Search NASASearch

SEARCH · Search NASA

Results for “Failure Mode and Effects Analysis”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

1,535 records · Page 2

PROBABALISTIC RISK ANALYSIS AND THERMAL MARGIN PROCESS FOR AN INFLATABLE AEROSHELL

Atmospheric entry vehicle thermal protection systems (TPS) are margined due to the uncertainties that exist in entry aeroheating environments and the thermal response of the materials and structures. Traditional approaches typically over-margin TPS and offer very little insight into the risk of over-temperature during flight. A probabilistic margin process can be used to apply thermal margin to an aeroshell based on a rigorously calculated risk of failure. This probabilistic margin process allows engineers to make informed aeroshell design, entry-trajectory modifications, and risk trades while preventing excessive margin from being applied. This methodology can also be applied to other TPS applications, hot structures, and other engineering disciplines.

Steven A Tobin

Dynamic analysis of a photovoltaic power system with battery storage capability

A photovolataic power system with a battery storage capability is analyzed. A dual battery current control concept is proposed, which enables the battery to either supply or accept power depending upon system environment and load conditions. A simulation of the power system, including the battery current control, is developed and evaluated. The evaulation demonstrate the visbility of the battery control concept of switch the battery from a charge to discharge mode and back as required by load and environmental conditions. An acceptable system operation is demonstrated over the entire insolation range. Additionally, system sensitivity, bandwidth, and damping characteristics of the battery control are shown to be acceptable for a projected hardware implementation.

Merrill, W. C.

Avalanche Photodiode Statistics in Triggered-Avalanche Detection Mode

The output of a triggered avalanche mode avalanche photodiode is modeled as Poisson distributed primary avalanche events plus conditionally Poisson distributed trapped carrier induced secondary events. The moment generating function as well as the mean and variance of the diode output statistics are derived. The dispersion of the output statistics is shown to always exceed that of the Poisson distribution. Several examples are considered in detail.

H H Tan

Emergence of Complex Modes in Lightly Damped Structural Systems

In this short presentation format, we will provide a set of useful equations, relationships, and physical interpretations direct from the damped two-mode interaction problem. We will demonstrate that the results from the two-mode interaction problem are in direct agreement with observed test data. Practical methods for estimating the parameters driving the relations direct from modal test data are provided. We finalize with two examples demonstrating weak and strong interactions.

spaceflight hardware

Nitrile/Buna N Material Failure Assessment for an O-Ring used on the Gaseous Hydrogen Flow Control Valve (FCV) of the Space Shuttle Main Engine

After the rollout of Space Shuttle Discovery in April 2005 in preparation for return-to-flight, there was a failure of the Orbiter (OV-103) helium signature leak test in the gaseous hydrogen (GH2) system. Leakage was attributed to the Flow Control Valve (FCV) in Main Engine 3. The FCV determined to be the source of the leak for OV-103 is designated as LV-58. The nitrile/Buna N rubber O-ring seal was removed from LV-58, and failure analysis indicated radial cracks providing leak paths in one quadrant. Cracks were eventually found in 6 of 9 FCV O-rings among the three Shuttle Orbiters, though none were as severe as those for LV-58, OV-103. Testing by EM10 at MSFC on all 9 FCV O- rings included: laser dimensional, Shore A hardness and properties from a dynamic mechanical analyzer (DMA) and an Instron tensile machine. The following test data was obtained on the cracked quadrant of the LV-58, OV-103 O-ring: (1) the estimated compression set was only 9.5%, compared to none for the rest of the O-ring; (2) Shore A hardness for the O.D. was higher by almost 4 durometer points than for the rest of the O-ring; and (3) DMA data showed that the storage/elastic modulus E was almost 25% lower than for the rest of the O-ring. Of the 8 FCV O-rings tested on an Instron, 4 yielded tensile strengths that were below the MIL spec requirement of 1350 psi-a likely influence of rubber cracking. Comparisons were made between values of modulus determined by DNA (elastic) and Instron (Young s). Each nitrile/Buna N O-ring used in the FCV conforms to the MIL-P-25732C specification. A number of such O-rings taken from shelf storage at MSFC and Kennedy Space Center (KSC) were used to generate a reference curve of DMA glass transition temperature (Tg) vs. shelf storage time ranging from 8 to 26 years. A similar reference curve of TGA onset temperature (of rubber weight loss) vs. shelf storage time was also generated. The DMA and TGA data for the used FCV O-rings were compared to the reference curves. Correlations were also made between the DMA modulus (at 22 C) and Shore A hardness for all 9 of the FCV O-rings used among the three Shuttle Orbiters. The radial cracking in the FCV O-rings was determined to be due to ozone attack, as nitrile/Buna N rubber is susceptible to such attack. Nitrile/Buna N material under MIL-P25732C should be used in a hydraulic fluid environment to help protect it from cracking. However, the FCV O-rings were used in an air only environment. The FCV design has as much as a 9-mil gap that allows the O.D. of the O-ring to be directly exposed to ozone, pressurized air and some elevated temperatures, accelerating the weathering process that leads to O-ring cracking. Space Shuttle flights will likely not continue past 2010. Therefore, Shuttle management decided to continue using the nitrile/Buna N material for the FCVs, but have each O-ring replaced after 3 years to minimize any chances for crack initiation.

Doug Wingard

Fluid-Thermal-Structural Interactions Induced by an Asymmetric Shock-Wave/Boundary-Layer Interaction in a Mach-6 Compression Corner

An experimental study is conducted of the fluid-thermal-structural interaction of a clamped compliant panel exposed to a three dimensional shock-wave/boundary-layer interaction (SWBLI) induced by a Mach-6 compression ramp with a spanwise nonuniform incoming boundary layer. The nonuniform boundary layer was produced by placing trips on one side of the upstream flat plate, resulting in largely turbulent flow on the tripped side and transitional flow on the untripped side. Measurements of the flowfield confirmed that the tripped boundary layer contained elevated levels of unsteadiness, and the SWBLI was observed to vary from attached to fully separated as the ramp angle was increased from 10◦ to 38◦; the separation region on the tripped side of the panel was noticeably smaller, showing the elevated turbulence levels of the tripped-side flow to remain relatively localized rather than diffusing across the whole model. Full-field, time-resolved panel deformations were measured using high-speed photogrammetry and the vibrational response at each compression angle was characterized. Although the measured modes conformed largely to those from classical clamped-plate theory, some skewing of the mode shapes was observed. IR thermography highlighted regions of the compliant region where elevated temperatures were likely to promote thermal softening effects to the transient panel response. The quasi-static deformation and stress field was used to characterize the internal stress factor of each mode and showed a meaningful relationship between transient panel response and stress contained within each mode: modes with antinodes lying in high-stress areas of the plate tended to exhibit increases in vibrational frequency and decreases in vibrational power, whereas the opposite was true for modes with antinodes in low-stress areas.

Spectral Proper Orthogonal Decomposition

Asynchronous Transfer Mode Link Performance Over Ground Networks

The results of an experiment to determine the feasibility of using asynchronous transfer mode (ATM) technology to support advanced spacecraft missions that require high-rate ground communications and, in particular, full-motion video are reported. Potential nodes in such a ground network include Deep Space Network (DSN) antenna stations, the Jet Propulsion Laboratory, and a set of national and international end users. The experiment simulated a lunar microrover, lunar lander, the DSN ground communications system, and distributed science users. The users were equipped with video-capable workstations. A key feature was an optical fiber link between two high-performance workstations equipped with ATM interfaces. Video was also transmitted through JPL's institutional network to a user 8 km from the experiment. Variations in video depending on the networks and computers were observed, the results are reported.

E T Chow

In Flight Performance of a Six Ampere-hour Nickel-cadmium Battery in Low Earth Orbit

Flight data for 17,000 orbital cycles are reviewed and summarized. The nickel cadmium battery system operated without failure or abnormality. Battery trend analysis used in determining the feasibility of extending mission life is discussed. The life test data for 20% depth of discharge indicates design life requirements would be reached even at a deeper depth of discharge.

Mcdermott, J. K.

Ares I-X Ground Diagnostic Prototype

Automating prelaunch diagnostics for launch vehicles offers three potential benefits. First, it potentially improves safety by detecting faults that might otherwise have been missed so that they can be corrected before launch. Second, it potentially reduces launch delays by more quickly diagnosing the cause of anomalies that occur during prelaunch processing. Reducing launch delays will be critical to the success of NASA's planned future missions that require in-orbit rendezvous. Third, it potentially reduces costs by reducing both launch delays and the number of people needed to monitor the prelaunch process. NASA is currently developing the Ares I launch vehicle to bring the Orion capsule and its crew of four astronauts to low-earth orbit on their way to the moon. Ares I-X will be the first unmanned test flight of Ares I. It is scheduled to launch on October 27, 2009. The Ares I-X Ground Diagnostic Prototype is a prototype ground diagnostic system that will provide anomaly detection, fault detection, fault isolation, and diagnostics for the Ares I-X first-stage thrust vector control (TVC) and for the associated ground hydraulics while it is in the Vehicle Assembly Building (VAB) at John F. Kennedy Space Center (KSC) and on the launch pad. It will serve as a prototype for a future operational ground diagnostic system for Ares I. The prototype combines three existing diagnostic tools. The first tool, TEAMS (Testability Engineering and Maintenance System), is a model-based tool that is commercially produced by Qualtech Systems, Inc. It uses a qualitative model of failure propagation to perform fault isolation and diagnostics. We adapted an existing TEAMS model of the TVC to use for diagnostics and developed a TEAMS model of the ground hydraulics. The second tool, Spacecraft Health Inference Engine (SHINE), is a rule-based expert system developed at the NASA Jet Propulsion Laboratory. We developed SHINE rules for fault detection and mode identification. The prototype uses the outputs of SHINE as inputs to TEAMS. The third tool, the Inductive Monitoring System (IMS), is an anomaly detection tool developed at NASA Ames Research Center and is currently used to monitor the International Space Station Control Moment Gyroscopes. IMS automatically "learns" a model of historical nominal data in the form of a set of clusters and signals an alarm when new data fails to match this model. IMS offers the potential to detect faults that have not been modeled. The three tools have been integrated and deployed to Hangar AE at KSC where they interface with live data from the Ares I-X vehicle and from the ground hydraulics. The outputs of the tools are displayed on a console in Hangar AE, one of the locations from which the Ares I-X launch will be monitored. In a previous publication, we discussed how we selected the three tools based primarily on their ability to be certified for human spaceflight and described our plans for the prototype. This abstract is due October 23, 2009, and the Ares I-X launch is currently scheduled for October 27, 2009. If this abstract is accepted, then the full paper will describe how the prototype performed before the launch. It will include an analysis of the prototype's accuracy, including false-positive rates, false-negative rates, and receiver operating characteristics (ROC) curves. It will also include a description of the prototype's computational requirements, including CPU usage, main memory usage, and disk usage. If the prototype detects any faults during the prelaunch period then the paper will include a description of those faults. Similarly, if the prototype has any false alarms then the paper will describe them and will attempt to explain their causes. Also, the paper will describe the three tools and how they are used in the prototype. It will include a description of the TEAMS models of the Ares I-X first-stage TVC and associated ground hydraulics and how we adapted the TVC model for use in real-time diagnostics. It will describe the SHINE rules used for fault detection and mode identification and the software architecture that interfaces the various pieces of existing software that are part of the prototype to one another. It will describe how we selected the sensor values and commands that were used to train the IMS model and how we optimized the number of clusters in the IMS model. It will include screen shots of the graphical display that we developed in Java to display the outputs of the three tools. Because Ares I-X data was not yet available to us while we were developing the prototype, we used historical data from the Space Shuttle's Solid Rocket Booster (SRB) TVCs and the associated ground hydraulics to train IMS and to test the entire prototype. Because most of the failure modes that we modeled have never occurred in the Shuttle we inserted simulated failures into the Shuttle data. The Ares I-X first-stage TVC is very similar to the SRB TVC and we expect the data will be very similar. After the launch, we will determine how similar the data actually is and report how any differences in the data affected the diagnostic accuracy of the prototype. Finally, although we did not get the prototype certified, we designed it in a way that it could be certified and wrote a preliminary certification plan. The paper will include a brief summary of how we considered the need for certification in the design of the prototype, how we tested the prototype before deploying it to Hangar AE, and how we would propose to get it certified if it were deployed as an operational system. The paper will conclude with a description of some of the challenges we faced and some of the lessons learned in developing and deploying the prototype.

International Space Station

Hypervelocity Impact Testing of Nickel Hydrogen Battery Cells

Nickel-Hydrogen (Ni/H2) battery cells have been used on several satellites and are planned for use on the International Space Station. In January 1992, the NASA Lewis Research Center (LeRC) conducted hypervelocity impact testing on Ni/H2 cells to characterize their failure modes. The cell's outer construction was a 24 mil-thick Inconel 718 pressure vessel. A sheet of 1.27 cm thick honeycomb was placed in front of the battery cells during testing to simulate the on-orbit box enclosure. Testing was conducted at the NASA White Sands Test Facility (WSTF). The hypervelocity gun used was a 7.6 mm (0.30 caliber) two-stage light gas gun. Test were performed at speeds of 3, 6, and 7 km/sec using aluminum 2017 spherical particles of either 4.8 or 6.4 mm diameter as the projectile. The battery cells were electrically charged to about 75 percent of capacity, then back-filled with hydrogen gas to 900 psi simulating the full charge condition. High speed film at 10,000 frames/sec was taken of the impacts. Impacts in the dome area (top) and the electrode area (middle) of the battery cells were investigated. Five tests on battery cells were performed. The results revealed that in all of the test conditions investigated, the battery cells simply vented their hydrogen gas and some electrolyte, but did not burst or generate any large debris fragments.

Frate, David T.

Revisiting the Soyuz-1 Parachute Failure in the Context of Safety in the Modern Era

The Soyuz‑1 accident remains one of the most consequential parachute related failures in human spaceflight history and provides enduring lessons for modern Entry, Descent, and Landing (EDL) system design. Occurring during the height of the Cold War and the Space Race, the mission unfolded under extraordinary political and schedule pressure as the Soviet Union sought to maintain its early leadership in space achievements following the death of chief designer Sergei Korolev. Despite unresolved propulsion, electrical, and parachute system deficiencies, Soyuz‑1 proceeded to launch and immediately encountered critical inflight anomalies, including a failed solar panel deployment, attitude control issues, and communication dropouts. Upon reentry, a malfunction in the parachute system, driven by a primary main canopy that failed to deploy, and subsequent entanglement of the reserve main canopy with the primary drogue parachute, resulted in insufficient deceleration and the fatal crash of cosmonaut Vladimir Komarov. Subsequent investigations revealed deep rooted cultural and organizational issues within the Soviet space program, including inadequate testing, suppression of dissent, undocumented last minute design changes, and the absence of integrated parachute system verification. More than 200 design flaws were identified after the accident, and firsthand accounts, including those from Yuri Gagarin, highlighted widespread concern prior to launch. Over time, the Soviet program implemented substantial reforms: systematic design corrections, rigorous process documentation, and an extensive series of drop tests that ultimately transformed the Soyuz system into one of the world’s most reliable human-rated return vehicles. This paper examines the technical architecture of the Soyuz‑1 parachute system, reconstructs the likely deployment sequence and failure mechanism, and analyzes the cultural contributors that shaped the accident. The study draws parallels to modern spacecraft parachute development, emphasizing the critical importance of integrated system testing, transparent engineering culture, and continuous hardware surveillance. These lessons remain directly relevant to today’s NASA and Commercial Crew Programs (CCP), where the Government continues to refine its understanding of aggregate risk and strengthen overall astronaut safety in the face of increasingly complex parachute systems.

Aaron L Morris

The Effects of Lunar Dust on EVA Systems During the Apollo Missions

Mission documents from the six Apollo missions that landed on the lunar surface have been studied in order to catalog the effects of lunar dust on Extra-Vehicular Activity (EVA) systems, primarily the Apollo surface space suit. It was found that the effects could be sorted into nine categories: vision obscuration, false instrument readings, dust coating and contamination, loss of traction, clogging of mechanisms, abrasion, thermal control problems, seal failures, and inhalation and irritation. Although simple dust mitigation measures were sufficient to mitigate some of the problems (i.e., loss of traction) it was found that these measures were ineffective to mitigate many of the more serious problems (i.e., clogging, abrasion, diminished heat rejection). The severity of the dust problems were consistently underestimated by ground tests, indicating a need to develop better simulation facilities and procedures.

James R Gaier

The Effects of Lunar Dust on EVA Systems During the Apollo Missions

Mission documents from the six Apollo missions that landed on the lunar surface have been studied in order to catalog the effects of lunar dust on Extra-Vehicular Activity (EVA) systems, primarily the Apollo surface space suit. It was found that the effects could be sorted into nine categories: vision obscuration, false instrument readings, dust coating and contamination, loss of traction, clogging of mechanisms, abrasion, thermal control problems, seal failures, and inhalation and irritation. Although simple dust mitigation measures were sufficient to mitigate some of the problems (i.e., loss of traction) it was found that these measures were ineffective to mitigate many of the more serious problems (i.e., clogging, abrasion, diminished heat rejection). The severity of the dust problems were consistently underestimated by ground tests, indicating a need to develop better simulation facilities and procedures.

James R Gaier

Simplified Aid for Extra-Vehicular Activity Rescue (SAFER) Battery Assessment

In 2013, the Boeing Company model 787-8 Dreamliner commercial aircraft experienced three catastrophic lithium (Li) battery failures. The cause of each failure resulted in a single-cell thermal runaway (TR) condition, which propagated to adjacent battery cells. Two of the failures involved rechargeable lithium-ion (Li-Ion) batteries, and the third event involved a nonrechargeable lithium-manganese dioxide (Li-MnO2) battery. In response to these Li battery failures, the NASA Engineering and Safety Center (NESC) approved a technical assessment of the International Space Station Simplified Aid for Extra-Vehicular Activity Rescue (SAFER) Li non-rechargeable battery. This assessment was conducted to evaluate the SAFER Li nonrechargeable battery safety design features against Boeing 787 Dreamliner Li battery failure lessons learned. Specifically, this investigation focused on assessing the severity of a SAFER battery TR hazard conditions.

Iannello, Christopher J.

Hubble Space Telescope On-orbit NiH2 Battery Performance

This paper summarizes the Hubble Space Telescope (HST) nickel-hydrogen (NiH2) battery performance from launch to the present time. Over the life of HST vehicle configuration, charge system degradation and failures together with thermal design limitations have had a significant effect on the capacity of the HST batteries. Changes made to the charge system configuration in order to protect against power system failures and to maintain battery thermal stability resulted in undercharging of the batteries. This undercharging resulted in decreased usable battery capacity as well as battery cell voltage/capacity divergence. This cell divergence was made evident during on-orbit battery capacity measurements by a relatively shallow slope of the discharge curve following the discharge knee. Early efforts to improve the battery performance have been successful. On-orbit capacity measurement data indicates increases in the usable battery capacity of all six batteries as well as improvements in the battery cell voltage/capacity divergence. Additional measures have been implemented to improve battery performance, however, failures within the HST Power Control Unit (PCU) have prevented verification of battery status. As this PCU fault prevents the execution of on-orbit capacity testing, the HST Project has based the battery capacity on trends, which utilizes previous on-orbit battery capacity test data, for science mission and servicing mission planning. The Servicing Mission 38 (SM-3B) in March 2002 replaced the faulty PCU. Following the servicing mission, on-orbit capacity test resumed. A summary of battery performance is reviewed since launch in this paper.

Rao, Gopalakrishna M.

CAE for Thermal Management of Aerospace Electronic Boards Using the BETAsoft Program

Aerospace electronic boards require special attention to thermal management due to constraints such as their need to be light, small, and maintain high power densities. Also, cooling is mainly through conductive and radiative modes with minor or negligible convective cooling. Due to these particular requirements, thermal design has become an integrated part of the electronic design process in order to avoid expensive repeat prototyping and to ensure high reliability. To achieve high speed simulations, the BETAsoft code uses semi-empirical formulations and an advanced finite difference scheme that incorporates local adaptive grids. Detailed conduction, convection and radiation heat transfer is considered. Various benchmark verifications of the software simulation compared to infrared images typically prove to be within 10% of each other. The thermal analysis of a sample avionic card in a natural convection environment is shown. Then, the individual effects of attaching metal screws to the casing, increasing radiative emissivities of the casing, increasing the conductance of the wedge lock, adding an aluminum core to the board, adding metal strips in board layers, inserting conduction pads under components, and adding heat sinks to components are demonstrated.

Kimberly Bobish

Multiscale Modeling of Fracture Strength in Fibrous Thermal Protection System Materials

This work presents a multiscale modeling approach to predict the fracture strength of fibrous Thermal Protection System (TPS) materials. The model assumes that system failure is initiated at the joints between individual fibers. We investigated three distinct TPS compositions: amorphous silica, alumina and aluminosilicate fibers. Molecular dynamics (MD) simulations were employed to determine the fracture strength values of these fiber joints for both material systems. These fracture strength values were then integrated into simulations of 3D randomly populated fiber structures, where tensile load transfer occurs through the fiber joints. These microscale properties are upscaled through a renormalization approach [1] to predict macroscale tensile strength of 3D random fiber networks, accounting for joint-dominated failure and effective load-bearing area. The study concludes by demonstrating the resulting strength variation as a function of material composition, fiber density, and morphology. We also show validation of results by comparing them against explicit fiber finite element (FE) modeling [2] where fiber joint fracture is represented by cohesive elements.

Jaehyun Cho

Reliability Analysis of Single Crystal NiAl Turbine Blades

As part of a co-operative agreement with General Electric Aircraft Engines (GEAE), NASA LeRC is modifying and validating the Ceramic Analysis and Reliability Evaluation of Structures algorithm for use in design of components made of high strength NiAl based intermetallic materials. NiAl single crystal alloys are being actively investigated by GEAE as a replacement for Ni-based single crystal superalloys for use in high pressure turbine blades and vanes. The driving force for this research lies in the numerous property advantages offered by NiAl alloys over their superalloy counterparts. These include a reduction of density by as much as a third without significantly sacrificing strength, higher melting point, greater thermal conductivity, better oxidation resistance, and a better response to thermal barrier coatings. The current drawback to high strength NiAl single crystals is their limited ductility. Consequently, significant efforts including the work agreement with GEAE are underway to develop testing and design methodologies for these materials. The approach to validation and component analysis involves the following steps: determination of the statistical nature and source of fracture in a high strength, NiAl single crystal turbine blade material; measurement of the failure strength envelope of the material; coding of statistically based reliability models; verification of the code and model; and modeling of turbine blades and vanes for rig testing.

Joseph Palko