SEARCH · Search NASA

Results for “fail operational”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 37 records · Page 2

All sources NASA NTRS DOE OSTI

NASA NTRS2005

Reciprocating Feed System Development Status

The reciprocating feed system (RFS) is an alternative means of providing high pressure propellant flow at low cost and system mass, with high fail-operational reliability. The RFS functions by storing the liquid propellants in large, low-pressure tanks and then expelling each propellant through two or three small, high-pressure tanks. Each RFS tank is sequentially filled, pressurized, expelled, vented, and refilled so as to provide a constant, or variable, mass flow rate to the engine. This type of system is much lighter than a conventional pressure fed system in part due to the greatly reduced amount of inert tank weight. The delivered payload for an RFS is superior to that of conventional pressure fed systems for conditions of high total impulse and it is competitive with turbopump systems, up to approximately 2000 psi. An advanced version of the RFS uses autogenous pressurization and thrust augmentation to achieve higher performance. In this version, the pressurization gases are combusted in a small engine, thus making the pressurization system, in effect, part of the propulsion system. The RFS appears to be much less expensive than a turbopump system, due to reduced research and development cost and hardware cost, since it is basically composed of small high- pressure tanks, a pressurization system, and control valves. A major benefit is the high reliability fail-operational mode; in the event of a failure in one of the three tank-systems, it can operate on the two remaining tanks. Other benefits include variable pressure and flow rates, ease of engine restart in micro-gravity, and enhanced propellant acquisition and control under adverse acceleration conditions. We present a system mass analysis tool that accepts user inputs for various design and mission parameters and calculates such output values payload and vehicle weights for the conventional pressure fed system, the RFS, the Autogenous Pressurization Thrust Augmentation (APTA) RFS, and turbopump systems. Using this tool, a preliminary design of a representative crew exploration vehicle (CEV) has been considered. The design parameters selected for a representative system were modeled after the orbital maneuvering system (OMS) on the Shuttle Orbiter, with an increase of roughly a factor of ten in the delta- V capability and a greater thrust (30,000 lbs, vs. 12,000 lbs). Both storable and cryogenic propellants were considered. Results show that a RFS is a low mass alternative to conventional pressure fed systems, with a substantial increase in payload capability and that it is weight-competitive with turbopump systems at low engine pressure (a few hundred psi); at high engine pressures, the APTA RFS appears to offer the highest payload. We also present the status of the RFS test bed fabrication, assembly, and checkout. This test bed is designed to provide flow rates appropriate for engines in the roughly 10,000 to 30,000 lb thrust range.

Trewek, Mary↗

NASA NTRS2002

Fail-Safe Operation of a High-Temperature Magnetic Bearing Investigated for Gas Turbine Engine Applications

The Structural Mechanics and Dynamics Branch at the NASA Glenn Research Center has developed a three-axis high-temperature magnetic bearing suspension rig to enhance the safety of the bearing system up to 1000 F. This test rig can accommodate thrust and radial bearings up to a 22.84 cm (9 in.) diameter with a maximum axial loading of 22.25 kN (5000 lb) and a maximum radial loading up to 4.45 kN (1000 lb). The test facility was set up to test magnetic bearings under high-temperature (1100 F) and high-speed (20,000 rpm) conditions. The magnetic bearing is located at the center of gravity of the rotor between two high-temperature grease-packed mechanical ball bearings. The drive-end duplex angular contact ball bearing, which is in full contact, acts as a moment release and provides axial stability. The outboard end ball bearing has a 0.015-in. radial clearance between the rotor to act as a backup bearing and to compensate for axial thermal expansion. There is a 0.020-in. radial air gap between the stator pole and the rotor. The stator was wrapped with three 1-kW band heaters to create a localized hot section; the mechanical ball bearings were outside this section. Eight threaded rods supported the stator. These incorporated a plunger and Bellville washers to compensate for radial thermal expansion and provide rotor-to-stator alignment. The stator was instrumented with thermocouples and a current sensor for each coil. Eight air-cooled position sensors were mounted outside the hot section to monitor the rotor. Another sensor monitored this rotation of the outboard backup bearing. Ground fault circuit interrupts were incorporated into all power amplifier loops for personnel safety. All instrumentation was monitored and recorded on a LabView-based data acquisition system. Currently, this 12-pole heteropolar magnetic bearing has 13 thermal cycles and over 26 hr of operation at 1000 F.

Choi, Benjamin B.↗

NASA NTRS1976

Reconfigurable redundancy management for aircraft flight control

A highly fault tolerant digital computer system has been configured based on extensive experience with flight proven, redundant digital flight control systems. The feasibility of minimizing hardware complexity is shown while maintaining high levels of fault tolerance. The emerging hardware design combines reconfiguration concepts with conventional hardware redundancy techniques and special operational software to provide dual fail operate performance with a basic triplex system. The design provides high reliability and flight safety, enhances maintainability, and reduces life cycle cost while offering improved performance for future aircraft.

Bosch, J. A.↗

NASA NTRS1999

Space Shuttle Main Engine: Advanced Health Monitoring System

The main gola of the Space Shuttle Main Engine (SSME) Advanced Health Management system is to improve flight safety. To this end the new SSME has robust new components to improve the operating margen and operability. The features of the current SSME health monitoring system, include automated checkouts, closed loop redundant control system, catastropic failure mitigation, fail operational/ fail-safe algorithms, and post flight data and inspection trend analysis. The features of the advanced health monitoring system include: a real time vibration monitor system, a linear engine model, and an optical plume anomaly detection system. Since vibration is a fundamental measure of SSME turbopump health, it stands to reason that monitoring the vibration, will give some idea of the health of the turbopumps. However, how is it possible to avoid shutdown, when it is not necessary. A sensor algorithm has been developed which has been exposed to over 400 test cases in order to evaluate the logic. The optical plume anomaly detection (OPAD) has been developed to be a sensitive monitor of engine wear, erosion, and breakage.

Singer, Chirs↗

NASA NTRS2012

Fault Mitigation Schemes for Future Spaceflight Multicore Processors

Future planetary exploration missions demand significant advances in on-board computing capabilities over current avionics architectures based on a single-core processing element. The state-of-the-art multi-core processor provides much promise in meeting such challenges while introducing new fault tolerance problems when applied to space missions. Software-based schemes are being presented in this paper that can achieve system-level fault mitigation beyond that provided by radiation-hard-by-design (RHBD). For mission and time critical applications such as the Terrain Relative Navigation (TRN) for planetary or small body navigation, and landing, a range of fault tolerance methods can be adapted by the application. The software methods being investigated include Error Correction Code (ECC) for data packet routing between cores, virtual network routing, Triple Modular Redundancy (TMR), and Algorithm-Based Fault Tolerance (ABFT). A robust fault tolerance framework that provides fail-operational behavior under hard real-time constraints and graceful degradation will be demonstrated using TRN executing on a commercial Tilera(R) processor with simulated fault injections.

software based↗

NASA NTRS1988

Superfluid Helium Tanker (SFHT) study

Replenishment of superfluid helium (SFHe) offers the potential of extending the on-orbit life of observatories, satellite instruments, sensors and laboratories which operate in the 2 K temperature regime. A reference set of resupply customers was identified as representing realistic helium servicing requirements and interfaces for the first 10 years of superfluid helium tanker (SFHT) operations. These included the Space Infrared Telescope Facility (SIRTF), the Advanced X-ray Astrophysics Facility (AXAF), the Particle Astrophysics Magnet Facility (Astromag), and the Microgravity and Materials Processing Sciences Facility (MMPS)/Critical Point Phenomena Facility (CPPF). A mixed-fleet approach to SFHT utilization was considered. The tanker permits servicing from the Shuttle cargo bay, in situ when attached to the OMV and carried to the user spacecraft, and as a depot at the Space Station. A SFHT Dewar ground servicing concept was developed which uses a dedicated ground cooling heat exchanger to convert all the liquid, after initial fill as normal fluid, to superfluid for launch. This concept permits the tanker to be filled to a near full condition, and then cooled without any loss of fluid. The final load condition can be saturated superfluid with any desired ullage volume, or the tank can be totally filed and pressurized. The SFHT Dewar and helium plumbing system design has sufficient component redundancy to meet fail-operational, fail-safe requirements, and is designed structurally to meet a 50 mission life usage requirement. Technology development recommendations were made for the selected SFHT concept, and a Program Plan and cost estimate prepared for a phase C/D program spanning 72 months from initiation through first launch in 1997.

Eberhardt, Ralph N.↗

NASA NTRS1979

Flight control systems development of highly maneuverable aircraft technology /HiMAT/ vehicle

The highly maneuverable aircraft technology (HiMAT) program was conceived to demonstrate advanced technology concepts through scaled-aircraft flight tests using a remotely piloted technique. Closed-loop primary flight control is performed from a ground-based cockpit, utilizing a digital computer and up/down telemetry links. A backup flight control system for emergency operation resides in an onboard computer. The onboard systems are designed to provide fail-operational capabilities and utilize two microcomputers, dual uplink receiver/decoders, and redundant hydraulic actuation and power systems. This paper discusses the design and validation of the primary and backup digital flight control systems as well as the unique pilot and specialized systems interfaces.

Petersen, K. L.↗

NASA NTRS1977

Performance and safety aspects of the XV-15 tilt rotor research aircraft

Aircraft performance is presented illustrating the flexibility and capability of the XV-15 to conduct its planned proof-of-concept flight research in the areas of dynamics, stability and control, and aerodynamics. Additionally, the aircraft will demonstrate mission-type performance typical of future operational aircraft. The aircraft design is described and discussed with emphasis on the safety and fail-operate features of the aircraft and its systems. Two or more levels of redundancy are provided in the dc and ac electrical systems, hydraulics, conversion, flaps, landing gear extension, SCAS, and force-feel. RPM is maintained by a hydro-electrical blade pitch governor that consists of a primary and standby governor with a cockpit wheel control for manual backup. The two engines are interconnected for operation on a single engine. In the event of total loss of power, the aircraft can enter autorotation starting from the airplane as well as the helicopter mode of flight.

Wernicke, K. G.↗

NASA NTRS1991

Advanced technologies for rocket single-stage-to-orbit vehicles

A single-stage-to-orbit vertical takeoff/horizontal landing rocket vehicle was studied to determine the benefits of advanced technology. Advanced technologies that were included in the study were variable mixture ratio oxygen/hydrogen rocket engines and materials, structures, and subsystem technologies currently being developed in the National Aero-Space Plane Program. The application of advanced technology results in an 85 percent reduction in vehicle dry weight. With advanced materials, an external thermal protection system, like the Space Shuttle tiles, was not required. Compared to an all-airbreathing horizontal takeoff/horizontal landing vehicle using the same advanced technologies and mission requirements, the rocket vehicle is lighter in dry weight and has fewer subsystems. To increase reliability and safety, operational features were included in the rocket vehicle-robust subsystems, 5 percent additional margin, no slush hydrogen, fail-operational with an engine out, and a crew escape module. The resulting vehicle grew in dry weight and was still lower in dry weight than the airbreathing vehicle.

Wilhite, Alan W.↗

DOE OSTI2026

Learning turbulent flows with generative models for super resolution and sparse flow reconstruction

Neural operators are promising surrogates for dynamical systems but when trained with standard L 2 losses they tend to oversmooth fine-scale turbulent structures. Here, we show that combining operator learning with generative modeling overcomes this limitation. We consider three practical turbulent-flow challenges where conventional neural operators fail: spatio-temporal super-resolution, forecasting, and sparse flow reconstruction. For Schlieren jet super-resolution, an adversarially trained neural operator (adv-NO) reduces the energy-spectrum error by 15 × while preserving sharp gradients at neural operator-like inference cost. For 3D homogeneous isotropic turbulence, adv-NO trained on only 160 timesteps from a single trajectory forecasts accurately for five eddy-turnover times and offers 114 × wall-clock speed-up at inference than the baseline diffusion-based forecasters, enabling near-real-time rollouts. For reconstructing cylinder wake flows from highly sparse Particle Tracking Velocimetry-like inputs, a conditional generative model infers full 3D velocity and pressure fields with correct phase alignment and statistics. These advances enable accurate reconstruction and forecasting at low compute cost, bringing near-real-time analysis and control within reach in experimental and computational fluid mechanics.

Fluid dynamics↗

NASA NTRS2010

Understanding the Space Shuttle Main Engine Hydraulic Actuation System and Reviewing Its Evolution

The complex engine start and thrust control requirements of the Space Shuttle Main Engine (SSME) require unique valve, actuator and control system hardware. The Hydraulic Actuation System (HAS) was designed, developed, and now operates to meet tight engine control requirement limits to assure safe, reliable and correct engine thrust at all times. The actuator is designed to be fail safe and fail operate in the areas where redundancy is important. The HAS has an additional pneumatic operating capability that insures a safe sequential closure of all actuators and propellant valves in the event of the loss of hydraulic system pressure or loss of electrical closed loop control of the actuator. The objective of this paper is to provide a complete description of the actuator s internal operating system, along with its interaction with all SSME system interfaces. Additionally the paper addresses the challenges, problems identified, and corrected, and lessons learned, during the course of the almost 35 years of engine operation.

McWade, Robert J.↗

NASA NTRS1978

Description and theory of operation of the computer by-pass system for the NASA F-8 digital fly-by-wire control system

A triplex digital flight control system was installed in a NASA F-8C airplane to provide fail operate, full authority control. The triplex digital computers and interface circuitry process the pilot commands and aircraft motion feedback parameters according to the selected control laws, and they output the surface commands as an analog signal to the servoelectronics for position control of the aircraft's power actuators. The system and theory of operation of the computer by pass and servoelectronics are described and an automated ground test for each axis is included.

Source record↗

NASA NTRS2015

Sample Acquisition and Analytical Chemistry Challenges to Verifying Compliance to Aviators Breathing Oxygen (ABO) Purity Specification

NASA has been developing and testing two different types of oxygen separation systems. One type of oxygen separation system uses pressure swing technology, the other type uses a solid electrolyte electrochemical oxygen separation cell. Both development systems have been subjected to long term testing, and performance testing under a variety of environmental and operational conditions. Testing these two systems revealed that measuring the product purity of oxygen, and determining if an oxygen separation device meets Aviator's Breathing Oxygen (ABO) specifications is a subtle and sometimes difficult analytical chemistry job. Verifying product purity of cryogenically produced oxygen presents a different set of analytical chemistry challenges. This presentation will describe some of the sample acquisition and analytical chemistry challenges presented by verifying oxygen produced by an oxygen separator - and verifying oxygen produced by cryogenic separation processes. The primary contaminant that causes gas samples to fail to meet ABO requirements is water. The maximum amount of water vapor allowed is 7 ppmv. The principal challenge of verifying oxygen produced by an oxygen separator is that it is produced relatively slowly, and at comparatively low temperatures. A short term failure that occurs for just a few minutes in the course of a 1 week run could cause an entire tank to be rejected. Continuous monitoring of oxygen purity and water vapor could identify problems as soon as they occur. Long term oxygen separator tests were instrumented with an oxygen analyzer and with an hygrometer: a GE Moisture Monitor Series 35. This hygrometer uses an aluminum oxide sensor. The user's manual does not report this, but long term exposure to pure oxygen causes the aluminum oxide sensor head to bias dry. Oxygen product that exceeded the 7 ppm specification was improperly accepted, because the sensor had biased. The bias is permanent - exposure to air does not cause the sensor to return to its original response - but the bias can be accounted for by recalibrating the sensor. After this issue was found, continuous measurements of water vapor in the oxygen product were made using an FTIR. The FTIR cell is relatively large, so response time is slow - but moisture measurements were repeatable and accurate. Verifying ABO compliance for oxygen produced by commercial cryogenic processes has a different set of sample acquisition and analytical chemistry challenges. Customers want analytical chemists to conserve as much as possible. Hygrometers are not exposed to hours of continuous flow of oxygen, so they don't bias, but small amounts of contamination in valves can cause a "fail". K bottles are periodically cleaned and recertified - after cleaning residual moisture can cause a "fail". Operators let bottle pressure drop to room pressure, introduce outside air into the bottle, and the subsequent fill will "fail". Outside storage of K‐bottles has allowed enough in‐leakage, so contents will "fail".

Graf, John↗

NASA NTRS1981

NASA V/STOL Propulsion Control Analysis - Phase I and II program status

NASA-Lewis Research Center initiated the V/STOL Propulsion Control Analysis Program in 1979 in order to take advantage of advanced electronic control technology for the next generation of V/STOL aircraft. The rationale, methods, and criteria developed during Phase I and Phase II of the program are discussed first. The development of an integrated flight and propulsion control system is then described. Most V/STOL aircraft under consideration depend on reaction thrusters or separate lift engines for attitude control and on engine thrust variations for height control. S/CTOL aircraft vector-thrust for pitch control during low speed operation. The baseline propulsion control system provides a thrust level response of 10 rad/sec and a vectoring response of 22 rad/sec. The requirements of the control components include: (1) redundant electronic control computers with minimum software and 100% Fault Coverage; (2) prime reliable electromechanical actuator interfaces; (3) miniature, digitally compatible sensors with easily detected failure modes; and (4) dual element, fail operational fuel pumps.

Miller, R. J.↗

NASA NTRSDate not supplied

Reports of Resilient Performance: Investigating Operators' Descriptions of Safety-producing Behaviors in the Aviation Safety Reporting System

While many existing taxonomies and frameworks provide a common vocabulary for describing how human operators fail in the context of sociotechnical systems, at present, there is no common vocabulary to describe how humans succeed. Such a framework would facilitate systematically collecting and analyzing data on how human performance can produce safety, not just how it can reduce safety. One potentially rich source of currently available information for exploring desired performance is the reports submitted to NASA’s Aviation Safety Reporting System (ASRS). These de-identified, confidential, and voluntary narrative reports are submitted by pilots, controllers, ground operators, and others within aviation operations. While these reports are primarily submitted to describe safety risks, incidents, and problems, they also often describe how those risks were mitigated, and provide a window into aspects of everyday work in aviation. This paper describes an analysis of ASRS narratives to understand how operators talk about their own resilient behaviors during adverse safety conditions and events. Guided by Erik Hollnagel’s Resilience Assessment Grid framework (i.e., anticipate, monitor, respond, learn), we illustrate our approach and methodology with examples from reports. We also highlight some of the challenges and how further research is needed in developing a taxonomy of operators’ descriptions of resilient performance.

resilient behaviors↗

NASA NTRSDate not supplied

Reports of Resilient Performance: Investigating Operators' Descriptions of Safety-producing Behaviors in the Aviation Safety Reporting System

While many existing taxonomies and frameworks provide a common vocabulary for describing how human operators fail in the context of sociotechnical systems, at present, there is no common vocabulary to describe how humans succeed. Such a framework would facilitate systematically collecting and analyzing data on how human performance can produce safety, not just how it can reduce safety. One potentially rich source of currently available information for exploring desired performance is the reports submitted to NASA’s Aviation Safety Reporting System (ASRS). These de-identified, confidential, and voluntary narrative reports are submitted by pilots, controllers, ground operators, and others within aviation operations. While these reports are primarily submitted to describe safety risks, incidents, and problems, they also often describe how those risks were mitigated, and provide a window into aspects of everyday work in aviation. These reports can be searched in a variety of ways. This paper describes methods for systematically examining ASRS narratives to understand how operators talk about their own resilient behaviors during adverse safety conditions and events. Guided by Erik Hollnagel’s Resilience Assessment Grid framework (i.e., anticipate, monitor, respond, learn), various approaches and tools for such inquiries are described. The approach, process, challenges, and suggestions to building an operator-based description of resilient performance are discussed, and tools to facilitate data analysis to maximize learning from these reports are described.

ASRS narratives↗

NASA NTRS1972

Space shuttle environmental control/life support systems

This study analyzes and defines a baseline Environmental Control/Life Support System (EC/LSS) for a four-man, seven-day orbital shuttle. In addition, the impact of various mission parameters, crew size, mission length, etc. are examined for their influence on the selected system. Pacing technology items are identified to serve as a guide for application of effort to enhance the total system optimization. A fail safe-fail operation philosophy was utilized in designing the system. This has resulted in a system that requires only one daily routine operation. All other critical item malfunctions are automatically resolved by switching to redundant modes of operation. As a result of this study, it is evident that a practical, flexible, simple and long life, EC/LSS can be designed and manufactured for the shuttle orbiter within the time phase required.

Source record↗

NASA NTRS1975

Strapdown cost trend study and forecast

The potential cost advantages offered by advanced strapdown inertial technology in future commercial short-haul aircraft are summarized. The initial procurement cost and six year cost-of-ownership, which includes spares and direct maintenance cost were calculated for kinematic and inertial navigation systems such that traditional and strapdown mechanization costs could be compared. Cost results for the inertial navigation systems showed that initial costs and the cost of ownership for traditional triple redundant gimbaled inertial navigators are three times the cost of the equivalent skewed redundant strapdown inertial navigator. The net cost advantage for the strapdown kinematic system is directly attributable to the reduction in sensor count for strapdown. The strapdown kinematic system has the added advantage of providing a fail-operational inertial navigation capability for no additional cost due to the use of inertial grade sensors and attitude reference computers.

Eberlein, A. J.↗