SEARCH · Search NASA
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
Digital autopilot systems were first used on commercial airplanes in the late 1970s. The A-320 airplane was the first air transport airplane with a fly-by-wire primary flight control system. On the 767-X (777) airplane Boeing will install all fly-by-wire flight controls. Activities related to safety, industry status and program phases are discussed.
Monsanto's emergency response plan in dealing with hazardous materials at their facilities is presented. Topics discussed include the following: CPR training; emergency medial training; incident reports; contractor injuries; hazardous materials transport; evacuation; and other industrial safety concerns.
This paper describes the structural performance evaluation of a replacement adhesive for the Reusable Solid Rocket Motor (RSRM) nozzle utilizing finite element analysis. Due to material obsolescence and industrial safety issues, the two current structural adhesives, EA 913 and EA 946 are to be replaced with a new adhesive. TIGA 321. The structural evaluation in support of the adhesive replacement effort includes residual stress, transportation, and flight analyses. Factors of safety are calculated using the stress response from each analysis. The factors of safety are used as the limiting criteria to compare the replacement adhesive against the current adhesives. Included in this paper are the analytical approach, assumptions and modeling techniques as well as the results of the evaluation. An important factor to the evaluation is the similarity in constitutive material properties (elastic modulus and Poisson's ratio) between TIGA 321 and EA 913. This similarity leads to equivalent material response from the two adhesives. However, TIGA 321 surpasses EA 913's performance due to higher material capabilities. Conversely, the change in stress response from EA 946 to TIGA 321 is more apparent: this is primarily attributed to the difference in the modulii of the two adhesives, which differ by two orders of magnitude. The results of the bondline evaluation indicate that the replacement adhesive provides superior performance than the current adhesives with only minor exceptions. Furthermore, TIGA 321 causes only a minor chance in the response of the phenolic and metal components.
Few developers of commercial aviation software products are using object-oriented technology (OOT), despite its popularity in some other industries. Safety concerns about using OOT in critical applications, uncertainty about how to comply with regulatory requirements, and basic conservatism within the aviation community have been factors behind this caution. The Federal Aviation Administration (FAA) and the National Aeronautics and Space Administration (NASA) have sponsored research to investigate and workshops to discuss safety and certification concerns about OOT and to develop recommendations for safe use. Two Object Oriented Technology in Aviation (OOTiA) workshops have been held and numerous issues and comments about the effect of OOT features and languages have been collected. This paper gives a high level overview of the OOTiA project, and discusses selected specific results from the March 2003 workshop. In particular, results in the form of questions to consider before making the decision to use OOT are presented.
Automatic or skill-based behaviour is generally considered to be less prone to error than behaviour directed by conscious control. However, researchers who have applied Rasmussen's skill-rule-knowledge human error framework to accidents and incidents have sometimes found that skill-based errors appear in significant numbers. It is proposed that this is largely a reflection of the opportunities for error which workplaces present and does not indicate that skill-based behaviour is intrinsically unreliable. In the current study, 99 errors reported by 72 aircraft mechanics were examined in the light of a task analysis based on observations of the work of 25 aircraft mechanics. The task analysis identified the opportunities for error presented at various stages of maintenance work packages and by the job as a whole. Once the frequency of each error type was normalized in terms of the opportunities for error, it became apparent that skill-based performance is more reliable than rule-based performance, which is in turn more reliable than knowledge-based performance. The results reinforce the belief that industrial safety interventions designed to reduce errors would best be directed at those aspects of jobs that involve rule- and knowledge-based performance.
The risk of infectious disease to select individuals has historically been difficult to predict in either spaceflight or on Earth with health care efforts relying on broad-based prevention and post-infection treatment. Over the past 10 years, quantitative microbial risk assessment evaluations have evolved to formalize the assessment process and quantify the risk. This process of hazard identification, exposure assessment, dose-response assessment, and risk characterization has been applied by the water and food safety industries to address the public health impacts associated with the occurrence of and human exposure to pathogens in water and food for the development of preventive strategies for microbial disease. NASA is currently investigating the feasibility of using these techniques to better understand the risks to astronauts and refine their microbiological requirements. To assess these techniques, NASA began an evaluation of the potable water system on the International Space Station to determine how the microbial risk from water consumption during flight differed from terrestrial sources, such as municipal water systems. The ultimate goal of this work is to optimize microbial requirements which would minimize unnecessary cargo and use of crew time, while still protecting the health of the crew. Successful demonstration of this risk assessment framework with the water system holds the potential to maximize the use of available resources during spaceflight missions and facilitate investigations into the evaluation of other routes of infection, such as through the spaceflight foods system.
This project addresses a gap observed in verifying the programming in embedded devices used in international arms control: namely verifying that embedded programming in an arms control device does exactly what it is supposed to do, no more and no less, every time without fail, and without disclosing unauthorized information accidentally or intentionally. In critical military, aerospace, and industrial safety systems this problem is sometimes addressed using formal methods (FM). This multi-year project seeks to identify formal methods toolsets useable in arms control regimes, with emphasis on applicability, ease of use, long term availability, and support.
Booklet provides references to 29 publications providing information on hazard control and approved safety practices. Areas include pressurized gas and vacuum systems. Guidelines are presented for safeguarding facilities where machinery, equipment, electrical devices, or hazardous chemicals are used.
This dissertation bridges the gap between industrial cybersecurity and traditional process safety by introducing an integrated Cyber-LOPA framework that combines the Purdue Enterprise Reference Architecture, Cyber Kill Chain, and CVSS v4.0 metrics. Demonstrated on a High-Density Polyethylene slurry process, the work illustrates how cyber threats targeting automation systems can bypass physical protection layers, proving the necessity of unified risk assessments to prevent cyber-induced physical incidents in chemical manufacturing plants.
The ControlNet industrial communications protocol and modules used in the Industrial Control System (ICS) and Safety Interlock System (SIS) at the National Ignition Facility (NIF) are no longer necessary and the ICS and SIS would be better served by migrating the communications structure to use EtherNet/Industrial Protocol (IP) and EtherNet bridge modules instead. By the admission of the vendor of ControlNet hardware, Rockwell Automation, in literature by Bill Petro [1], “Moving forward, customers will be able to optimize their asset utilization better using EtherNet/IP protocol than with ControlNet.” The NIF is one of the key elements of the Inertial Confinement Fusion (ICF) program at Lawrence Livermore National Laboratory (LLNL), a federally funded research and development center (FFRDC). The NIF contains the systems and provides the operational capacity to perform ICF, high energy density (HED), and discovery science experiments utilizing 192 individual beamlines, a host of diagnostics, and all the industrial systems required to facilitate these beamlines and diagnostics. The industrial systems are governed by the ICS and SIS, with the ICS providing control and the SIS providing monitoring and permissives. Construction on the NIF began in 1997 and was certified complete in 2009 and, as a result, the ICS and SIS were developed during this time using the tools that were available then. This includes the communications structure and protocols for these systems, much of which was, and still is, ControlNet. ControlNet, particularly during the time that the ICS and SIS were being built, has several attractive features. ControlNet hardware is exclusive to Rockwell Automation, which was the automation hardware chosen for the ICS and SIS. One feature that could be considered an advantage or a disadvantage depending on the communication needs of the system is that ControlNet also utilizes no active network components, excluding repeaters which are not always necessary. According to the architect of the ICS system at the NIF, Gordon Lau, one of the most attractive features of the ControlNet protocol during development of the ICS and SIS was that it is deterministic, providing timing of data transfer that is executed exactly as it is defined by the developer.
All industrial facilities deal with safety hazards such as equipment failures, chemical and toxic releases, and fires and explosions just to name a few. A disciplined framework for managing the integrity of operating systems and processes that handle hazardous substances by applying good design principles, engineering, and operating practices is called process safety. The goal of such framewoks is to prevent the release of energy or material that could cause harm to people or damage to equipment and/or environment. Process safety covers all aspects of facility operation also including design, maintenance, and human and organizational factors that could possibly have effect on process safety. As it will be seen from the discussion below, process safety is just one of the pieces of the much bigger matter, a safety culture. Many industries have long recognized the importance of safety culture in their day-to-day operation. Although the definition of safety culture can slightly differ from organization to organization, in general, a safety culture is how things are done to demonstrate a commitment to safety by everyone involved. An organization acquires safety culture over time as the product of individual and group values, actions, and behaviors toward overall safety. It is important to note that safety culture should not be viewed as some static state that an organization wants to reach. It is more like a constantly evolving level of “how things are done when nobody is watching.” Safety culture is an inherent characteristic of an organization, it is always present, but the level can range on a continuum from undesirable to desirable or more commonly used, from negative to positive. An example for an undesirable, negative safety culture would be a company in which accidents resulting in harm (physical and/or emotional) of its employees, equipment or surrounding environment and community occur frequently. At the other end of the spectrum would be a company in which such accidents are rare or do not occur at all (desired or positive safety culture). Every company/industry exists somewhere within this spectrum.
An educational program, designed to train students with the specific skills needed to become safety specialists, is described. The discussion concentrates on application, selection, and utilization of various system safety analytical approaches. Emphasis is also placed on the management of a system safety program, its relationship with other disciplines, and new developments and applications of system safety techniques.
Safety and accident prevention programs in industry, at launching facilities, and at NASA HEADQUARTERS
Probabilistic structural analyses and design methods are steadily gaining acceptance within the aerospace industry. The safety factor approach to design has long been the industry standard, and it is believed by many to be overly conservative and thus, costly. A probabilistic approach to design may offer substantial cost savings. This report summarizes several probabilistic approaches: the probabilistic failure analysis (PFA) methodology developed by Jet Propulsion Laboratory, fast probability integration (FPI) methods, the NESSUS finite element code, and response surface methods. Example problems are provided to help identify the advantages and disadvantages of each method.
Facilities that machine and process materials involving beryllium oxide are hazardous to workers safety and require monitoring of contamination. A primary goal in industrial worker safety in beryllium containing facilities is avoiding inhalation, which may cause chronic beryllium disease (CBD). Decontamination is labor intensive due to the miniscule size of beryllium dust and the difficulty of detecting its presence on surfaces. Current methods of beryllium detection, while successful, involve numerous intermediate steps such as obtaining wipe samples, applying buffers, centrifuging with ammonium bifluoride, additives to reduce influence of other competing metal ions, and require potentially long wait times of around 24 hours for a single surface sample. In some cases, these samples must be sent to testing facilities across the country and results may not be available for days. Therefore, for the purposes of this study, it has been deemed important to test new fluorescent dyes that can rapidly produce a beryllium presence confirmation via application spray.
Incident/accident information exchange system for hazard information flow to safety teams
Safety handbook for personnel handling liquid propellants
We introduce hierarchical safety cases (or hicases) as a technique to overcome some of the difficulties that arise creating and maintaining industrial-size safety cases. Our approach extends the existing Goal Structuring Notation with abstraction structures, which allow the safety case to be viewed at different levels of detail. We motivate hicases and give a mathematical account of them as well as an intuition, relating them to other related concepts. We give a second definition which corresponds closely to our implementation of hicases in the AdvoCATE Assurance Case Editor and prove the correspondence between the two. Finally, we suggest areas of future enhancement, both theoretically and practically.