SEARCH · Search NASA

Results for “Closed-loop safety”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 37 records · Page 2

All sources NASA NTRS DOE OSTI

NASA NTRS1989

The development of power specific redlines for SSME safety monitoring

Over the past several years, there has been an increased awareness in the necessity for rocket engine health monitoring because of the cost and complexity of present and future systems. A current rocket engine system, the Space Shuttle Main Engine (SSME), combines a limited redline system with closed-loop control of the engine's thrust level and mixture ratio. Despite these features, 27 tests of the SSME have resulted in major incidents. An SSME transient model was used to examine the effect of variations in high pressure turbopump performance on various engine parameters. Based on analysis of the responses, several new parameters are proposed for further investigation as power-level specific redlines.

Maul, William A.↗

NASA NTRS1994

Safety concerns for first entry operations of orbiting spacecraft

The Space Station Freedom crew will face operational problems unique to the spacecraft environment due to the absence of convection currents and the confined atmosphere within the habitable modules. Airborne contaminants from the materials offgassing or contingency incidents like thermodegradation may accumulate until they reach hazardous concentrations. Flow modeling and experiences from previous space flight missions confirm that caution must be exercised during first-entry operations. A review of the first-entry procedures performed during the Skylab Program will be presented to highlight the necessity for carefully planned operations. Many of the environmental conditions that can be expected on the Space Station are analogous to those which exist in confined storage or work spaces in the industrial setting. Experience with closed-loop environmental operations (e.g., atmospheric control of submarines) have also demonstrated that the buildup of trace contaminant gases could result in conditions that lead to mission termination or loss of crew. Consequently, some first-entry issues for the Station can be addressed by comparing them to familiar techniques developed on Earth. The instruments of the Environmental Health System (EHS) will provide the necessary monitoring capability to protect crew health and safety during the planned first-entry procedures of the MTC phase of the SSF Program. The authors of this paper will describe those procedures and will cite an example of the consequences when proper first-entry procedures are not followed.

Wilson, Steven H.↗

NASA NTRS2013

Autonomous Control of Space Nuclear Reactors

Nuclear reactors to support future robotic and manned missions impose new and innovative technological requirements for their control and protection instrumentation. Long-duration surface missions necessitate reliable autonomous operation, and manned missions impose added requirements for failsafe reactor protection. There is a need for an advanced instrumentation and control system for space-nuclear reactors that addresses both aspects of autonomous operation and safety. The Reactor Instrumentation and Control System (RICS) consists of two functionally independent systems: the Reactor Protection System (RPS) and the Supervision and Control System (SCS). Through these two systems, the RICS both supervises and controls a nuclear reactor during normal operational states, as well as monitors the operation of the reactor and, upon sensing a system anomaly, automatically takes the appropriate actions to prevent an unsafe or potentially unsafe condition from occurring. The RPS encompasses all electrical and mechanical devices and circuitry, from sensors to actuation device output terminals. The SCS contains a comprehensive data acquisition system to measure continuously different groups of variables consisting of primary measurement elements, transmitters, or conditioning modules. These reactor control variables can be categorized into two groups: those directly related to the behavior of the core (known as nuclear variables) and those related to secondary systems (known as process variables). Reliable closed-loop reactor control is achieved by processing the acquired variables and actuating the appropriate device drivers to maintain the reactor in a safe operating state. The SCS must prevent a deviation from the reactor nominal conditions by managing limitation functions in order to avoid RPS actions. The RICS has four identical redundancies that comply with physical separation, electrical isolation, and functional independence. This architecture complies with the safety requirements of a nuclear reactor and provides high availability to the host system. The RICS is intended to interface with a host computer (the computer of the spacecraft where the reactor is mounted). The RICS leverages the safety features inherent in Earth-based reactors and also integrates the wide range neutron detector (WRND). A neutron detector provides the input that allows the RICS to do its job. The RICS is based on proven technology currently in use at a nuclear research facility. In its most basic form, the RICS is a ruggedized, compact data-acquisition and control system that could be adapted to support a wide variety of harsh environments. As such, the RICS could be a useful instrument outside the scope of a nuclear reactor, including military applications where failsafe data acquisition and control is required with stringent size, weight, and power constraints.

Merk, John↗

NASA NTRS2004

Real-Time Control of Lean Blowout in a Turbine Engine for Minimizing No(x) Emissions

This report describes research on the development and demonstration of a controlled combustor operates with minimal NO, emissions, thus meeting one of NASA s UEET program goals. NO(x) emissions have been successfully minimized by operating a premixed, lean burning combustor (modeling a lean prevaporized, premixed LPP combustor) safely near its lean blowout (LBO) limit over a range of operating conditions. This was accomplished by integrating the combustor with an LBO precursor sensor and closed-loop, rule-based control system that allowed the combustor to operate far closer to the point of LBO than an uncontrolled combustor would be allowed to in a current engine. Since leaner operation generally leads to lower NO, emissions, engine NO, was reduced without loss of safety.

Zinn, Ben↗

NASA NTRS1989

Middeck Active Control Experiment (MACE), phase A

A rationale to determine which structural experiments are sufficient to verify the design of structures employing Controlled Structures Technology was derived. A survey of proposed NASA missions was undertaken to identify candidate test articles for use in the Middeck Active Control Experiment (MACE). The survey revealed that potential test articles could be classified into one of three roles: development, demonstration, and qualification, depending on the maturity of the technology and the mission the structure must fulfill. A set of criteria was derived that allowed determination of which role a potential test article must fulfill. A review of the capabilities and limitations of the STS middeck was conducted. A reference design for the MACE test article was presented. Computing requirements for running typical closed-loop controllers was determined, and various computer configurations were studied. The various components required to manufacture the structure were identified. A management plan was established for the remainder of the program experiment development, flight and ground systems development, and integration to the carrier. Procedures for configuration control, fiscal control, and safety, reliabilty, and quality assurance were developed.

Crawley, Edward F.↗

NASA NTRS2014

Application of the Tool for Turbine Engine Closed-loop Transient Analysis (TTECTrA) for Dynamic Systems Analysis

Systems analysis involves steady-state simulations of combined components to evaluate the steady-state performance, weight, and cost of a system; dynamic considerations are not included until later in the design process. The Dynamic Systems Analysis task, under NASAs Fixed Wing project, is developing the capability for assessing dynamic issues at earlier stages during systems analysis. To provide this capability the Tool for Turbine Engine Closed-loop Transient Analysis (TTECTrA) has been developed to design a single flight condition controller (defined as altitude and Mach number) and, ultimately, provide an estimate of the closed-loop performance of the engine model. This tool has been integrated with the Commercial Modular Aero-Propulsion System Simulation 40,000 (CMAPSS 40k) engine model to demonstrate the additional information TTECTrA makes available for dynamic systems analysis. This dynamic data can be used to evaluate the trade-off between performance and safety, which could not be done with steady-state systems analysis data. TTECTrA has been designed to integrate with any turbine engine model that is compatible with the MATLAB Simulink (The MathWorks, Inc.) environment.

control↗

NASA NTRS2010

High-Intensity Radiated Field Fault-Injection Experiment for a Fault-Tolerant Distributed Communication System

Safety-critical distributed flight control systems require robustness in the presence of faults. In general, these systems consist of a number of input/output (I/O) and computation nodes interacting through a fault-tolerant data communication system. The communication system transfers sensor data and control commands and can handle most faults under typical operating conditions. However, the performance of the closed-loop system can be adversely affected as a result of operating in harsh environments. In particular, High-Intensity Radiated Field (HIRF) environments have the potential to cause random fault manifestations in individual avionic components and to generate simultaneous system-wide communication faults that overwhelm existing fault management mechanisms. This paper presents the design of an experiment conducted at the NASA Langley Research Center's HIRF Laboratory to statistically characterize the faults that a HIRF environment can trigger on a single node of a distributed flight control system.

Yates, Amy M.↗

NASA NTRS2002

Control Oriented Modeling and Validation of Aeroservoelastic Systems

Lightweight aircraft design emphasizes the reduction of structural weight to maximize aircraft efficiency and agility at the cost of increasing the likelihood of structural dynamic instabilities. To ensure flight safety, extensive flight testing and active structural servo control strategies are required to explore and expand the boundary of the flight envelope. Aeroservoelastic (ASE) models can provide online flight monitoring of dynamic instabilities to reduce flight time testing and increase flight safety. The success of ASE models is determined by the ability to take into account varying flight conditions and the possibility to perform flight monitoring under the presence of active structural servo control strategies. In this continued study, these aspects are addressed by developing specific methodologies and algorithms for control relevant robust identification and model validation of aeroservoelastic structures. The closed-loop model robust identification and model validation are based on a fractional model approach where the model uncertainties are characterized in a closed-loop relevant way.

Crowder, Marianne↗

NASA NTRS2003

Airborne Conflict Management within Confined Airspace in a Piloted Simulation of DAG-TM Autonomous Aircraft Operations

A human-in-the-loop experiment was performed at the NASA Langley Research Center to study the feasibility of Distributed Air/Ground Traffic Management (DAG-TM) autonomous aircraft operations in highly constrained airspace. The airspace was constrained by a pair of special use airspace (SUA) regions on either side of the pilot s planned route. The available airspace was further varied by changing the separation standard for lateral separation between 3 nm and 5 nm. The pilot had to maneuver through the corridor between the SUA s, avoid other traffic and meet flow management constraints. Traffic flow management (TFM) constraints were imposed as a required time of arrival and crossing altitude at an en route fix. This is a follow-up study to work presented at the 4th USA/Europe Air Traffic Management R&D Seminar in December 2001. Nearly all of the pilots were able to meet their TFM constraints while maintaining adequate separation from other traffic. In only 3 out of 59 runs were the pilots unable to meet their required time of arrival. Two loss of separation cases are studied and it is found that the pilots need conflict prevention information presented in a clearer manner. No degradation of performance or safety was seen between the wide and narrow corridors. Although this was not a thorough study of the consequences of reducing the en route lateral separation, nothing was found that would refute the feasibility of reducing the separation requirement from 5 nm to 3 nm. The creation of additional, second-generation conflicts is also investigated. Two resolution methods were offered to the pilots: strategic and tactical. The strategic method is a closed-loop alteration to the Flight Management System (FMS) active route that considers other traffic as well as TFM constraints. The tactical resolutions are short-term resolutions that leave avoiding other traffic conflicts and meeting the TFM constraints to the pilot. Those that made use of the strategic tools avoided additional conflicts, whereas, those making tactical maneuvers often caused additional conflicts. Many of these second-generation conflicts could be avoided by improved conflict prevention tools that clearly present to the pilot which maneuver choices will result in a conflict-free path. These results, together with previously reported studies, continue to support the feasibility of autonomous aircraft operations.

Barmore, Bryan↗

NASA NTRS2007

Strategies to Mitigate Ammonia Release on the International Space Station

International Space Station (ISS) is crucial to its continuous operation. Off-nominal situations can arise from virtually any aspect of ISS operations. One situation of particular concern is the inadvertent release of a chemical into the ISS atmosphere. In sufficient quantities, a chemical release can render the ISS uninhabitable regardless of the chemical s toxicity as a result of its effect on the hardware used to maintain the environment. This is certainly true with system chemicals which are integral components to the function and purpose of the system. Safeguards, such as design for minimum risk, multiple containment, hazard assessments, rigorous safety reviews, and others, are in place to minimize the probability of a chemical release to the ISS environment thereby allowing the benefits of system chemicals to outweigh the risks associated with them. The thermal control system is an example of such a system. Heat generated within the ISS is transferred from the internal thermal control system (ITCS) to the external thermal control system (ETCS) via two, single-barrier interface heat exchangers (IFHX). The ITCS and ETCS are closed-loop systems which utilize water and anhydrous ammonia, respectively, as heat-transfer fluids. There is approximately 1200 lbs. (208 gallons) of anhydrous ammonia in the ETCS circulating through the two heat exchangers, transferring heat from the ITCS water lines. At the amounts present in the ETCS, anhydrous ammonia is one system chemical that can easily overwhelm the station atmosphere scrubbing capabilities and render the ISS uninhabitable in the event of a catastrophic rupture. Although safeguards have certainly minimized the risk of an ammonia release into the Station atmosphere, credible release scenarios and controls to manage these scenarios are examined.

Macatangay, Ariel V.↗

NASA NTRS2013

Mission Data System Java Edition Version 7

The Mission Data System framework defines closed-loop control system abstractions from State Analysis including interfaces for state variables, goals, estimators, and controllers that can be adapted to implement a goal-oriented control system. The framework further provides an execution environment that includes a goal scheduler, execution engine, and fault monitor that support the expression of goal network activity plans. Using these frameworks, adapters can build a goal-oriented control system where activity coordination is verified before execution begins (plan time), and continually during execution. Plan failures including violations of safety constraints expressed in the plan can be handled through automatic re-planning. This version optimizes a number of key interfaces and features to minimize dependencies, performance overhead, and improve reliability. Fault diagnosis and real-time projection capabilities are incorporated. This version enhances earlier versions primarily through optimizations and quality improvements that raise the technology readiness level. Goals explicitly constrain system states over explicit time intervals to eliminate ambiguity about intent, as compared to command-oriented control that only implies persistent intent until another command is sent. A goal network scheduling and verification process ensures that all goals in the plan are achievable before starting execution. Goal failures at runtime can be detected (including predicted failures) and handled by adapted response logic. Responses can include plan repairs (try an alternate tactic to achieve the same goal), goal shedding, ignoring the fault, cancelling the plan, or safing the system.

Reinholtz, William K.↗

NASA NTRS2010

An Adaptive Control Technology for Safety of a GTM-like Aircraft

An adaptive control architecture for safe performance of a transport aircraft subject to various adverse conditions is proposed and verified in this report. This architecture combines a nominal controller based on a Linear Quadratic Regulator with integral action, and an adaptive controller that accommodates actuator saturation and bounded disturbances. The effectiveness of the baseline controller and its adaptive augmentation are evaluated using a stand-alone control veri fication methodology. Case studies that pair individual parameter uncertainties with critical flight maneuvers are studied. The resilience of the controllers is determined by evaluating the degradation in closed-loop performance resulting from increasingly larger deviations in the uncertain parameters from their nominal values. Symmetric and asymmetric actuator failures, flight upsets, and center of gravity displacements, are some of the uncertainties considered.

Matsutani, Megumi↗

DOE OSTI2025

Data-Conforming Data-Driven Control: Avoiding Premature Generalizations Beyond Data

Data-driven and adaptive control approaches face the problem of introducing sudden distributional shifts beyond the distribution of data encountered during learning. Therefore, they are prone to invalidating the very assumptions used in their own construction. This is due to the linearity of the underlying system, inherently assumed and formulated in most data-driven control approaches, which may falsely generalize the behavior of the system beyond the behavior experienced in the data. This article seeks to mitigate these problems by enforcing consistency of the newly designed closed-loop systems with data and slowing down any distributional shifts in the joint state-input space. This is achieved through incorporating affine regularization terms and linear matrix inequality constraints to data-driven approaches, resulting in convex semi-definite programs that can be efficiently solved by standard software packages. We discuss the optimality conditions of these programs and then conclude this article with a numerical example that further highlights the problem of premature generalization beyond data and shows the effectiveness of our proposed approaches in enhancing the safety of data-driven control methods.

97 MATHEMATICS AND COMPUTING↗

NASA NTRS2011

SRMS History, Evolution and Lessons Learned

Early in the development of the Space Shuttle, it became clear that NASA needed a method of deploying and retrieving payloads from the payload bay. The Shuttle Remote Manipulator System (SRMS) was developed to fill this need. The 50 foot long robotic arm is an anthropomorphic design consisting of three electromechanical joints, six degrees of freedom, and two boom segments. Its composite boom construction provided a light weight solution needed for space operations. Additionally, a method of capturing payloads with the arm was required and a unique End Effector was developed using an electromechanical snare mechanism. The SRMS is operated using a Displays and Controls Panel and hand controllers located within the aft crew compartment of the shuttle. Although the SRMS was originally conceived to deploy and retrieve payloads, its generic capabilities allowed it to perform many other functions not originally conceived of. Over the years it has been used for deploying and retrieving constrained and free flying payloads, maneuvering and supporting EVA astronauts, satellite repair, International Space Station construction, and as a viewing aid for on-orbit International Space Station operations. After the Columbia accident, a robotically compatible Orbiter Boom Sensor System (OBSS) was developed and used in conjunction with the SRMS to scan the Thermal Protection System (TPS) of the shuttle. These scans ensure there is not a breach of the TPS prior to shuttle re-entry. Ground operations and pre mission simulation, analysis and planning played a major role in the success of the SRMS program. A Systems Engineering Simulator (SES) was developed to provide a utility complimentary to open loop engineering simulations. This system provided a closed-loop real-time pilot-driven simulation giving visual feedback, display and control panel interaction, and integration with other vehicle systems, such as GN&C. It has been useful for many more applications than traditional training. Evolution of the simulations, guided by the Math Model Working Group, showed the utility of input from multiple modeling groups with a structured forum for discussion.There were many unique development challenges in the areas of hardware, software, certification, modeling and simulation. Over the years, upgrades and enhancements were implemented to increase the capability, performance and safety of the SRMS. The history and evolution of the SRMS program provided many lessons learned that can be used for future space robotic systems.

Jorgensen, Glenn↗

NASA NTRS2010

CECE: Expanding the Envelope of Deep Throttling Technology in Liquid Oxygen/Liquid Hydrogen Rocket Engines for NASA Exploration Missions

As one of the first technology development programs awarded by NASA under the Vision for Space Exploration, the Pratt & Whitney Rocketdyne (PWR) Deep Throttling, Common Extensible Cryogenic Engine (CECE) program was selected by NASA in November 2004 to begin technology development and demonstration toward a deep throttling, cryogenic engine supporting ongoing trade studies for NASA s Lunar Lander descent stage. The CECE program leverages the maturity and previous investment of a flight-proven hydrogen/oxygen expander cycle engine, the PWR RL10, to develop and demonstrate an unprecedented combination of reliability, safety, durability, throttlability, and restart capabilities in high-energy, cryogenic, in-space propulsion. The testbed selected for the deep throttling demonstration phases of this program was a minimally modified RL10 engine, allowing for maximum current production engine commonality and extensibility with minimum program cost. Four series of demonstrator engine tests have been successfully completed between April 2006 and April 2010, accumulating 7,436 seconds of hot fire time over 47 separate tests. While the first two test series explored low power combustion (chug) and system instabilities, the third test series investigated and was ultimately successful in demonstrating several mitigating technologies for these instabilities and achieved a stable throttling ratio of 13:1. The fourth test series significantly expanded the engine s operability envelope by successfully demonstrating a closed-loop control system and extensive transient modeling to enable lower power engine starting, faster throttle ramp rates, and mission-specific ignition testing. The final hot fire test demonstrated a chug-free, minimum power level of 5.9%, corresponding to an overall 17.6:1 throttling ratio achieved. In total, these tests have provided an early technology demonstration of an enabling cryogenic propulsion concept with invaluable system-level technology data acquisition toward design and development risk mitigation for future lander descent main engines.

Giuliano, Victor J.↗

NASA NTRS1998

Integration of Biological, Physical/Chemical and Energy Efficient Systems in the CELSS Antarctic Analog: Performance of Prototype Systems and Issues for Life Support

The Controlled Ecological Life Support System (CELSS) Antarctic Analog Project (CAAP) is a joint endeavor between the National Science Foundation, Office of Polar Programs (NSF-OPP), and the National Aeronautics and Space Administration (NASA). The fundamental objective is to develop, deploy, and operate a testbed of advanced life support technologies at the Amundsen-Scott South Pole Station that enable the objectives of both the NSF and NASA. The functions of food production, water purification, and waste treatment, recycle, and reduction provided by CAAP will improve the quality of life for the South Pole inhabitants, reduce logistics dependence, enhance safety, and minimize environmental impacts associated with human presence on the polar plateau. Because of the analogous technical, scientific, and mission features with Planetary missions, such as a mission to Mars, CAAP provides NASA with a method for validating technologies and overall approaches to supporting humans. Prototype systems for waste treatment, water recycle, resource recovery and crop production are being evaluated in a testbed at Ames Research Center. The combined performance of these biological and physical/chemical systems as an integrated function in support of the human habitat will be discussed. Overall system performance will be emphasized. The effectiveness and efficiency of component technologies will be discussed in the context of energy and mass flow within the system and contribution to achieving a mass and energy conservative system. Critical to the discussion are interfaces with habitat functions outside of the closed-loop life support: the ability of the system to satisfy the life support requirements of the habitat and the ability to define input requirements. The significance of analog functions in relation to future Mars habitats will be discussed.

Bubenheim, David L.↗

NASA NTRS2003

Using Computational Cognitive Modeling to Diagnose Possible Sources of Aviation Error

We present a computational model of a closed-loop, pilot-aircraft-visual scene-taxiway system created to shed light on possible sources of taxi error. Creating the cognitive aspects of the model using ACT-R required us to conduct studies with subject matter experts to identify experiential adaptations pilots bring to taxiing. Five decision strategies were found, ranging from cognitively-intensive but precise, to fast, frugal but robust. We provide evidence for the model by comparing its behavior to a NASA Ames Research Center simulation of Chicago O'Hare surface operations. Decision horizons were highly variable; the model selected the most accurate strategy given time available. We found a signature in the simulation data of the use of globally robust heuristics to cope with short decision horizons as revealed by errors occurring most frequently at atypical taxiway geometries or clearance routes. These data provided empirical support for the model.

Pilots↗

NASA NTRS2006

Conducting Closed Habitation Experiments: Experience from the Lunar Mars Life Support Test Project

The Lunar-Mars Life Support Test Project (LMLSTP) was conducted from 1995 through 1997 at the National Aeronautics and Space Administration s (NASA) Johnson Space Center (JSC) to demonstrate increasingly longer duration operation of integrated, closed-loop life support systems that employed biological and physicochemical techniques for water recycling, waste processing, air revitalization, thermal control, and food production. An analog environment for long-duration human space travel, the conditions of isolation and confinement also enabled studies of human factors, medical sciences (both physiology and psychology) and crew training. Four tests were conducted, Phases I, II, IIa and III, with durations of 15, 30, 60 and 91 days, respectively. The first phase focused on biological air regeneration, using wheat to generate enough oxygen for one experimental subject. The systems demonstrated in the later phases were increasingly complex and interdependent, and provided life support for four crew members. The tests were conducted using two human-rated, atmospherically-closed test chambers, the Variable Pressure Growth Chamber (VPGC) and the Integrated Life Support Systems Test Facility (ILSSTF). Systems included test articles (the life support hardware under evaluation), human accommodations (living quarters, kitchen, exercise equipment, etc.) and facility systems (emergency matrix system, power, cooling, etc.). The test team was managed by a lead engineer and a test director, and included test article engineers responsible for specific systems, subsystems or test articles, test conductors, facility engineers, chamber operators and engineering technicians, medical and safety officers, and science experimenters. A crew selection committee, comprised of psychologists, engineers and managers involved in the test, evaluated male and female volunteers who applied to be test subjects. Selection was based on the skills mix anticipated for each particular test, and utilized information from psychological and medical testing, data on the knowledge, experience and skills of the applicants, and team building exercises. The design, development, buildup and operation of test hardware and documentation followed the established NASA processes and requirements for test buildup and operation.

Barta, Daniel J.↗