SEARCH · Search NASA
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
A backup software program is installed in an isolated portion in the memory of at least one of redundant computers. The backup program performs basically the same functions as the prime program but is dissimilarly programmed to prevent a common software error. Switchover to the backup program occurs either automatically in response to monitors, or manually by the operator (i.e. pilot) when he detects an anomaly.
Due to the criticality of continuous mission operations, some control centers must plan for alternate locations in the event an emergency shuts down the primary control center. Johnson Space Center (JSC) in Houston, Texas is the Mission Control Center (MCC) for the International Space Station (ISS). Due to Houston s proximity to the Gulf of Mexico, JSC is prone to threats from hurricanes which could cause flooding, wind damage, and electrical outages to the buildings supporting the MCC. Marshall Space Flight Center (MSFC) has the capability to be the Backup Control Center for the ISS if the situation is needed. While the MSFC Huntsville Operations Support Center (HOSC) does house the BCC, the prime customer and operator of the ISS is still the JSC flight operations team. To satisfy the customer and maintain continuous mission operations, the BCC has critical infrastructure that hosts ISS ground systems and flight operations equipment that mirrors the prime mission control facility. However, a complete duplicate of Mission Control Center in another remote location is very expensive to recreate. The HOSC has infrastructure and services that MCC utilized for its backup control center to reduce the costs of a somewhat redundant service. While labor talents are equivalent, experiences are not. Certain operations are maintained in a redundant mode, while others are simply maintained as single string with adequate sparing levels of equipment. Personnel at the BCC facility must be trained and certified to an adequate level on primary MCC systems. Negotiations with the customer were done to match requirements with existing capabilities, and to prioritize resources for appropriate level of service. Because some of these systems are shared, an activation of the backup control center will cause a suspension of scheduled HOSC activities that may share resources needed by the BCC. For example, the MCC is monitoring a hurricane in the Gulf of Mexico. As the threat to MCC increases, HOSC must begin a phased activation of the BCC, while working resource conflicts with normal HOSC activities. In a long duration outage to the MCC, this could cause serious impacts to the BCC host facility s primary mission support activities. This management of a BCC is worked based on customer expectations and negotiations done before emergencies occur. I.
Flight software updates are among the hardest andmost dangerous activities for the Mars Science Laboratory(MSL) Curiosity team. While danger is often mitigated bybackups, fallback strategies, and incremental installation withground-in-the-loop cycles which provide a safety net for theinstallation process, the software update described in this paperwas unable to use many of the common practices due to thenature of the fault addressed by the update. The MSL rover(landed August 2012) encountered a problem with one of itscomputer’s non-volatile storage chips in 2019, requiring a swapto its backup computer and an urgent software upgrade calledR-Hope. R-Hope, a lifeboat to be used in the event of primarycomputer issues, was written, tested, and sent to the rover inlightning speed of just 19 months. Multi-mission and teamcoordination allowed the 49 flight software image files to beuplinked to the rover over a 6-week period, using multiple pathsand backup options for speedy delivery. In the end, the RHopesoftware upgrade returned the computer to operation asa backup flight computer. The flight software transition wasdesigned to impact science return as little as possible, and installationplans included science activities for the majority of MSLinstruments. This paper describes the uplink and installationcampaigns for R-Hope, and discusses the notable lessons learnedby the operations team.
Distributed energy resources are promising solutions for household energy affordability and resilience as weather extremes and aging infrastructure intensify grid reliability risks. This study presents a comprehensive nationwide assessment of over 500,000 U.S. households, evaluating economic and backup viability of solar-battery systems. We find that 60% of households could reduce electricity costs with average savings of 15%, while 63% of households could achieve affordable backup power during power outages covering an average of 51% of their essential energy needs. However, these benefits show limited alignment with areas of greatest need, particularly in regions facing high outage risks. We also identify significant disparities in access to solar and battery, with less-populated and disadvantaged communities showing consistently lower viability. Furthermore, these findings demonstrate the need for targeted policy interventions to ensure equitable access to solar-battery benefits, especially as states transition from net energy metering to other electricity tariff policies.
Building on the successfully completed effort to calibrate and validate the U.S. Department of Energy's ResStock (™) and ComStock (™) models over the past three years, the objective of this work is to produce national data sets that empower analysts working for federal, state, utility, city, and manufacturer stakeholders to answer a broad range of analysis questions. The goal of this work is to develop energy efficiency, electrification, and demand flexibility end-use load shapes (electricity, gas, propane, or fuel oil) that cover a majority of the high-impact, market-ready (or nearly market-ready) measures. "Measures" refers to energy efficiency variables that can be applied to buildings during modeling. An end-use savings shape is the difference in energy consumption between a baseline building and a building with an energy efficiency, electrification, or demand flexibility measure applied. It results in a time-series profile that is broken down by end use and fuel (electricity or on-site gas, propane, or fuel oil use) at each timestep. ComStock is a highly granular, bottom-up model that uses multiple data sources, statistical sampling methods, and advanced building energy simulations to estimate the annual subhourly energy consumption of the commercial building stock across the United States. The baseline model intends to represent the U.S. commercial building stock as it existed in 2018. The methodology and results of the baseline model are discussed in the final technical report of the End-Use Load Profiles project. This documentation focuses on a single end-use savings shape measure - boiler replacement with air-source heat pump boiler with natural gas boiler backup. This measure replaces natural gas boilers for HVAC application by air-source heat pump boilers when applicable and use natural gas boiler backup when the heat pump boiler could not operate due to outdoor air conditions which are below its cutoff temperature. This measure helps to quantify the decarbonization as well as the energy savings potential from the replacement. The measure resulted higher savings in natural gas consumption compared to the increase in electricity consumption, with a ratio of 3. The total natural gas energy consumption was reduced by 41%, whereas the total electricity consumption was increased by 5.3%.
This paper presents a framework that expands the URBANopt(TM) modeling platform to include 3D-printed concrete wall assemblies and assess energy efficiency and backup power trade-offs in new housing developments. Applied to a planned mixed-use neighborhood in Oil City, Pennsylvania, the workflow integrates building energy and distributed energy resource (DER) modeling to evaluate envelope and equipment upgrades alongside DER operations. Results show that advanced 3D-printed envelopes combined with efficient systems and onsite photovoltaics (PV) and storage reduce energy use intensity and sustain critical loads during outages. The framework supports planning for emerging construction technologies by quantifying key trade-offs between energy efficiency and backup power performance.
The NASA Dryden Flight Research Facility is conducting flight tests of two remotely piloted, subscale, advanced fighter configurations; the tests are part of the Highly Maneuverable Aircraft Technology (HiMAT) project. Closed-loop primary flight control is performed from a ground-based cockpit and digital computer in conjunction with an up/down telemetry link. A significant feature of these vehicles is an on-board, digitally active, backup control system designed to recover the vehicle in the event of a transfer from primary control. Automatic transfers occur upon certain critical ground or airborne system malfunctions. Control modes are provided that enable a ground or airborne controller to guide the vehicle to a safe landing. This paper describes the features, operational development, and flight evaluation of the HiMAT backup flight control system.
An ongoing effort at the JPL on vibration suppression for the Precision Segmented Reflector backup structure is centered on the vibration damping augmentation through a system consisting of active and passive damping members. An active member is a structural member with built-in piezoelectric actuator and sensors. An efficient method was developed for optimal placement of active and passive damping members in the truss-type backup structure. A simple synergistic model between the active and passive damping was proposed based on a weighted energy dissipation criterion. A baseline passive member design with constrained viscoelastic material treatment was used as the source of passive damping.
A formal specification of primary-backup is presented. We then prove lower bounds on the degree of replication, failover time, and worst-case response time to client requests assuming different failure models. Finally, we outline primary-backup protocols and indicate which of our lower bounds are tight.
Substantial progress has been made toward the goals of this research effort in the past six months. A simplified rotor model with a flexible shaft and backup bearings has been developed. The model is based upon the work of Ishii and Kirk. Parameter studies of the behavior of this model are currently being conducted. A simple rotor model which includes a flexible disk and bearings with clearance has been developed and the dynamics of the model investigated. The study consists of simulation work coupled with experimental verification. The work is documented in the attached paper. A rotor model based upon the T-501 engine has been developed which includes backup bearing effects. The dynamics of this model are currently being studied with the objective of verifying the conclusions obtained from the simpler models. Parallel simulation runs are being conducted using an ANSYS based finite element model of the T-501.
Although a filesystem may be migratable, for a period of time the data blocks are on disk only. When performing system dumps, these data blocks are backed up to tape. If the data blocks are offline or dual resident, then only the inode is backed up. If all online files are made dual resident prior to performing system dumps, the dump time and the amount of resources required can be significantly reduced. The High Speed Processors group at the Numerical Aerodynamics Simulation (NAS) Facility at NASA Ames Research Center developed a tool to make all online files dual resident. The result is that a file whose data blocks are on DMF tape and still assigned to the original inode. Our 150GB filesystem used to take 8 to 12 hours to backup and used 50 to 60 tapes. Now the backup is typically under 10 tapes and completes in under 2 hours. This paper discusses this new tool and advantages gained by using it.
The NASA Johnson Space Center's X-38 program designed a new backup parachute system to recover the 25,000 lb X-38 prototype for the Crew Return Vehicle spacecraft. Due to weight and cost constraints, the main backup parachute design incorporated rapid and low cost fabrication techniques using off-the-shelf materials. Near the vent, the canopy was constructed of continuous ribbons, to provide more damage tolerance. The remainder of the canopy was a constructed with a continuous ringslot design. After cancellation of the X-38 program, the parachute design was resized, built, and drop tested for Natick Soldiers Center's Low Velocity Air Drop (LVAD) program to deliver cargo loads up to 22,000 lbs from altitudes as low as 500 feet above the ground. Drop tests results showed that the 500-foot LVAD parachute deployment conditions cause severe skirt inversion and inflation problems for large parachutes. The bag strip occurred at a high angle of attack, causing skirt inversion before the parachute could inflate. The addition of a short reefing line prevented the skirt inversion. Using a lower porosity in the vent area, than is normally used in large parachutes, improved inflation. The drop testing demonstrated that the parachute design could be refined to meet the requirements for the 500-foot LVAD mission.
An interrupt is provided to a signal processor having a non-maskable interrupt input, in response to the detection of a request for transfer to backup software. The signal processor provides a transfer signal to a transfer mechanism only after completion of the present machine cycle. Transfer to the backup software is initiated by the transfer mechanism only upon reception of the transfer signal.
In a Stirling Radioisotope Power System (RPS), heat must be continuously removed from the General Purpose Heat Source (GPHS) modules to maintain the modules and surrounding insulation at acceptable temperatures. The Stirling convertor normally provides this cooling. If the Stirling convertor stops in the current system, the insulation is designed to spoil, preventing damage to the GPHS at the cost of an early termination of the mission. An alkali-metal Variable Conductance Heat Pipe (VCHP) can be used to passively allow multiple stops and restarts of the Stirling convertor. In a previous NASA SBIR Program, Advanced Cooling Technologies, Inc. (ACT) developed a series of sodium VCHPs as backup cooling systems for Stirling RPS. The operation of these VCHPs was demonstrated using Stirling heater head simulators and GPHS simulators. In the most recent effort, a sodium VCHP with a stainless steel envelope was designed, fabricated and tested at NASA Glenn Research Center (GRC) with a Stirling convertor for two concepts; one for the Advanced Stirling Radioisotope Generator (ASRG) back up cooling system and one for the Long-lived Venus Lander thermal management system. The VCHP is designed to activate and remove heat from the stopped convertor at a 19 degC temperature increase from the nominal vapor temperature. The 19 degC temperature increase from nominal is low enough to avoid risking standard ASRG operation and spoiling of the Multi-Layer Insulation (MLI). In addition, the same backup cooling system can be applied to the Stirling convertor used for the refrigeration system of the Long-lived Venus Lander. The VCHP will allow the refrigeration system to: 1) rest during transit at a lower temperature than nominal; 2) pre-cool the modules to an even lower temperature before the entry in Venus atmosphere; 3) work at nominal temperature on Venus surface; 4) briefly stop multiple times on the Venus surface to allow scientific measurements. This paper presents the experimental results from integrating the VCHP with an operating Stirling convertor and describes the methodology used to achieve their successful combined operation.
In a Stirling Radioisotope Power System (RPS), heat must be continuously removed from the General Purpose Heat Source (GPHS) modules to maintain the modules and surrounding insulation at acceptable temperatures. The Stirling convertor normally provides this cooling. If the Stirling convertor stops in the current system, the insulation is designed to spoil, preventing damage to the GPHS at the cost of an early termination of the mission. An alkali-metal Variable Conductance Heat Pipe (VCHP) can be used to passively allow multiple stops and restarts of the Stirling convertor. In a previous NASA SBIR Program, Advanced Cooling Technologies, Inc. (ACT) developed a series of sodium VCHPs as backup cooling systems for Stirling RPS. The operation of these VCHPs was demonstrated using Stirling heater head simulators and GPHS simulators. In the most recent effort, a sodium VCHP with a stainless steel envelope was designed, fabricated and tested at NASA Glenn Research Center (GRC) with a Stirling convertor for two concepts; one for the Advanced Stirling Radioisotope Generator (ASRG) back up cooling system and one for the Long-lived Venus Lander thermal management system. The VCHP is designed to activate and remove heat from the stopped convertor at a 19 C temperature increase from the nominal vapor temperature. The 19 C temperature increase from nominal is low enough to avoid risking standard ASRG operation and spoiling of the Multi-Layer Insulation (MLI). In addition, the same backup cooling system can be applied to the Stirling convertor used for the refrigeration system of the Long-lived Venus Lander. The VCHP will allow the refrigeration system to: 1) rest during transit at a lower temperature than nominal; 2) pre-cool the modules to an even lower temperature before the entry in Venus atmosphere; 3) work at nominal temperature on Venus surface; 4) briefly stop multiple times on the Venus surface to allow scientific measurements. This paper presents the experimental results from integrating the VCHP with an operating Stirling convertor and describes the methodology used to achieve their successful combined operation.
Second Chance (SECC) was a bare bones version of Mars Science Laboratory's (MSL) Entry Descent & Landing (EDL) flight software that ran on Curiosity's backup computer, which could have taken over swiftly in the event of a reset of Curiosity's prime computer, in order to land her safely on Mars. Without SECC, a reset of Curiosity's prime computer would have lead to catastrophic mission failure. Even though a reset of the prime computer never occurred, SECC had the important responsibility as EDL's guardian angel, and this responsibility would not have seen such success without unparalleled systems engineering. This paper will focus on the systems engineering behind SECC: Covering a brief overview of SECC's design, the intense schedule to use SECC as a backup system, the verification and validation of the system's "Do No Harm" mandate, the system's overall functional performance, and finally, its use on the fateful day of August 5th, 2012.
In a Stirling Radioisotope Power System (RPS), heat must be continuously removed from the General Purpose Heat Source (GPHS) modules to maintain the modules and surrounding insulation at acceptable temperatures. The Stirling convertor normally provides this cooling. If the Stirling convertor stops in the current system, the insulation is designed to spoil, preventing damage to the GPHS at the cost of an early termination of the mission. An alkali-metal variable conductance heat pipe (VCHP) can be used to passively allow multiple stops and restarts of the Stirling convertor by bypassing the heat during stops. In a previous NASA Small Business Innovation Research (SBIR) Program, Advanced Cooling Technologies, Inc. (ACT) developed a series of sodium VCHPs as backup cooling systems for the Stirling RPS. In 2012, one of these VCHPs was successfully tested at NASA Glenn Research Center with a Stirling convertor as an Advanced Stirling Radioisotope Generator (ASRG) backup cooling system. The prototype; however, was not optimized and did not reflect the final heat rejection path. ACT through further funding has developed a semioptimized prototype with the finalized heat path for testing at Glenn with a Stirling convertor. The semioptimized system features a two-phase radiator and is significantly smaller and lighter than the prior prototype to reflect a higher level of flight readiness. The VCHP is designed to activate and remove heat from the GPHS during stoppage with a small temperature increase from the nominal vapor temperature. This small temperature increase from nominal is low enough to avoid risking standard ASRG operation and spoiling of the multilayer insulation (MLI). The VCHP passively allows the Stirling convertor to be turned off multiple times during a mission with potentially unlimited off durations. Having the ability to turn the Stirling off allows for the Stirling to be reset and reduces vibrations on the platform during sensitive measurements or procedures. This paper presents the design of the VCHP and its test results with a Stirling convertor at Glenn. Tests were carried for multiple on and off cycles to demonstrate repeatability. The impacts associated with the addition of the VCHP to the system are also addressed in terms of mass and additional heat losses due to the presence of the VCHP.
Second Chance (SECC) was a bare bones version of Mars Science Laboratory’s (MSL) Entry Descent & Landing (EDL) flight software that ran on Curiosity’s backup computer, which could have taken over swiftly in the event of a reset of Curiosity’s prime computer, in order to land her safely on Mars. Without SECC, a reset of Curiosity’s prime computer would have lead to catastrophic mission failure. Even though a reset of the prime computer never occurred, SECC had the important responsibility as EDL’s guardian angel, and this responsibility would not have seen such success without unparalleled systems engineering. This paper will focus on the systems engineering behind SECC: Covering a brief overview of SECC’s design, the intense schedule to use SECC as a backup system, the verification and validation of the system’s “Do No Harm” mandate, the system’s overall functional performance, and finally, its use on the fateful day of August 5th, 2012.