Search NASA⌕ Search

SEARCH · Search NASA

Results for “System Safety Assessment”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 343 records · Page 19

Case Studies in Crewed Spacecraft Environmental Control and Life Support System Process Compatibility and Cabin Environmental Impact

Contamination of a crewed spacecraft's cabin environment leading to environmental control and life support system (ECLSS) functional capability and operational margin degradation or loss can have an adverse effect on NASA's space exploration mission figures of merit-safety, mission success, effectiveness, and affordability. The role of evaluating the ECLSS's compatibility and cabin environmental impact as a key component of pass trace contaminant control is presented and the technical approach is described in the context of implementing NASA's safety and mission success objectives. Assessment examples are presented for a variety of chemicals used in vehicle systems and experiment hardware for the International Space Station program. The ECLSS compatibility and cabin environmental impact assessment approach, which can be applied to any crewed spacecraft development and operational effort, can provide guidance to crewed spacecraft system and payload developers relative to design criteria assigned ECLSS compatibility and cabin environmental impact ratings can be used by payload and system developers as criteria for ensuring adequate physical and operational containment. In additional to serving as an aid for guiding containment design, the assessments can guide flight rule and procedure development toward protecting the ECLSS as well as approaches for contamination event remediation.

Perry, J. L.↗

The application of integrated knowledge-based systems for the Biomedical Risk Assessment Intelligent Network (BRAIN)

One of NASA's goals for long duration space flight is to maintain acceptable levels of crew health, safety, and performance. One way of meeting this goal is through BRAIN, an integrated network of both human and computer elements. BRAIN will function as an advisor to mission managers by assessing the risk of inflight biomedical problems and recommending appropriate countermeasures. Described here is a joint effort among various NASA elements to develop BRAIN and the Infectious Disease Risk Assessment (IDRA) prototype. The implementation of this effort addresses the technological aspects of knowledge acquisition, integration of IDRA components, the use of expert systems to automate the biomedical prediction process, development of a user friendly interface, and integration of IDRA and ExerCISys systems. Because C language, CLIPS and the X-Window System are portable and easily integrated, they were chosen ss the tools for the initial IDRA prototype.

Loftin, Karin C.↗

Space Shuttle Program (SSP) Orbiter Main Propulsion System (MPS) Gaseous Hydrogen (GH2) Flow Control Valve (FCV) Poppet Eddy Current (EC) Inspection Probability of Detection (POD) Study

The Director of the NASA Engineering and Safety Center (NESC), requested an independent assessment of the anomalous gaseous hydrogen (GH2) flow incident on the Space Shuttle Program (SSP) Orbiter Vehicle (OV)-105 during the Space Transportation System (STS)-126 mission. The main propulsion system (MPS) engine #2 GH2 flow control valve (FCV) LV-57 transition from low towards high flow position without being commanded. Post-flight examination revealed that the FCV LV-57 poppet had experienced a fatigue failure that liberated a section of the poppet flange. The NESC assessment provided a peer review of the computational fluid dynamics (CFD), stress analysis, and impact testing. A probability of detection (POD) study was requested by the SSP Orbiter Project for the eddy current (EC) nondestructive evaluation (NDE) techniques that were developed to inspect the flight FCV poppets. This report contains the findings and recommendations from the NESC assessment.

Piascik, Robert S.↗

Airframe Design and Integration

The objectives of the project this viewgraph presentation summarizes include the following: (1) Decompose operational, safety, and cost requirements into a comprehensive and consistent set of design criteria for different structural and material concepts for Reusable Launch Vehicles (RLVs); (2) Develop compliance methods to ensure that different structural and material concepts are assessed at a consistent and adequate level of fidelity and safety; (3) Develop and assess weight reduction potential of integrated airframe concepts for RLVs, e.g., Thermal Protection System (TPS)/TPS Support/Cryogenic Tank System; (4) Compare performance and weight of various airframe structural and material concepts and structural arrangements and identify technology development needs; and (5) Develop high fidelity parametric models that include airframe structural interactions and major design drivers. The approaches taken to complete these objectives include the definition of vehicle requirements, airframe structural design requirements, load conditions, factors of safety, and integrated concepts.

Scotti, Stephen↗

Conceptual Launch Vehicle and Spacecraft Design for Risk Assessment

One of the most challenging aspects of developing human space launch and exploration systems is minimizing and mitigating the many potential risk factors to ensure the safest possible design while also meeting the required cost, weight, and performance criteria. In order to accomplish this, effective risk analyses and trade studies are needed to identify key risk drivers, dependencies, and sensitivities as the design evolves. The Engineering Risk Assessment (ERA) team at NASA Ames Research Center (ARC) develops advanced risk analysis approaches, models, and tools to provide such meaningful risk and reliability data throughout vehicle development. The goal of the project presented in this memorandum is to design a generic launch 7 vehicle and spacecraft architecture that can be used to develop and demonstrate these new risk analysis techniques without relying on other proprietary or sensitive vehicle designs. To accomplish this, initial spacecraft and launch vehicle (LV) designs were established using historical sizing relationships for a mission delivering four crewmembers and equipment to the International Space Station (ISS). Mass-estimating relationships (MERs) were used to size the crew capsule and launch vehicle, and a combination of optimization techniques and iterative design processes were employed to determine a possible two-stage-to-orbit (TSTO) launch trajectory into a 350-kilometer orbit. Primary subsystems were also designed for the crewed capsule architecture, based on a 24-hour on-orbit mission with a 7-day contingency. Safety analysis was also performed to identify major risks to crew survivability and assess the system's overall reliability. These procedures and analyses validate that the architecture's basic design and performance are reasonable to be used for risk trade studies. While the vehicle designs presented are not intended to represent a viable architecture, they will provide a valuable initial platform for developing and demonstrating innovative risk assessment capabilities.

Launch Vehicle↗

C-Band Airport Surface Communications System Standards Development. Phase II Final Report. Volume 1: Concepts of Use, Initial System Requirements, Architecture, and AeroMACS Design Considerations

This report is provided as part of ITT s NASA Glenn Research Center Aerospace Communication Systems Technical Support (ACSTS) contract NNC05CA85C, Task 7: New ATM Requirements-Future Communications, C-Band and L-Band Communications Standard Development and was based on direction provided by FAA project-level agreements for New ATM Requirements-Future Communications. Task 7 included two subtasks. Subtask 7-1 addressed C-band (5091- to 5150-MHz) airport surface data communications standards development, systems engineering, test bed and prototype development, and tests and demonstrations to establish operational capability for the Aeronautical Mobile Airport Communications System (AeroMACS). Subtask 7-2 focused on systems engineering and development support of the L-band digital aeronautical communications system (L-DACS). Subtask 7-1 consisted of two phases. Phase I included development of AeroMACS concepts of use, requirements, architecture, and initial high-level safety risk assessment. Phase II builds on Phase I results and is presented in two volumes. Volume I (this document) is devoted to concepts of use, system requirements, and architecture, including AeroMACS design considerations. Volume II describes an AeroMACS prototype evaluation and presents final AeroMACS recommendations. This report also describes airport categorization and channelization methodologies. The purposes of the airport categorization task were (1) to facilitate initial AeroMACS architecture designs and enable budgetary projections by creating a set of airport categories based on common airport characteristics and design objectives, and (2) to offer high-level guidance to potential AeroMACS technology and policy development sponsors and service providers. A channelization plan methodology was developed because a common global methodology is needed to assure seamless interoperability among diverse AeroMACS services potentially supplied by multiple service providers.

Hall, Edward↗

An Alternative Conceptual Model for the Spent Nuclear Fuel–Water Interaction in Deep Geologic Disposal Conditions

For the long-term safety assessment of direct disposal of spent nuclear fuel in deep geologic repositories, knowledge on the radionuclide release rate from the UO 2 matrix is essential. This work provides a conceptual model to explain the results of leaching experiments involving used nuclear fuel or simulant materials in confirmed reducing conditions. Key elements of this model are: direct effect of radiation from radiolytic species (including defects and excited states) in the solid and in the first water layers in contact with its surface; and excess H 2 may be produced due to processes occurring at the surface of the spent fuel and in confined water volumes, which may also play a role in keeping the spent fuel surface in a reduced state. The implication is that the fractional radionuclide release rate used in most long-term safety assessments (10 -7 year -1 ) is over estimated because it assumes that there is net UO 2 oxidation caused by radiolysis, in contrast with the alternative conceptual model presented here. Furthermore, conventional water radiolysis models and radiation chemical yields published in the literature are not directly applicable to a heterogeneous system such as the spent fuel–water interface. Suggestions are provided for future work to develop more reliable models for the long-term safety assessment of spent nuclear fuel disposal.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Analyzing Potential Failures and Effects in a Pilot-Scale Biomass Preprocessing Facility for Improved Reliability

This study demonstrates a failure identification methodology applied to a preprocessing facility generating conversion-ready feedstocks from biomass meeting conversion process critical quality attribute (CQA) specifications. Failure Modes and Effects Analysis (FMEA) was used as an industrially relevant risk analysis approach to evaluate a logging residue preprocessing system to prepare feedstock for pyrolysis conversion. Risk evaluations considered both system-level and operation unit-level assessments considering process efficiency, product quality, cost, sustainability, and safety. Key outputs included estimations of semi-quantitative risk scores for each failure, identification of the failure impacts, identification of failure causes associated with material attributes and process parameters, ranking success rates of failure detection methods, and speculation of potential mitigation strategies for decreasing failure risk scores. Results showed that deviations from moisture specifications had cascading consequences for other CQAs along with process safety implications. Failures linked to fixed carbon specifications carried the highest risk scores for product quality and process efficiency impacts. As increased throughput can be inversely related to meeting product quality specifications; achieving throughput and other material-based CQAs simultaneously will likely require system optimization or prioritization based on system economics. Ultimately, this work successfully demonstrates FMEA as a risk analysis approach for other bioenergy process systems.

09 BIOMASS FUELS↗

RANGERS: Methodology Report on Design and Performance Assessment of Engineered Barrier Systems in a Salt Repository for HLW/SNF

Salt formations are one of the potential host rocks for the final disposal of high-level radioactive waste (HLW) in deep geological repositories, both in Germany and the United States. The safe isolation of radioactive waste in these repositories relies on a multi-barrier system, combining engineered and natural barriers. The natural barrier is provided by the salt rock itself, known for its self-sealing properties and long-term stability. The engineered barrier, on the other hand, comprises sealing components strategically placed within the repository to enhance its containment capabilities. In both Germany and the United States, long-term safety assessments require demonstrating the integrity of the natural barrier for a period of up to 1 million years. Concurrently, the engineered barrier system (EBS) must maintain its structural and functional integrity until the long-term sealing, such as the granular salt backfill material, has re-consolidated to its final low porosity and permeability. Based on extensive expertise and experience with engineered barriers in salt formations, BGE TECHNOLOGY GmbH and Sandia National Laboratories have partnered to develop a robust methodology for the integrity and performance assessment of EBS in HLW repositories through the RANGERS project. This collaborative effort aims to establish a unified approach to geotechnical engineering, repository design, integrity and performance evaluation of EBS in salt repositories.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

The Application of Integrated Knowledge-based Systems for the Biomedical Risk Assessment Intelligent Network (BRAIN)

One of NASA's goals for long duration space flight is to maintain acceptable levels of crew health, safety, and performance. One way of meeting this goal is through the Biomedical Risk Assessment Intelligent Network (BRAIN), an integrated network of both human and computer elements. The BRAIN will function as an advisor to flight surgeons by assessing the risk of in-flight biomedical problems and recommending appropriate countermeasures. This paper describes the joint effort among various NASA elements to develop BRAIN and an Infectious Disease Risk Assessment (IDRA) prototype. The implementation of this effort addresses the technological aspects of the following: (1) knowledge acquisition; (2) integration of IDRA components; (3) use of expert systems to automate the biomedical prediction process; (4) development of a user-friendly interface; and (5) integration of the IDRA prototype and Exercise Countermeasures Intelligent System (ExerCISys). Because the C Language, CLIPS (the C Language Integrated Production System), and the X-Window System were portable and easily integrated, they were chosen as the tools for the initial IDRA prototype. The feasibility was tested by developing an IDRA prototype that predicts the individual risk of influenza. The application of knowledge-based systems to risk assessment is of great market value to the medical technology industry.

Loftin, Karin C.↗

Spinoff 2009

Topics covered include: Image-Capture Devices Extend Medicine's Reach; Medical Devices Assess, Treat Balance Disorders; NASA Bioreactors Advance Disease Treatments; Robotics Algorithms Provide Nutritional Guidelines; "Anti-Gravity" Treadmills Speed Rehabilitation; Crew Management Processes Revitalize Patient Care; Hubble Systems Optimize Hospital Schedules; Web-based Programs Assess Cognitive Fitness; Electrolyte Concentrates Treat Dehydration; Tools Lighten Designs, Maintain Structural Integrity; Insulating Foams Save Money, Increase Safety; Polyimide Resins Resist Extreme Temperatures; Sensors Locate Radio Interference; Surface Operations Systems Improve Airport Efficiency; Nontoxic Resins Advance Aerospace Manufacturing; Sensors Provide Early Warning of Biological Threats; Robot Saves Soldier's Lives Overseas (MarcBot); Apollo-Era Life Raft Saves Hundreds of Sailors; Circuits Enhance Scientific Instruments and Safety Devices; Tough Textiles Protect Payloads and Public Safety Officers; Forecasting Tools Point to Fishing Hotspots; Air Purifiers Eliminate Pathogens, Preserve Food; Fabrics Protect Sensitive Skin from UV Rays; Phase Change Fabrics Control Temperature; Tiny Devices Project Sharp, Colorful Images; Star-Mapping Tools Enable Tracking of Endangered Animals; Nanofiber Filters Eliminate Contaminants; Modeling Innovations Advance Wind Energy Industry; Thermal Insulation Strips Conserve Energy; Satellite Respondent Buoys Identify Ocean Debris; Mobile Instruments Measure Atmospheric Pollutants; Cloud Imagers Offer New Details on Earth's Health; Antennas Lower Cost of Satellite Access; Feature Detection Systems Enhance Satellite Imagery; Chlorophyll Meters Aid Plant Nutrient Management; Telemetry Boards Interpret Rocket, Airplane Engine Data; Programs Automate Complex Operations Monitoring; Software Tools Streamline Project Management; Modeling Languages Refine Vehicle Design; Radio Relays Improve Wireless Products; Advanced Sensors Boost Optical Communication, Imaging; Tensile Fabrics Enhance Architecture Around the World; Robust Light Filters Support Powerful Imaging Devices; Thermoelectric Devices Cool, Power Electronics; Innovative Tools Advance Revolutionary Weld Technique; Methods Reduce Cost, Enhance Quality of Nanotubes; Gauging Systems Monitor Cryogenic Liquids; Voltage Sensors Monitor Harmful Static; and Compact Instruments Measure Heat Potential.

Source record↗

Scenario-Based Task Design for Airline Pilot Anticipatory Behaviors: Asynchronous Assessment of Complex Cognitive Skills

Airline pilots must anticipate potential threats to passenger safety and efficient flight. Such anticipation needs to occur at both the system and individual levels, yet no formal training for these anticipatory behaviors currently exists. The emerging field of resilience engineering provides a framework to explore this problem. Given the complex nature of this problem, the assessment portion of the project constituted a challenge. Simulator time is expensive as simulators are costly to run, and they are extremely limited in number. Also, by the nature of their work, pilots as a group are hard to connect with in person; thus, asynchronous methods were adopted. Further, to ensure that authentic pilot behaviors were observed, task-based scenarios were used rather than focus group or interview protocols. This session explores the design of asynchronous learning and a measure for assessing pilot anticipatory behaviors outside of a simulator to help design learning opportunities for pilots. The scenario-based and active assessment items will be discussed in detail, and demonstrations of these items will be shared. These items constitute the bulk of the challenge for this work. At the time of this writing, data is being collected to assess the effectiveness of the interactive training module and validate the measures. This data will be analyzed and presented as part of the session. This will include any linkages between the scenario-based and traditional assessment items.

task design↗

Hydropower Geotechnical Foundations: Current Practice and Innovation Opportunities for Low-Head Applications

Hydropower is a renewable energy resource that produces electricity from flowing water under pressure. Engineered hydropower structures, such as dams, are used to create a hydraulic head, enabling a turbinegenerator unit to convert pressurized flow into electricity. While hydropower has been a source of renewable energy since antiquity, new development in the United States has slowed in recent decades. Based on recent resource assessments, the largest opportunity to expand hydropower in the United States is from new stream-reach development (i.e., new hydropower development along stream-reaches that do not currently have hydroelectric facilities or other forms of infrastructure, such as dams). Roughly 75% of identified new stream-reach development potential is from low-head sites (less than 30 ft of head), which typically suffer from smaller power densities and higher normalized costs, given economies of scale. Hydropower developers and other stakeholders are thus interested in strategies to reduce initial capital costs while practicing sustainable development to maximize environmental compatibility with minimal disruption to natural aquatic life, sediment, and water flows. Historically, civil works have represented a significant cost driver for new hydropower development, with the foundation system representing a major cost component and source of uncertainty. The foundation system is the collection of engineered structural features (e.g. cutoff trenches, walls, grouting, anchors) constructed at or below the preconstruction ground surface that interfaces between the overlying structures (superstructures) and the bed material below (subsurface). Development of a hydropower foundation system must consider the various characteristics of the surrounding stream environment and subsurface while adhering to the engineering requirements of the superstructure that it supports. The care of water, excavation, and other construction activities are important features of foundation design and construction. The design and construction cost of the foundation system is largely dependent on the site geology and riverbed composition and is influenced by the level of geotechnical assessment required and conducted. Thus, a hydropower facility’s geotechnical foundation is often highly site-specific, with proper site selection and assessment being important to project success. The foundation system is designed to provide structural stability (of the foundation and dam), limit seepage, ensure public safety, and maintain functionality for the project life, during both construction and facility operations. Inadequate foundation or dam design can result in dam failure and the uncontrolled release of significant volumes of water, which could cause a high number of casualties and extensive property damage downstream of the failure. According to the Association of State Dam Safety Officials, approximately 30% of all historical dam failures in the United States are attributed to foundation or abutment defects, and another 20% are attributed to piping or seepage through the embankment, foundation, or abutment. To ameliorate these safety considerations, foundations often require massive amounts of construction material (e.g., grout, concrete, engineered dam fill) and long construction times. Foundation design also requires significant analysis prior to construction because the initial in-stream and abutment subsurface conditions are site-specific, and sufficient data for them often are lacking. Current practice requires on-site assessment, using expensive drilling and invasive and non-invasive investigation methods, to determine the expected cost of foundation material and treatment. Additionally, foundation construction often requires site dewatering (and other care of water activities), which involves constructing temporary diversion structures upstream and often downstream, called cofferdams, and water diversion systems that route water around the construction site. Cofferdams and water diversion systems can drastically increase construction costs and contribute to environmental disruption, including modification of flow patterns and benthic habitats. Given the technical, economic, and environmental challenges associated with hydropower foundations, opportunities exist to improve the current state of practice and to develop new and innovative solutions to Hydropower is a renewable energy resource that produces electricity from flowing water under pressure. Engineered hydropower structures, such as dams, are used to create a hydraulic head, enabling a turbinegenerator unit to convert pressurized flow into electricity. While hydropower has been a source of renewable energy since antiquity, new development in the United States has slowed in recent decades. Based on recent resource assessments, the largest opportunity to expand hydropower in the United States is from new stream-reach development (i.e., new hydropower development along stream-reaches that do not currently have hydroelectric facilities or other forms of infrastructure, such as dams). Roughly 75% of identified new stream-reach development potential is from low-head sites (less than 30 ft of head), which typically suffer from smaller power densities and higher normalized costs, given economies of scale. Hydropower developers and other stakeholders are thus interested in strategies to reduce initial capital costs while practicing sustainable development to maximize environmental compatibility with minimal disruption to natural aquatic life, sediment, and water flows. Historically, civil works have represented a significant cost driver for new hydropower development, with the foundation system representing a major cost component and source of uncertainty. The foundation system is the collection of engineered structural features (e.g. cutoff trenches, walls, grouting, anchors) constructed at or below the preconstruction ground surface that interfaces between the overlying structures (superstructures) and the bed material below (subsurface). Development of a hydropower foundation system must consider the various characteristics of the surrounding stream environment and subsurface while adhering to the engineering requirements of the superstructure that it supports. The care of water, excavation, and other construction activities are important features of foundation design and construction. The design and construction cost of the foundation system is largely dependent on the site geology and riverbed composition and is influenced by the level of geotechnical assessment required and conducted. Thus, a hydropower facility’s geotechnical foundation is often highly site-specific, with proper site selection and assessment being important to project success. The foundation system is designed to provide structural stability (of the foundation and dam), limit seepage, ensure public safety, and maintain functionality for the project life, during both construction and facility operations. Inadequate foundation or dam design can result in dam failure and the uncontrolled release of significant volumes of water, which could cause a high number of casualties and extensive property damage downstream of the failure. According to the Association of State Dam Safety Officials, approximately 30% of all historical dam failures in the United States are attributed to foundation or abutment defects, and another 20% are attributed to piping or seepage through the embankment, foundation, or abutment. To ameliorate these safety considerations, foundations often require massive amounts of construction material (e.g., grout, concrete, engineered dam fill) and long construction times. Foundation design also requires significant analysis prior to construction because the initial in-stream and abutment subsurface conditions are site-specific, and sufficient data for them often are lacking. Current practice requires on-site assessment, using expensive drilling and invasive and non-invasive investigation methods, to determine the expected cost of foundation material and treatment. Additionally, foundation construction often requires site dewatering (and other care of water activities), which involves constructing temporary diversion structures upstream and often downstream, called cofferdams, and water diversion systems that route water around the construction site. Cofferdams and water diversion systems can drastically increase construction costs and contribute to environmental disruption, including modification of flow patterns and benthic habitats. Given the technical, economic, and environmental challenges associated with hydropower foundations, opportunities exist to improve the current state of practice and to develop new and innovative solutions to challenges frequently encountered with traditional approaches. With this understanding, it is critically important to understand and document the current state of practice for hydropower geotechnical foundations, identify key challenges, and define opportunities for innovative solutions. To this end, this report documents the current state of practice across the three main phases of geotechnical foundation development: (1) geotechnical site assessment, (2) design, and (3) construction for hydropower systems. It also describes the major challenges with conventional approaches and identifies opportunities for innovation to reduce hydropower foundations costs, timelines, and risks. Key takeaways from this report include the following: Approximately 80% of available low-head sites are expected to have foundations on soil beds rather than rock beds, suggesting that rockfill and earthfill dams may be the most cost-effective conventional dam type for new projects.; Geotechnical and geologic investigation activities are time-consuming and expensive but are essential to define the parameters and criteria needed for foundation design.; Certain riverbed soil and bedrock types present significant technical challenges or require expensive foundation construction, which can prove financially prohibitive for low-head project development.; Modular hydropower design and prefabricated modular foundations represent a promising but unproven paradigm for new hydropower development. Design and construction approaches using optimized and highly repeatable, reliable components would benefit project cost, time, and risk but require additional research and development.; Temporary construction features for foundations, including cofferdams, water diversion, and water control systems, can prove costly and have inherent construction risk.; For economically viable development, hydropower geotechnical foundations should be limited to 4 to 15% of the project’s total initial capital costs. Many proposed projects have experienced cost overruns attributable to foundation difficulties or surprises during construction. These overruns may have been due to inadequate investigations, lack of adequate engineering effort to tailor the structures to site geology and topography, and/or contractual terms, among other considerations.; Challenges for hydropower foundations and opportunities for innovative technology solutions are identified in the following areas (consistent with the three main phases of foundation development): Geotechnical site assessment, Foundation design and materials, Construction methods and technology. Ultimately, this report aims to provide information about geotechnical foundations for low-head hydropower and to motivate transformative technologies to support hydropower growth.

13 HYDRO ENERGY↗

Portable Wireless LAN Device and Two-Way Radio Threat Assessment for Aircraft VHF Communication Radio Band

This document summarizes the safety analysis performed on a Flight Guidance System (FGS) requirements model. In particular, the safety properties desired of the FGS model are identified and the presence of the safety properties in the model is formally verified. Chapter 1 provides an introduction to the entire project, while Chapter 2 gives a brief overview of the problem domain, the nature of accidents, model based development, and the four-variable model. Chapter 3 outlines the approach. Chapter 4 presents the results of the traditional safety analysis techniques and illustrates how the hazardous conditions associated with the system trace into specific safety properties. Chapter 5 presents the results of the formal methods analysis technique model checking that was used to verify the presence of the safety properties in the requirements model. Finally, Chapter 6 summarizes the main conclusions of the study, first and foremost that model checking is a very effective verification technique to use on discrete models with reasonable state spaces. Additional supporting details are provided in the appendices.

Nguyen, Truong X.↗

Psychophysiological Research Methods to Assess Airline Flight Crew Resilient Performance in High-Fidelity Flight Simulation Scenarios

New concepts in aviation system safety thinking have emerged to consider not only what may go wrong, but also what can be learned when things go right. This approach forms a more comprehensive approach to system safety thinking. A need exists for methods to enable a better understanding of human contributions to aviation safety and how they may inform Safety Management Systems (SMS). A high-fidelity 737-800 simulation study was conducted to study how current type-rated commercial airline flight crews anticipate, monitor, respond to, and learn from expected and unexpected disturbances during line operations. A number of dependent measures were collected that included traditional SMS data types, but also non-traditional safety data to include multiple psychophysiological metrics. This paper describes the psychophysiological measures results that evinced the capability of measures to help identify resilient flight crews. Implications for future research and design of future In-time Aviation Safety Management Systems are discussed.

Psychophysiology↗

Psychophysiological Research Methods to Assess Airline Flight Crew Resilient Performance in High-Fidelity Flight Simulation Scenarios

New concepts in aviation system safety thinking have emerged to consider not only what may go wrong, but also what can be learned when things go right. This approach forms a more comprehensive approach to system safety thinking. A need exists for methods to enable a better understanding of human contributions to aviation safety and how they may inform Safety Management Systems (SMS). A high-fidelity 737-800 simulation study was conducted to study how current type-rated commercial airline flight crews anticipate, monitor, respond to, and learn from expected and unexpected disturbances during line operations. A number of dependent measures were collected that included traditional SMS data types, but also non-traditional safety data to include multiple psychophysiological metrics. This paper describes the psychophysiological measures results that evinced the capability of measures to help identify resilient flight crews. Implications for future research and design of future In-time Aviation Safety Management Systems are discussed.

Psychophysiology↗

[MaRS Project]

The Space Exploration Division of the Safety and Mission Assurances Directorate is responsible for reducing the risk to Human Space Flight Programs by providing system safety, reliability, and risk analysis. The Risk & Reliability Analysis branch plays a part in this by utilizing Probabilistic Risk Assessment (PRA) and Reliability and Maintainability (R&M) tools to identify possible types of failure and effective solutions. A continuous effort of this branch is MaRS, or Mass and Reliability System, a tool that was the focus of this internship. Future long duration space missions will have to find a balance between the mass and reliability of their spare parts. They will be unable take spares of everything and will have to determine what is most likely to require maintenance and spares. Currently there is no database that combines mass and reliability data of low level space-grade components. MaRS aims to be the first database to do this. The data in MaRS will be based on the hardware flown on the International Space Stations (ISS). The components on the ISS have a long history and are well documented, making them the perfect source. Currently, MaRS is a functioning excel workbook database; the backend is complete and only requires optimization. MaRS has been populated with all the assemblies and their components that are used on the ISS; the failures of these components are updated regularly. This project was a continuation on the efforts of previous intern groups. Once complete, R&M engineers working on future space flight missions will be able to quickly access failure and mass data on assemblies and components, allowing them to make important decisions and tradeoffs.

Aruljothi, Arunvenkatesh↗

Terrain Safety Assessment in Support of the Mars Science Laboratory Mission

In August 2012, the Mars Science Laboratory (MSL) mission will pioneer the next generation of robotic Entry, Descent, and Landing (EDL) systems by delivering the largest and most capable rover to date to the surface of Mars. The process to select the MSL landing site took over five years and began with over 50 initial candidate sites from which four finalist sites were chosen. The four finalist sites were examined in detail to assess overall science merit, EDL safety, and rover traversability on the surface. Ultimately, the engineering assessments demonstrated a high level of safety and robustness at all four finalist sites and differences in the assessment across those sites were small enough that neither EDL safety nor rover traversability considerations could significantly discriminate among the final four sites. Thus the MSL landing site at Gale Crater was selected from among the four finalists primarily on the basis of science considerations.

Kipp, Devin↗