Search NASA⌕ Search

SEARCH · Search NASA

Results for “fail operational”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 343 records · Page 19

Hard and Soft Safety Verifications

The purpose of this paper is to examine the differences between and the effects of hard and soft safety verifications. Initially, the terminology should be defined and clarified. A hard safety verification is datum which demonstrates how a safety control is enacted. An example of this is relief valve testing. A soft safety verification is something which is usually described as nice to have but it is not necessary to prove safe operation. An example of a soft verification is the loss of the Solid Rocket Booster (SRB) casings from Shuttle flight, STS-4. When the main parachutes failed, the casings impacted the water and sank. In the nose cap of the SRBs, video cameras recorded the release of the parachutes to determine safe operation and to provide information for potential anomaly resolution. Generally, examination of the casings and nozzles contributed to understanding of the newly developed boosters and their operation. Safety verification of SRB operation was demonstrated by examination for erosion or wear of the casings and nozzle. Loss of the SRBs and associated data did not delay the launch of the next Shuttle flight.

Wetherholt, Jon↗

Odyssey Mars Orbiter - Thirteen Years of On-Orbit Navigation

The Odyssey spacecraft has been in Mars orbit since October 24, 2001 and has nearly completed 61,490 orbits. Navigation operational objectives include the following: Control the local mean solar time for science observations; for most of the mission, this varied from 3:45 pm to 5:20 pm. Currently, an orbit trim maneuver planned for November 10, 2015 will place Odyssey at 6:45 pm/6:45 am at equator crossings in order to observe early morning ground frost, fog and clouds. Initially, Odyssey was late by 42 minutes for an over-flight of the critical seven minutes of Phoenix's entry, descent and landing (EDL). Odyssey was successfully positioned for this over-flight using the Delta V from angular momentum desaturations (AMD). Similar results for the Mars Science Laboratory's EDL and Comet Siding Spring's minimum risk location will be presented. Odyssey has and continues to relay significant quantities of rover data. Navigation successfully models frequent AMD Delta Vs in order to generate accurate sixty-day trajectory predictions; a typical timing error is 25 seconds after 60 days. However, unexpected events, such as safe-mode entries with their larger and more frequent thrusting, severely impact that trajectory accuracy. Impacted trajectories can have timing errors ranging from a few minutes to ten-to-fifteen minutes after sixty-days. Other analyses (briefly stated) include: a) the offset of the orbital ground track pattern after an initial cycle of 30 days or 362 orbits and b) an operations environment of continuous thrusting if/when one of the three remaining reaction wheels fails.

trajectory accuracy↗

Uncertainty Quantification for JPL Retrievals

We define the notions of verification, validation, and uncertainty quantification (VVUQ), and place them in the context of retrievals of Earth science data. Uncertainty quantification (UQ) is the process of characterizing the uncertainty of a measurement system relative to the true, physical quantity it measures. UQ is needed when measurements are used for scientific inference, assimilated into models with other data, and used for decision-making and risk analysis. Many measurements come with measures of standard error and bias, but these uncertainty measures are often inaccurate, due to the operational need to assume crisp values for parameters which are in fact uncertain, as well as the failure of technical assumptions needed by operational error-estimation approaches. UQ provides a way to study which assumptions fail to hold, and a tool to improve the measurement. We describe a particular, broadly-applicable UQ setup that has been successful for JPL retrievals including OCO-2, and provide recommendations for furthering the UQ state of the practice at JPL.

Turmon, Michael↗

AGR-5/6/7 Irradiation Test Final As-run Report

This document presents the as-run analysis of the Advanced Gas Reactor (AGR)-5/6/7 irradiation experiment. AGR-5/6/7 is the last of a series of experiments conducted in the Advanced Test Reactor (ATR) at Idaho National Laboratory in support of the development and qualification of tri-structural isotropic low-enriched fuel for use in high-temperature gas-cooled reactors. The test train contained five separate capsules that were independently controlled and monitored. Each capsule contained multiple 24.91-mm-long and 12.25-mm-dimeter compacts filled with low-enriched uranium carbide/oxide tri-structural isotropic fuel particles. The objectives of the AGR-5/6/7 experiment were to: • Irradiate reference-design fuel particles to support fuel qualification. • Establish operating margins for the fuel, beyond normal operating conditions. • Provide irradiated-fuel performance data and irradiated-fuel samples for post-irradiation examination and safety testing. The primary objective of the AGR-5/6 test (Capsules 1, 2, 4, and 5) was to verify the successful performance of the reference-design fuel under normal operating conditions. The AGR-7 test (Capsule 3) was designed to explore fuel performance at higher temperatures. Its primary objective was to demonstrate the capability of the fuel to withstand conditions beyond normal operating conditions, in support of plant design and licensing. AGR-5/6/7 will also provide irradiated-fuel performance data based on the fission gas release from particles during irradiation. To achieve the test objectives, the AGR-5/6/7 experiment was irradiated in the northeast flux trap of the ATR with a planned duration of 500 effective full-power days. The northeast flux trap was selected because its larger diameter provided greater flexibility for test-train design compared to the Large B positions used for the AGR-1 and AGR-2 irradiations, significantly enhancing test capabilities for the combined irradiation campaigns. Due to delays in the ATR schedule, the AGR-5/6/7 irradiation was significantly shorter than the originally planned 13-cycle schedule. Irradiation began on February 16, 2018 and ended on July 22, 2020, spanning nine ATR cycles (162B–168A) over two and a half years. Thus, the AGR-5/6/7 fuel compacts were irradiated for a total of approximately 360.9 effective full-power days. Final burnup values, on a per-compact basis, ranged from 5.66 to 15.26% fissions per initial heavy metal atom, while fast fluence values ranged from 1.62 to 5.55 × 1025 n/m2 (E >0.18 MeV). Time-averaged volume-averaged fuel temperatures on a capsule basis at the end of irradiation ranged from 756°C in Capsule 5 to 1313°C in Capsule 3 excluding days with significantly lower temperature during the two short powered axial locator mechanism cycles, 163A and 167A. By the end of irradiation, 48 out of 54 installed thermocouples had failed (the bottom three capsules lost all thermocouples). During the first five cycles (162B – 165A), the fission-gas isotope release-rate-to-birthrate (R/B) ratios were stable in the 10-8–10-6 range, and no in-pile particle failures were observed based on the gross gamma counts. During this time, the high exposed kernel fraction and high fuel particle temperatures in Capsule 1 led to a maximum R/B value of around 2 ? 10-6 for Kr-85m. The fission gas release in all capsules started to increase from the second half of Cycle 166A, when a large number of in-pile particle failures occurred in Capsule 1 and a gas line problem in this capsule caused fission gas leakage at various degrees into the other four capsules. This gas line problem also prevented a fission gas release measurement for Capsule 1 during the last three cycles due to gas flow isolation. By the end of irradiation, it is estimated that approximately 15 particles failed in Capsule 3, which was considered possible because the experiment was designed to operate beyond the high-temperature gas-cooled reactor normal operating temperature range. A few hundred in-pile particle failures were estimated for Capsule 1 by the end of Cycle 166A, but the total number of failures is unknown due to the lack of fission gas release data in the later cycles. Additionally, four potential in-pile failures were identified for Capsule 2 during the last cycle, Cycle 168A. In contrast, no in-pile failures were identified in the top two capsules (4 and 5) based on the absence of the typical spikes in gross gamma counts and low failure estimates using the AGR-3/4 R/B per exposed kernel model.

11 - NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

A Comparison of Novel Woodstove Catalytic Combustors to Improve Low Temperature Light off and Catalyst Stability at High Temperatures and Corrosive Environments, Including Stability of Catalytic Combustors used in Coastal Environments

Wood heaters with catalytic combustors often emit higher levels of particulate matter (PM) and volatile organic compounds (VOCs) at startup before the catalytic combustor is at operational temperature. This project aims to advance wood heater catalytic combustor technology by studying degradation mechanisms in failed field catalysts and using those insights to develop an improved catalytic combustor. Findings will provide critical insights into the degradation mechanisms of wood heater catalytic combustors and inform the design of catalysts that deliver improved efficiency, durability, and performance compared to current commercial products. The outcomes of this project will not only improve catalytic combustor technology but also contribute to operational guidelines to extend catalyst lifetimes.

99 GENERAL AND MISCELLANEOUS↗

Ground Operations of the ISS GNC Babb-Mueller Atmospheric Density Model

The ISS GNC system was updated recently with a new software release that provides onboard state determination capability. Prior to this release, only the Russian segment maintained and propagated the onboard state, which was periodically updated through Russian ground tracking. The new software gives the US segment the capability for maintaining the onboard state, and includes new GPS and state vector propagation capabilities. Part of this software package is an atmospheric density model based on the Babb-Mueller algorithm. Babb-Mueller efficiently mimics a full analytical density model, such as the Jacchia model. While lacchia is very robust and is used in the Mission Control Center, it is too computationally intensive for use onboard. Thus, Babb-Mueller was chosen as an alternative. The onboard model depends on a set of calibration coefficients that produce a curve fit to the lacchia model. The ISS GNC system only maintains one set of coefficients onboard, so a new set must be uplinked by controllers when the atmospheric conditions change. The onboard density model provides a real-time density value, which is used to calculate the drag experienced by the ISS. This drag value is then incorporated into the onboard propagation of the state vector. The propagation of the state vector, and therefore operation of the BabbMueller algorithm, will be most critical when GPS updates and secondary state vector sources fail. When GPS is active, the onboard state vector will be updated every ten seconds, so the propagation error is irrelevant. When GPS is inactive, the state vector must be updated at least every 24 hours, based on current protocol. Therefore, the Babb-Mueller coefficients must be accurate enough to fulfill the state vector accuracy requirements for at least one day. A ground operations concept was needed in order to manage both the on board Babb-Mueller density model and the onboard state quality. The Babb-Mueller coefficients can be determined operationally in two ways. The first method is to calibrate the coefficients in real-time, where a set of custom coefficients is generated for the real-time atmospheric conditions. The second approach is to generate pre-canned sets of coefficients that encompass the expected atmospheric conditions over the lifetime of the vehicle. These predetermined sets are known as occurrences. Even though a particular occurrence will not match the true atmospheric conditions, the error will be constrained by limiting the breadth of each occurrence. Both methods were investigated and the advantages and disadvantages of each were considered. The choice between these implementations was a trade-off between the additional accuracy of the real-time calibration and the simpler development for the approach using occurrences. The operations concept for the frequency of updates was also explored, and depends on the deviation in solar flux that still achieves the necessary accuracy of the coefficients. This was determined based on historical solar flux trends. This analysis resulted in an accurate and reliable implementation of the Babb-Mueller coefficients and how flight controllers use them during realtime operations.

Brogan, Jonathan↗

Small Radioisotope Power System Testing at NASA Glenn Research Center

In April 2009, NASA Glenn Research Center (GRC) formed an integrated product team (IPT) to develop a Small Radioisotope Power System (SRPS) utilizing a single Advanced Stirling Convertor (ASC) with passive balancer. A single ASC produces approximately 80 We making this system advantageous for small distributed lunar science stations. The IPT consists of Sunpower, Inc., to provide the single ASC with a passive balancer, The Johns Hopkins University Applied Physics Laboratory (JHUAPL) to design an engineering model Single Convertor Controller (SCC) for an ASC with a passive balancer, and NASA GRC to provide technical support to these tasks and to develop a simulated lunar lander test stand. The single ASC with a passive balancer, simulated lunar lander test stand, and SCC were delivered to GRC and were tested as a system. The testing sequence at GRC included SCC fault tolerance, integration, electromagnetic interference (EMI), vibration, and extended operation testing. The SCC fault tolerance test characterized the SCCs ability to handle various fault conditions, including high or low bus power consumption, total open load or short circuit, and replacing a failed SCC card while the backup maintains control of the ASC. The integrated test characterized the behavior of the system across a range of operating conditions, including variations in cold-end temperature and piston amplitude, including the emitted vibration to both the sensors on the lunar lander and the lunar surface. The EMI test characterized the AC and DC magnetic and electric fields emitted by the SCC and single ASC. The vibration test confirms the SCCs ability to control the single ASC during launch. The extended operation test allows data to be collected over a period of thousands of hours to obtain long term performance data of the ASC with a passive balancer and the SCC. This paper will discuss the results of each of these tests.

Vibration↗

Revalidation of the Volatile Organic Analyzer Following a Major On-Orbit Maintenance Activity

The Volatile Organic Analyzer (VOA) contributes to the assessment of air quality aboard the International Space Station (ISS) by identifying and quantifying target airborne volatile organic contaminants in the module air. This on-orbit contaminant monitoring capability becomes particularly important during an air quality degradation event such as a system leak. During several ISS air quality degradations, the VOA has generated near real-time data that was used to make decisions or to better understand the contingency. The VOA was operational from January 2002 through June 2003, during which time it was validated by comparing VOA data to simultaneously acquired grab sample containers (GSCs). In January 2003, one of the two analytical channels of the VOA was shutdown because of a component failure, but a redundant channel continued to supply the necessary analytical data. In June 2003, the sole remaining channel was deactivated. Initial assessments of the channel shutdowns pointed to failed fuses or heaters, but neither was considered repairable on orbit. In 2005, it was determined that failed fuses could be replaced on orbit and the crew conducted a diagnostic procedure to identify the failed component. The crew discovered that both channels incurred failed fuses, which lead to a subsequent on orbit maintenance activity and return of the VOA to operational status in December 2005. The VOA has been providing data on the ISS atmosphere since its reactivation in 2005 and this paper will present the VOA data collected during 2006. Special emphasis will be placed upon the revalidation of the repaired VOA using GSCs as well as a summary of the diagnostic and repair procedures.

Limero, Thomas↗

Transforming the "Valley of Death" into a "Valley of Opportunity"

Transitioning technology from research to operations (23 R2O) is difficult. The problem's importance is exemplified in the literature and in every failed attempt to do so. Although the R2O gap is often called the "valley of death", a recent a Space Weather editorial called it a "Valley of Opportunity". There are significant opportunities for space weather organizations to learn from the terrestrial experience. Dedicated R2O organizations like those of the various NOAA testbeds and collaborative "proving ground" projects take common approaches to improving terrestrial weather forecasting through the early transition of research capabilities into the operational environment. Here we present experience-proven principles for the establishment and operation of similar space weather organizations, public or private. These principles were developed and currently being demonstrated by NASA at the Applied Meteorology Unit (AMU) and the Short-term Prediction Research and Transition (SPoRT) Center. The AMU was established in 1991 jointly by NASA, the U.S. Air Force (USAF) and the National Weather Service (NWS) to provide tools and techniques for improving weather support to the Space Shuttle Program (Madura et al., 2011). The primary customers were the USAF 45th Weather Squadron (45 WS) and the NWS Spaceflight Meteorology Group (SMG who provided the weather observing and forecast support for Shuttle operations). SPoRT was established in 2002 to transition NASA satellite and remote-sensing technology to the NWS. The continuing success of these organizations suggests the common principles guiding them may be valuable for similar endeavors in the space weather arena.

Jedlovec, Gary J.↗

Regioisomeric Engineering for Multicharge and Spin Stabilization in Two-Electron Organic Catholytes

Developing multicharge and spin stabilization strategies is fundamental to enhancing the lifetime of functional organic materials, particularly for long-term energy storage in multiredox organic redox flow batteries. Current approaches are limited to the incorporation of electronic substituents to increase or decrease the overall electron density or bulky substituents to sterically shield reactive sites. With the aim to further expand the molecular toolbox for charge and spin stabilization, we introduce regioisomerism as a scaffold-diversifying design element that considers the collective and cumulative electronic and steric contributions from all of the substituents based on their relative regioisomeric arrangements. Through a systematic study of regioisomers of near-planar aromatic cyclic triindoles and nonplanar nonaromatic cyclic tetraindoles, we demonstrate that this regioisomeric engineering strategy significantly enhances the H-cell cycling stability in the above two new classes of 2e – catholytes, even when current strategies failed to stabilize the multicharged species. Density functional theory calculations reveal that the strategy operates by redistributing the charge and spin densities while highlighting the role of aromaticity in charge stabilization. The most stable 2e – catholyte candidate was paired with a viologen derivative anolyte to achieve a proof-of-concept all-organic flow battery with 1.26–1.49 V, 98% capacity retention, and only 0.0117% fade/h and 0.00563% fade/cycle over 400 cycles (192 h), which is the highest capacity retention ever reported over 400 cycles in a multielectron all-organic flow battery setup. We anticipate regioisomeric engineering to be a promising strategy complementary to conventional electronic and steric approaches for multicharge and spin stabilization in other functional organic materials.

37 INORGANIC, ORGANIC, PHYSICAL, AND ANALYTICAL CH↗

Error mitigation, optimization, and extrapolation on a trapped-ion testbed

Current noisy intermediate-scale quantum (NISQ) trapped-ion devices are subject to errors which can significantly impact the accuracy of calculations if left unchecked. A form of error mitigation called zero noise extrapolation (ZNE) can decrease an algorithm’s sensitivity to these errors without increasing the number of required qubits. Here we explore different methods for integrating this error mitigation technique into the Variational Quantum Eigensolver (VQE) algorithm for calculating the ground state of the HeH + molecule at 0.8 Å in the presence of experimental noise. Using the Quantum Scientific Computing Open User Testbed (QSCOUT) trapped-ion device, we test three methods of scaling noise for extrapolation: time stretching the two-qubit gates, scaling the sideband detuning parameter, and inserting two-qubit gate identity operations into the ansatz circuit. We find that time stretching and sideband detuning scaling fail to scale the noise on our particular hardware in a way that can be extrapolated to zero noise. Scaling our noise with global gate identity insertions and extrapolating after variational optimization, we achieve error suppression of 96.8%, resulting in an energy estimate within –0.004 ± 0.04 hartree of the ground state energy. This is an improvement, but still outside the chemical accuracy threshold of 0.0016 hartree. Furthermore, our results show that the efficacy of this error mitigation technique depends on choosing the correct implementation for a given device architecture.

71 CLASSICAL AND QUANTUM MECHANICS, GENERAL PHYSIC↗

Development of a non-cryogenic nitrogen/oxygen supply system

Modular components were refined or replaced to improve the performance of the electrolysis module in a system which generates both oxygen and hydrogen from hydrazine hydrate. Significant mechanical and electrical performance improvements were achieved in the cathode. Improvements were also made in the phase separation area but at considerable cost in time and money and to the detriment of other investigative areas. Only the pump/bubble separator failed in a manner necessitating redesign. Its failure was, however, due to its being operated above the temperature range for which it was designed. The basic electrolysis cell design was not changed.

Source record↗

Torque-Summing Brushless Motor

Torque channels function cooperatively but electrically independent for reliability. Brushless, electronically-commutated dc motor sums electromagnetic torques on four channels and applies them to single shaft. Motor operates with any combination of channels and continues if one or more of channels fail electrically. Motor employs single stator and rotor and mechanically simple; however, each of channels electrically isolated from other so that failure of one does not adversely affect others.

Vaidya, J. G.↗

On-orbit deployment anamolies: What can be done?

Modern communications satellites rely heavily upon deployable appendage (i.e., solar arrays, communications antennas, etc.) to perform vital functions that enable the spacecraft to effectively conduct mission objectives. Communications and telemetry antennas provide the radio-frequency link between the spacecraft and the earth ground station, permitting data to be transmitted and received from the satellite. Solar arrays serve as the principle source of electrical energy to the satellite, and re-charge internal batteries during operation. However, since satellites cannot carry back-up systems, if a solar array fails to deploy, the mission is lost. The subject of on-orbit anomalies related to the deployment of spacecraft appendage, and possible causes of such failures are examined. Topics discussed include mechanical launch loading, on-orbit thermal and solar concerns, reliability of spacecraft pyrotechnics, and practical limitations of ground-based deployment testing. Of particular significance, the article features an in-depth look at the lessons learned from the successful recovery of the Telesat Canada Anik-E2 satellite in 1991.

Freeman, Michael↗

RF MEMS Switches with SiC Microbridges for Improved Reliability

Radio frequency (RF) microelectromechanical (MEMS) switches offer superior performance when compared to the traditional semiconductor devices such as PIN diodes or GaAs transistors. MEMS switches have a return loss (RL) better than -25 dB, negligible insertion loss (IL), isolation better than -30 dB, and near zero power consumption. However, RF MEMS switches have several drawbacks the most serious being long-term reliability. The ability for the switch to operate for millions or even billions of cycles is a major concern and must be addressed. MEMS switches are basically grouped in two categories, capacitive and metal-to-metal contact. The capacitive type switch consists of a movable metal bridge spanning a fixed electrode and separated by a narrow air gap and thin insulating material. The metal-to-metal contact type utilizes the same basic design but without the insulating material. After prolonged operation the metal bridges, in most of these switches, begin to sag and eventually fail to actuate. For the metal-to-metal type, the two metal layers may actually fuse together. Also if the switches are not packaged properly or protected from the environment moisture may build up and cause stiction between the top and bottom electrodes rendering them useless. Many MEMS switch designs have been developed and most illustrate fairly good RF characteristics. Nevertheless very few have demonstrated both great RF performance and ability to perform millions/billions of switching cycles. Of these, nearly all are of metal-to-metal type so as the frequency increases RF performance decreases.

Scardelletti, Maximilian C.↗

Software Health Management: A Short Review of Challenges and Existing Techniques

Modern spacecraft (as well as most other complex mechanisms like aircraft, automobiles, and chemical plants) rely more and more on software, to a point where software failures have caused severe accidents and loss of missions. Software failures during a manned mission can cause loss of life, so there are severe requirements to make the software as safe and reliable as possible. Typically, verification and validation (V&V) has the task of making sure that all software errors are found before the software is deployed and that it always conforms to the requirements. Experience, however, shows that this gold standard of error-free software cannot be reached in practice. Even if the software alone is free of glitches, its interoperation with the hardware (e.g., with sensors or actuators) can cause problems. Unexpected operational conditions or changes in the environment may ultimately cause a software system to fail. Is there a way to surmount this problem? In most modern aircraft and many automobiles, hardware such as central electrical, mechanical, and hydraulic components are monitored by IVHM (Integrated Vehicle Health Management) systems. These systems can recognize, isolate, and identify faults and failures, both those that already occurred as well as imminent ones. With the help of diagnostics and prognostics, appropriate mitigation strategies can be selected (replacement or repair, switch to redundant systems, etc.). In this short paper, we discuss some challenges and promising techniques for software health management (SWHM). In particular, we identify unique challenges for preventing software failure in systems which involve both software and hardware components. We then present our classifications of techniques related to SWHM. These classifications are performed based on dimensions of interest to both developers and users of the techniques, and hopefully provide a map for dealing with software faults and failures.

Pipatsrisawat, Knot↗

Swift BAT Loop Heat Pipe #0 Temperature Droop Problem and Solution After Its Primary Heater Controller Failure

The primary heater controller for Burst Alert Telescope (BAT) loop heat pipe (LHP) #0 failed on March 31, 2010. It has been disabled. The secondary heater circuit is operational. However the set point tolerance of the secondary heater controller is significantly out of specifications. A novel variable conductance heat pipe (VCHP) is used to pre-condition the LHP propylene liquid before it returns to the compensation chamber (CC). Due to the limit on the quantity of power switches, the LHP and VCHP temperatures are controlled by different channels of the same heater controller. For this reason, the VCHP heater controller channel is also out of specification. It caused larger tolerances in the temperature of the propylene liquid returning to the CC. As a result, there were intermittent temperature droops every 10-14 days at the coldest attitude during the eclipse. After the set point of the secondary heater controller was gradually increased from 8 C to 8.7 C, there was no temperature droop for over four months.

Choi, Michael K.↗

Characterization of Monomethyihydrazine (MMH) Non-Volatile Residue

The Space Shuttle program has a unique propellant purity requirement for determination of nonvolatile residue (NVR) in monomethylhydrazine (MMH). TIis requirement differs from the Military Specification procurement specification by requiring a NVR analysis with a limit of less than or equal to 10 milligrams per liter. In June 2008, a routine MMH replenishment delivery was transferred into a NASA KSC owned tanker for future delivery to the Space Shuffle pad MMH storage tank. Per Shuffle standard operating procedure, the receiving tanker was sampled and analyzed for purity and surprisingly it failed the Shuttle use NVR specification limit. Detailed examination of the NVR revealed that it was fundamentally different than the typical MMH NVR. This paper will examine various aspects of NVR determination in MMH and the analytical characterization processes used to identify the NVR.

Davis, Chuck↗