight

The NASA Suborbital Crew (SubC) project is focused on enabling flights by NASA civil servants, such as scientists and engineers conducting research, on suborbital vehicles. A broader goal is ensuring that commercial human spaceflight is both viable and safe. Within the Commercial Crew Program (CCP), the SubC project is exploring game-changing methods to perform safety assessments to enable NASA personnel to fly on suborbital missions. Commercial suborbital space flight capabilities are anticipated to be more accessible, affordable, and available than missions to the International Space Station and could provide additional opportunities for testing and qualification of space flight hardware, human-tended microgravity research, and further cutting-edge research enabled by the space environment. Although NASA currently permits human tended suborbital payloads for non-civil servants under auspices of NASA’s Flight Opportunities Program, the SubC effort will enable civil servant scientists, researchers, and even engineers to accompany their experiments and tests into the space microgravity environment. Figure 1 illustrates how the SubC program complements other microgravity experimental platforms. The targeted scope for SubC includes end-to-end suborbital capabilities reaching ~80km with several minutes of sustained microgravity (Table 1). The NASA SubC project office is working with the Federal Aviation Administration’s Office of Commercial Space Transportation (FAA-AST) and the commercial suborbital space transportation industry to develop an efficient and holistic approach to a safety review and eventual government participation in suborbital flight. The current FAA certification process for suborbital launches is congressionally mandated to only consider public safety. NASA is responsible for understanding the risks to its employees should they fly on a commercially available suborbital flight. The SubC project is employing a Safety Case approach, applied to commercial suborbital providers, which is not a traditional certification process as was used for the SpaceX Dragon and Boeing Starliner vehicles. Rather, it is an assessment using elements of NASA’s Risk-Informed Safety Case and the Armstrong Flight Research Center’s Airworthiness Assessment process.

Elizabeth C Blome↗

An In-Time Aviation Safety Management System (IASMS) Concept of Operations for Part 139 Airports

Today’s airports are complex multi-faceted ecosystems. Currently, of the 517certificatedairports, 270arerequired to use safety management systems (SMSs) to identify and mitigate known hazards and emergent risks and to voluntarily share safety data with commercial operators and tenants. Airports manage a wide variety of hazards. These traffic hubs have direct responsibilities, such as removing foreign object debris from runways and taxiways and configuring runways to help prevent against incursions and tail strikes during takeoff. To ensure safety in the future NAS, the National Academies recommended an In-time Aviation Safety Management System (IASMS). An IASMS will employ services, functions, and capabilities (SFCs) to identify and mitigate hazards that are proactively and predictively managed based on data analytics of detected anomalies, precursors, and trends. SFCs would scale with airport complexity and environmental conditions using increasingly automated systems to respond proactively to hazards and, by using integrated data sources and predictive safety analytical methods, discover new, never before seen risks.

Ellis, K↗

Collaborative Approaches in Developing Environmental and Safety Management Systems for Commercial Space Transportation

The Federal Aviation Administration (FAA), Office of Commercial Space Transportation (AST) licenses and permits U.S. commercial space launch and reentry activities, and licenses the operation of non-federal launch and reentry sites. ASTs mission is to ensure the protection of the public, property, and the national security and foreign policy interests of the United States during commercial space transportation activities and to encourage, facilitate, and promote U.S. commercial space transportation. AST faces unique challenges of ensuring the protection of public health and safety while facilitating and promoting U.S. commercial space transportation. AST has developed an Environmental Management System (EMS) and a Safety Management System (SMS) to help meet its mission. Although the EMS and SMS were developed independently, the systems share similar elements. Both systems follow a Plan-Do-Act-Check model in identifying potential environmental aspects or public safety hazards, assessing significance in terms of severity and likelihood of occurrence, developing approaches to reduce risk, and verifying that the risk is reduced. This paper will describe the similarities between ASTs EMS and SMS elements and how AST is building a collaborative approach in environmental and safety management to reduce impacts to the environment and risks to the public.

Federal Aviation Administration (FAA)↗

Developing Probabilistic Safety Performance Margins for Unknown and Underappreciated Risks

Probabilistic safety requirements currently formulated or proposed for space systems, nuclear reactor systems, nuclear weapon systems, and other types of systems that have a low-probability potential for high-consequence accidents depend on showing that the probability of such accidents is below a specified safety threshold or goal. Verification of compliance depends heavily upon synthetic modeling techniques such as PRA. To determine whether or not a system meets its probabilistic requirements, it is necessary to consider whether there are significant risks that are not fully considered in the PRA either because they are not known at the time or because their importance is not fully understood. The ultimate objective is to establish a reasonable margin to account for the difference between known risks and actual risks in attempting to validate compliance with a probabilistic safety threshold or goal. In this paper, we examine data accumulated over the past 60 years from the space program, from nuclear reactor experience, from aircraft systems, and from human reliability experience to formulate guidelines for estimating probabilistic margins to account for risks that are initially unknown or underappreciated. The formulation includes a review of the safety literature to identify the principal causes of such risks.

Safety Performance Margin↗

CloudSat Safety Operations at Vandenberg AFB

CloudSat safety operations at Vendenberg AFB is given. The topics include: 1) CloudSat Project Overview; 2) Vandenberg Ground Operations; 3) Delta II Launch Vehicle; 4) The A-Train; 5) System Safety Management; 6) CALIPSO Hazards Assessment; 7) CALIPSO Supplemental Safeguards; 8) Joint System Safety Operations; 9) Extended Stand-down; 10) Launch Delay Safety Concerns; and 11) Lessons Learned.

CloudSat↗

Development of Large-Scale Spacecraft Fire Safety Experiments

The status is presented of a spacecraft fire safety research project that is under development to reduce the uncertainty and risk in the design of spacecraft fire safety systems by testing at nearly full scale in low-gravity. Future crewed missions are expected to be more complex and longer in duration than previous exploration missions outside of low-earth orbit. This will increase the challenge of ensuring a fire-safe environment for the crew throughout the mission. Based on our fundamental uncertainty of the behavior of fires in low-gravity, the need for realistic scale testing at reduced gravity has been demonstrated. To address this gap in knowledge, a project has been established under the NASA Advanced Exploration Systems Program under the Human Exploration and Operations Mission directorate with the goal of substantially advancing our understanding of the spacecraft fire safety risk. Associated with the project is an international topical team of fire experts from other space agencies who conduct research that is integrated into the overall experiment design. The experiments are under development to be conducted in an Orbital Science Corporation Cygnus vehicle after it has undocked from the ISS. Although the experiment will need to meet rigorous safety requirements to ensure the carrier vehicle does not sustain damage, the absence of a crew removes the need for strict containment of combustion products. The tests will be fully automated with the data downlinked at the conclusion of the test before the Cygnus vehicle reenters the atmosphere. A computer modeling effort will complement the experimental effort. The international topical team is collaborating with the NASA team in the definition of the experiment requirements and performing supporting analysis, experimentation and technology development. The status of the overall experiment and the associated international technology development efforts are summarized.

Life Support↗