Search NASA⌕ Search

SEARCH · Search NASA

Results for “dynamic assurance case”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 37 records · Page 2
All sourcesNASA NTRSDOE OSTI
NASA NTRS2013

Structural Dynamics Modeling of HIRENASD in Support of the Aeroelastic Prediction Workshop

An Aeroelastic Prediction Workshop (AePW) was held in April 2012 using three aeroelasticity case study wind tunnel tests for assessing the capabilities of various codes in making aeroelasticity predictions. One of these case studies was known as the HIRENASD model that was tested in the European Transonic Wind Tunnel (ETW). This paper summarizes the development of a standardized enhanced analytical HIRENASD structural model for use in the AePW effort. The modifications to the HIRENASD finite element model were validated by comparing modal frequencies, evaluating modal assurance criteria, comparing leading edge, trailing edge and twist of the wing with experiment and by performing steady and unsteady CFD analyses for one of the test conditions on the same grid, and identical processing of results.

Wieseman, Carol↗
NASA NTRS2018

Runtime Assurance Protection for Advanced Turbofan Engine Control

This paper describes technical progress made in the application of run time assurance (RTA) methods to turbofan engines with advanced propulsion control algorithms that are employed to improve engine performance. It is assumed that the advanced algorithms cannot be fully certified using current verification and validation approaches and therefore need to be continually monitored by an RTA system that ensures safe operation. However, current turbofan engine control systems utilize engine protection logic for safe combustion dynamics and stable airflow through the engine. It was determined that the engine protection logic should continue to be used to provide system safety and should be considered as a part of the overall RTA system. The additional function that an RTA system provides is to perform diagnostics on anomalous conditions to determine if these conditions are being caused by errors in the advanced controller. If this is the case, the RTA system switches operation to a trusted reversionary controller. Initial studies were performed to demonstrate this benefit. The other focus was to improve the performance of the engine protection logic, which was deemed too conservative and reduced engine performance during transient operations. It was determined that the conservative response was due to poor tuning of one of the controller channels within the protection logic. An automatic tuning algorithm was implemented to optimize the protection logic control gains based on minimizing tracking error. Improved tracking responses were observed with no change to the existing protection logic control architecture.

runtime monitoring↗
NASA NTRS2004

Two Formal Gas Models For Multi-Agent Sweeping and Obstacle Avoidance

The task addressed here is a dynamic search through a bounded region, while avoiding multiple large obstacles, such as buildings. In the case of limited sensors and communication, maintaining spatial coverage - especially after passing the obstacles - is a challenging problem. Here, we investigate two physics-based approaches to solving this task with multiple simulated mobile robots, one based on artificial forces and the other based on the kinetic theory of gases. The desired behavior is achieved with both methods, and a comparison is made between them. Because both approaches are physics-based, formal assurances about the multi-robot behavior are straightforward, and are included in the paper.

Kerr, Wesley↗
NASA NTRS2005

Modal Survey of ETM-3, A 5-Segment Derivative of the Space Shuttle Solid Rocket Booster

The complex interactions between internal motor generated pressure oscillations and motor structural vibration modes associated with the static test configuration of a Reusable Solid Rocket Motor have potential to generate significant dynamic thrust loads in the 5-segment configuration (Engineering Test Motor 3). Finite element model load predictions for worst-case conditions were generated based on extrapolation of a previously correlated 4-segment motor model. A modal survey was performed on the largest rocket motor to date, Engineering Test Motor #3 (ETM-3), to provide data for finite element model correlation and validation of model generated design loads. The modal survey preparation included pretest analyses to determine an efficient analysis set selection using the Effective Independence Method and test simulations to assure critical test stand component loads did not exceed design limits. Historical Reusable Solid Rocket Motor modal testing, ETM-3 test analysis model development and pre-test loads analyses, as well as test execution, and a comparison of results to pre-test predictions are discussed.

Nielsen, D.↗
NASA NTRS1997

Structural Design and Analysis of a Light-Weight Laminated Composite Heat Sink for Spaceflight PWBs

In order to reduce the overall weight in spaceborne electronic systems, a conventional metallic heat sink typically used for double-sided printed wiring boards was suggested to be replaced by light-weight and high-strength laminated composite materials. Through technology validation assurance (TVA) approach, it has been successfully demonstrated that using laminated composite heat sink can not only reduce the weight of the heat sink by nearly 50%, but also significantly lower the internal thermally-induced stresses that are largely responsible for potential delamination under cyclic temperature variations. With composite heat sink, both thermal and dynamic performance of the double-sided printed wiring board (PWB) exceeds that of its counterpart with metallic heat sink. Also included in this work is the original contribution to the understanding of creep behavior of the worst-case leadless chip carrier (LCC) surface mount solder joint. This was identified as the interconnection most susceptible to thermal fatigue damage in the PWB assembly.

Fan, Mark S.↗
NASA NTRS1994

Predictive sufficiency and the use of stored internal state

In all embedded computing systems, some delay exists between sensing and acting. By choosing an action based on sensed data, a system is essentially predicting that there will be no significant changes in the world during this delay. However, the dynamic and uncertain nature of the real world can make these predictions incorrect, and thus, a system may execute inappropriate actions. Making systems more reactive by decreasing the gap between sensing and action leaves less time for predictions to err, but still provides no principled assurance that they will be correct. Using the concept of predictive sufficiency described in this paper, a system can prove that its predictions are valid, and that it will never execute inappropriate actions. In the context of our CIRCA system, we also show how predictive sufficiency allows a system to guarantee worst-case response times to changes in its environment. Using predictive sufficiency, CIRCA is able to build real-time reactive control plans which provide a sound basis for performance guarantees that are unavailable with other reactive systems.

Musliner, David J.↗
NASA NTRS1986

Two time scale output feedback regulation for ill-conditioned systems

Issues pertaining to the well-posedness of a two time scale approach to the output feedback regulator design problem are examined. An approximate quadratic performance index which reflects a two time scale decomposition of the system dynamics is developed. It is shown that, under mild assumptions, minimization of this cost leads to feedback gains providing a second-order approximation of optimal full system performance. A simplified approach to two time scale feedback design is also developed, in which gains are separately calculated to stabilize the slow and fast subsystem models. By exploiting the notion of combined control and observation spillover suppression, conditions are derived assuring that these gains will stabilize the full-order system. A sequential numerical algorithm is described which obtains output feedback gains minimizing a broad class of performance indices, including the standard LQ case. It is shown that the algorithm converges to a local minimum under nonrestrictive assumptions. This procedure is adapted to and demonstrated for the two time scale design formulations.

Calise, A. J.↗
NASA NTRS1983

LANDSAT-4 sensor performance

Preflight and in-orbit sensor and data measurements indicate that TM meets or exceeds most specifications. Measured spectral band edges meet instrument specifications in 12 out of 14 cases; there is ample dynamic range. The signal-to-noise ratio exceeds specifications, except for band 3, channel 4; and band 7 channel 7 is very noisy but still meets specifications. The modulation transfer function of channel 4, band 2, is smaller than specified. Registration errors between the primary focal plane (PFP) and the cold focal plane (CFP) are about 0.75 pixels along-scan and 0.2 pixels across scan. Forward and reverse scan discontinuities, are well within ground-processing capabilities to rectify. Instrument gain variability, up to 7% for band 5, requires use of the internal calibration (IC) system to assure radiometric accuracy. Preliminary applications evaluation of image contents indicates that TM provides much better definition of edges than MSS.

Barker, J. L.↗
NASA NTRS1984

Landsat-4 sensor performance

Preflight and in-orbit sensor and data measurements indicate that TM meets or exceeds most specifications. Measured spectral band edges meet instrument specifications in 12 out of 14 cases; there is ample dynamic range. The signal-to-noise ratio exceeds specifications, except for band 3, channel 4; and band 7 channel 7 is very noisy but still meets specifications. The modulation transfer function of channel 4, band 2, is smaller than specified. Registration errors between the primary focal plane (PFP) and the cold focal plane (CFP) are about 0.75 pixels along-scan and 0.2 pixels across scan. Forward and reverse scan discontinuities are well within ground-processing capabilities to rectify. Instrument gain variability, up to 7 percent for band 5, requires use of the internal calibration (IC) system to assure radiometric accuracy. Preliminary applications evaluation of image contents indicates that TM provides much better definition of edges than MSS.

Barker, J. L.↗
NASA NTRS1999

A New Compendium of Unsteady Aerodynamic Test Cases for CFD: Summary of AVT WG-003 Activities

With the continuous progress in hardware and numerical schemes, Computational Unsteady Aerodynamics (CUA), that is, the application of Computational Fluid Dynamics (CFD) to unsteady flowfields, is slowly finding its way as a useful and reliable tool (turbulence and transition modeling permitting) in the aircraft, helicopter, engine and missile design and development process. Before a specific code may be used with confidence it is essential to validate its capability to describe the physics of the flow correctly, or at least to the level of approximation required, for which purpose a comparison with accurate experimental data is needed. Unsteady wind tunnel testing is difficult and expensive; two factors which dramatically limit the number of organizations with the capability and/or resources to perform it. Thus, unsteady experimental data is scarce, often classified and scattered in diverse documents. Additionally, access to the reports does not necessarily assure access to the data itself. The collaborative effort described in this paper was conceived with the aim of collecting into a single easily accessible document as much quality data as possible. The idea is not new. In the early 80's NATO's AGARD (Advisory Group for Aerospace Research & Development) Structures and Material Panel (SMP) produced AGARD Report No. 702 "Compendium of Unsteady Aerodynamic Measurements", which has found and continues to find extensive use within the CUA Community. In 1995 AGARD's Fluid Dynamics Panel (FDP) decided to update and expand the former database with new geometries and physical phenomena, and launched Working Group WG-22 on "Validation Data for Computational Unsteady Aerodynamic Codes". Shortly afterwards AGARD was reorganized as the RTO (Research and Technology Organization) and the WG was renamed as AVT (Applied Vehicle Technolology) WG-003. Contributions were received from AEDC, BAe, DLR, DERA, Glasgow University, IAR, NAL, NASA, NLR, and ONERA. The final publication with the results of the exercise is expected in the second part of 1999. The aim of the present paper is to announce and present the new database to the Aeroelasticity community. It is also intended to identify, together with one of the groups of end users it targets, deficiencies in the compendium that should be addressed by means of new wind tunnel tests or by obtaining access to additionally existing data.

Ruiz-Calavera, Luis P.↗
NASA NTRS2022

A Framework for Dynamic Architecture and Functional Allocations for Increasing Airspace Autonomy

To enable scalability of air travel for use cases such as cargo delivery, it is anticipated that future air traffic operations will involve unmanned aircraft operated by remote pilots. Of particular interest are schemes where a small number of pilots operate a large number of vehicles, mitigating high cost and pilot shortage issues. Such architectures require increased levels of automation and supervisory control modes. They also require ensuring safe operations when the command and control link to the vehicle is degraded or lost completely, rendering the vehicle autonomous. To evaluate these variable and dynamic architectures, this paper will present a framework for decomposing the functions necessary to ensure safe, orderly, and expeditious air travel, assessing the agents in the system, and classifying the levels of autonomy. Then, an example allocation to agents of roles for the function of separation assurance is presented, highlighting the dependency of the allocation on three main factors: time criticality of a potential separation violation, the ratio of pilots to vehicles, and the loss of the command and control link.

air traffic management, function allocation, auton↗
NASA NTRS2022

A Framework for Dynamic Architecture and Functional Allocations for Increasing Airspace Autonomy

To enable scalability of air travel for use cases such as cargo delivery, it is anticipated that future air traffic operations will involve unmanned aircraft operated by remote pilots. Of particular interest are schemes where a small number of pilots operate a large number of vehicles, mitigating high cost and pilot shortage issues. Such architectures require increased levels of automation and supervisory control modes. They also require ensuring safe operations when the command and control link to the vehicle is degraded or lost completely, rendering the vehicle autonomous. To evaluate these variable and dynamic architectures, this paper will present a framework for decomposing the functions necessary to ensure safe, orderly, and expeditious air travel, assessing the agents in the system, and classifying the levels of autonomy. Then, an example allocation to agents of roles for the function of separation assurance is presented, highlighting the dependency of the allocation on three main factors; time criticality of a potential separation violation, the ratio of pilots to vehicles, and the loss of the command and control link.

air traffic management↗
NASA NTRS1997

An Automated Method for Identifying Inconsistencies within Diagrammatic Software Requirements Specifications

The development of large-scale, composite software in a geographically distributed environment is an evolutionary process. Often, in such evolving systems, striving for consistency is complicated by many factors, because development participants have various locations, skills, responsibilities, roles, opinions, languages, terminology and different degrees of abstraction they employ. This naturally leads to many partial specifications or viewpoints. These multiple views on the system being developed usually overlap. From another aspect, these multiple views give rise to the potential for inconsistency. Existing CASE tools do not efficiently manage inconsistencies in distributed development environment for a large-scale project. Based on the ViewPoints framework the WHERE (Web-Based Hypertext Environment for requirements Evolution) toolkit aims to tackle inconsistency management issues within geographically distributed software development projects. Consequently, WHERE project helps make more robust software and support software assurance process. The long term goal of WHERE tools aims to the inconsistency analysis and management in requirements specifications. A framework based on Graph Grammar theory and TCMJAVA toolkit is proposed to detect inconsistencies among viewpoints. This systematic approach uses three basic operations (UNION, DIFFERENCE, INTERSECTION) to study the static behaviors of graphic and tabular notations. From these operations, subgraphs Query, Selection, Merge, Replacement operations can be derived. This approach uses graph PRODUCTIONS (rewriting rules) to study the dynamic transformations of graphs. We discuss the feasibility of implementation these operations. Also, We present the process of porting original TCM (Toolkit for Conceptual Modeling) project from C++ to Java programming language in this thesis. A scenario based on NASA International Space Station Specification is discussed to show the applicability of our approach. Finally, conclusion and future work about inconsistency management issues in WHERE project will be summarized.

Zhang, Zhong↗
NASA NTRS1997

Teamwork in the Terminal Area: Organizational Issues and Solutions

Dynamic growth and technology advances in commercial aviation have turned the terminal area into a complex, multi-organization workplace which requires the smooth coordination of many operational teams. In addition to pilots, cabin crew, air traffic controllers, and dispatch (who nominally work together throughout a flight), surface operations additionally involve local, ground and ramp controllers, ramp agents, maintenance, dozens of service contractors, and any number of teams who are responsible for airport operations. Under abnormal or emergency conditions, even more teams become actively involved. In order to accommodate growth and to meet productivity and safety challenges, numerous changes are being made in surface operations. Unfortunately, it is often the case that changes in technologies, organizational roles, procedures, and training are developed and implemented in isolated and piecemeal fashion without regard to cross organizational impact. Thus, there is a need for evaluation methodologies which assure integrated system safety for all organizations. Such methodologies should aid the understanding of how organizations work together and how changes in one domain affects the next. In this study, we develop one approach toward addressing these organizational issues. Examples of surface operations in abnormal situations are examined in regard to their impact on personnel in the terminal area. Timelines are given for the responses to incidents, along with the necessary communication links, the specific roles that members of terminal teams have, and any overlapping responsibilities. Suggestions to improve cross-operational teamwork are given. Methods of graphic representation are explored, both in regards to human links and access to information. The outcome of such an approach should enhance the understanding which is critical for resolving organizational conflicts and maximizing system effectiveness.

Parke, Bonny K.↗
NASA NTRS2009

Architectural Analysis of Complex Evolving Systems of Systems

The goal of this collaborative project between FC-MD, APL, and GSFC and supported by NASA IV&V Software Assurance Research Program (SARP), was to develop a tool, Dynamic SAVE, or Dyn-SAVE for short, for analyzing architectures of systems of systems. The project team was comprised of the principal investigator (PI) from FC-MD and four other FC-MD scientists (part time) and several FC-MD students (full time), as well as, two APL software architects (part time), and one NASA POC (part time). The PI and FC-MD scientists together with APL architects were responsible for requirements analysis, and for applying and evaluating the Dyn-SAVE tool and method. The PI and a group of FC-MD scientists were responsible for improving the method and conducting outreach activities, while another group of FC-MD scientists were responsible for development and improvement of the tool. Oversight and reporting was conducted by the PI and NASA POC. The project team produced many results including several prototypes of the Dyn-SAVE tool and method, several case studies documenting how the tool and method was applied to APL s software systems, and several published papers in highly respected conferences and journals. Dyn-SAVE as developed and enhanced throughout this research period, is a software tool intended for software developers and architects, software integration testers, and persons who need to analyze software systems from the point of view of how it communicates with other systems. Using the tool, the user specifies the planned communication behavior of the system modeled as a sequence diagram. The user then captures and imports the actual communication behavior of the system, which is then converted and visualized as a sequence diagram by Dyn-SAVE. After mapping the planned to the actual and specifying parameter and timing constraints, Dyn-SAVE detects and highlights deviations between the planned and the actual behavior. Requirements based on the need to analyze two inter-system communication protocols that are representative of protocols used in the Aerospace industry have been specified. The protocols are related: APL s Common Ground System (CGS) as used in the MErcury Surface, Space ENvironment, GEochemistry, and Ranging (MESSENGER) and the Radiation Belt Space Probes (RBSP) missions. The analyzed communications were implementations of the Telemetry protocol and the CCSDS File Delivery Protocol (CFDP) protocol. Based on these requirements, three prototypes of Dyn-SAVE were developed and applied to these protocols. The application of Dyn-SAVE to these protocols resulted in the detection of several issues. Dyn-SAVE was also applied to several Testbeds that have previously been used for experimentation earlier on this project, as well as, to other protocols and logs for testing its broader applicability. For example, Dyn-SAVE was used to analyze 1) the communication pattern between a web browser and a web server, 2) the system log of a computer in order to detect offnominal computer shut-down behavior, and 3) the actual test cases of NASA Goddard s Core Flight System (CFS) and automatically generated test cases in order to determine the overlap between the two sets of test cases. In all cases, Dyn-SAVE assisted in providing insightful conclusions about each of the cases identified above.

Lindvall, Mikael↗
NASA NTRS2011

Integration of Weather Avoidance and Traffic Separation

This paper describes a dynamic convective weather avoidance concept that compensates for weather motion uncertainties; the integration of this weather avoidance concept into a prototype 4-D trajectory-based Airborne Separation Assurance System (ASAS) application; and test results from a batch (non-piloted) simulation of the integrated application with high traffic densities and a dynamic convective weather model. The weather model can simulate a number of pseudo-random hazardous weather patterns, such as slow- or fast-moving cells and opening or closing weather gaps, and also allows for modeling of onboard weather radar limitations in range and azimuth. The weather avoidance concept employs nested "core" and "avoid" polygons around convective weather cells, and the simulations assess the effectiveness of various avoid polygon sizes in the presence of different weather patterns, using traffic scenarios representing approximately two times the current traffic density in en-route airspace. Results from the simulation experiment show that the weather avoidance concept is effective over a wide range of weather patterns and cell speeds. Avoid polygons that are only 2-3 miles larger than their core polygons are sufficient to account for weather uncertainties in almost all cases, and traffic separation performance does not appear to degrade with the addition of weather polygon avoidance. Additional "lessons learned" from the batch simulation study are discussed in the paper, along with insights for improving the weather avoidance concept. Introduction

Consiglio, Maria C.↗
NASA NTRS1996

CFD Analysis of the 24-inch JIRAD Hybrid Rocket Motor

A series of multispecies, multiphase computational fluid dynamics (CFD) analyses of the 24-inch diameter joint government industry industrial research and development (JIRAD) hybrid rocket motor is described. The 24-inch JIRAD hybrid motor operates by injection of liquid oxygen (LOX) into a vaporization plenum chamber upstream of ports in the hydroxyl-terminated polybutadiene (HTPB) solid fuel. The injector spray pattern had a strong influence on combustion stability of the JIRAD motor so a CFD study was initiated to define the injector end flow field under different oxidizer spray patterns and operating conditions. By using CFD to gain a clear picture of the flow field and temperature distribution within the JIRAD motor, it is hoped that the fundamental mechanisms of hybrid combustion instability may be identified and then suppressed by simple alterations to the oxidizer injection parameters such as injection angle and velocity. The simulations in this study were carried out using the General Algorithm for Analysis of Combustion SYstems (GALACSY) multiphase combustion codes. GALACSY consists of a comprehensive set of droplet dynamic submodels (atomization, evaporation, etc.) and a computationally efficient hydrocarbon chemistry package built around a robust Navier-Stokes solver optimized for low Mach number flows. Lagrangian tracking of dispersed particles describes a closely coupled spray phase. The CFD cases described in this paper represent various levels of simplification of the problem. They include: (A) gaseous oxygen with combusting fuel vapor blowing off the walls at various oxidizer injection angles and velocities, (B) gaseous oxygen with combusting fuel vapor blowing off the walls, and (C) liquid oxygen with combusting fuel vapor blowing off the walls. The study used an axisymmetric model and the results indicate that the injector design significantly effects the flow field in the injector end of the motor. Markedly different recirculation patterns are observed in the vaporization chamber as the oxygen velocity and/or spray pattern is varied. The ability of these recirculation patterns to stabilize the diffusion flame above the surface of the solid fuel gives a plausible explanation for the experimentally determined combustion stability characteristics of the JIRAD motor, and suggests how combustion stability can be assured by modifications to the injector design.

Liang, Pak-Yan↗
NASA NTRS2003

Discrete Abstractions of Hybrid Systems: Verification of Safety and Application to User-Interface Design

Human interaction with a complex control system involves the user, the automation’s discrete mode logic, and the underlying continuous dynamics of the physical system. The user-interface of such systems always displays a reduced set of information about the entire system. Designing interfaces such that all the pertinent information is available and assuring that this information is correct is important for any user-interface, but especially so for safety-critical systems such as automotive systems and autopilots. Here we describe a methodology for the analysis of hybrid control systems that incorporate user interaction, with the goal of assuring that the information provided to the user is correct. That is, the user-interface must contain all information necessary to safely complete a desired procedure or task. We begin with a hybrid system model which incorporates discrete mode logic as well as nonlinear continuous dynamics. Using a hybrid computational tool for reachability, we find the largest region of the state-space in which we can guarantee the state of the system can always remain – this is the safe region of operation. By implementing a controller for safety which arises from this computation, we mathematically guarantee that this safe region is invariant, meaning that the system will always remain within the safe region if the determined controller is used on the boundary of the safe region. Verification within a hybrid framework allows us to account for the continuous dynamics underlying the discrete representations displayed to the user. Using the computed invariant regions as discrete states, we can abstract a discrete event system from this hybrid system with safety restrictions. This abstraction can be used to determine what information must be provided on the display. Furthermore, in cases in which an interface already exists, the abstraction provides the necessary input into existing interface verification methods. We provide two examples: a car traveling through a yellow light at an intersection and an aircraft autopilot in an automatic landing/go-around maneuver. The examples demonstrate the applicability of this methodology to hybrid systems that have operational constraints we can pose in terms of safety. This methodology differs from existing work in hybrid system verification in that we directly account for the user’s interactions with the system.

Meeko Oishi↗