Search NASA⌕ Search

SEARCH · Search NASA

Results for “Fault Estimation”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 361 records · Page 20
All sourcesNASA NTRSDOE OSTI
NASA NTRS2011

A Methodology for Evaluating Artifacts Produced by a Formal Verification Process

The goal of this study is to produce a methodology for evaluating the claims and arguments employed in, and the evidence produced by formal verification activities. To illustrate the process, we conduct a full assessment of a representative case study for the Enabling Technology Development and Demonstration (ETDD) program. We assess the model checking and satisfiabilty solving techniques as applied to a suite of abstract models of fault tolerant algorithms which were selected to be deployed in Orion, namely the TTEthernet startup services specified and verified in the Symbolic Analysis Laboratory (SAL) by TTTech. To this end, we introduce the Modeling and Verification Evaluation Score (MVES), a metric that is intended to estimate the amount of trust that can be placed on the evidence that is obtained. The results of the evaluation process and the MVES can then be used by non-experts and evaluators in assessing the credibility of the verification results.

Siminiceanu, Radu I.↗
NASA NTRS2012

Cognitive Bias in the Verification and Validation of Space Flight Systems

Cognitive bias is generally recognized as playing a significant role in virtually all domains of human decision making. Insight into this role is informally built into many of the system engineering practices employed in the aerospace industry. The review process, for example, typically has features that help to counteract the effect of bias. This paper presents a discussion of how commonly recognized biases may affect the verification and validation process. Verifying and validating a system is arguably more challenging than development, both technically and cognitively. Whereas there may be a relatively limited number of options available for the design of a particular aspect of a system, there is a virtually unlimited number of potential verification scenarios that may be explored. The probability of any particular scenario occurring in operations is typically very difficult to estimate, which increases reliance on judgment that may be affected by bias. Implementing a verification activity often presents technical challenges that, if they can be overcome at all, often result in a departure from actual flight conditions (e.g., 1-g testing, simulation, time compression, artificial fault injection) that may raise additional questions about the meaningfulness of the results, and create opportunities for the introduction of additional biases. In addition to mitigating the biases it can introduce directly, the verification and validation process must also overcome the cumulative effect of biases introduced during all previous stages of development. A variety of cognitive biases will be described, with research results for illustration. A handful of case studies will be presented that show how cognitive bias may have affected the verification and validation process on recent JPL flight projects, identify areas of strength and weakness, and identify potential changes or additions to commonly used techniques that could provide a more robust verification and validation of future systems.

Larson, Steve↗
NASA NTRS1999

Scale Effects in Strength-Dominated Collisions of Rocky Asteroids

The application of laboratory collision experimental results to the larger scales of asteroid impacts is complicated by the fact that the dynamic strength of rock typically decreases as the loading duration increases. Because loading times increase with the size scale of a collision, large bodies are effectively weaker than small ones. While this effect has been postulated for over a decade, it has never been verified in actual collision experiments. This paper summarizes collision tests performed under the conditions required to examine scale effects, i.e., increasing the size scale of the experiment while holding the impact velocity and impact kinetic energy per target mass constant. Granite targets are used, with a diameter variation of a factor of 18. The larger targets experienced significantly more collisional damage than small ones, confirming a decrease in dynamic strength with increasing size scale. The results are compared to a scaling model based on the concept that fragmentation is accomplished through the growth and coalescence of preexisting flaws. Measurements of the actual flaw-size distribution are used to validate the model. Field observations of flaw and fault sizes at scales to 10 km are used to construct a scaling model that is believed to apply to the shattering of a wide range of rock types. The results show that kilometer-sized rocky bodies may be significantly weaker than indicated by previous estimates.

Housen, Kevin R.↗
NASA NTRSDate not supplied

Vibration Anomaly Detection by Clustering in Unmanned Aerial Vehicles.

One of the critical factors affecting flight safety of unmanned aerial vehicles (UAVs) is the amount of vibration they are exposed to during a flight. On one hand, external causes such as wind gusts and turbulences or internal vehicle-centric faults such as incorrect sensor mounting or propeller imbalances can cause high vibrations in UAVs. On the other hand, high vibration itself may induce noise in the onboard miniature sensors of the UAV such as its accelerometers, gyroscopes and GPS that can lead to uncertain state estimation causing the multi-rotor to drift from its desired position or even result in loss-of-control. Hence, it is important to monitor the vibration levels during a UAV flight. This paper specifically looks into vibrations recorded by the autopilot system of a multi-rotor in presence of varying magnitudes of wind. Using data from experimental flights conducted at two separate flight test regions under varying wind conditions, we aim to classify between a nominal and anomalous vibration level for small UAV systems. Further, we analyse other parameters of interest that affect vibrations in UAVs such as UAV air speed and any propeller imbalance signatures. Analysis results from experimental flights demonstrate the effect of wind on vibration magnitude in unmanned aircrafts.

unmanned aviation↗
NASA NTRS1984

Validation of a fault-tolerant clock synchronization system

A validation method for the synchronization subsystem of a fault tolerant computer system is investigated. The method combines formal design verification with experimental testing. The design proof reduces the correctness of the clock synchronization system to the correctness of a set of axioms which are experimentally validated. Since the reliability requirements are often extreme, requiring the estimation of extremely large quantiles, an asymptotic approach to estimation in the tail of a distribution is employed.

Butler, R. W.↗
NASA NTRS2010

Autonomous GN and C for Spacecraft Exploration of Comets and Asteroids

A spacecraft guidance, navigation, and control (GN&C) system is needed to enable a spacecraft to descend to a surface, take a sample using a touch-and-go (TAG) sampling approach, and then safely ascend. At the time of this reporting, a flyable GN&C system that can accomplish these goals is beyond state of the art. This article describes AutoGNC, which is a GN&C system capable of addressing these goals, which has recently been developed and demonstrated to a maturity TRL-5-plus. The AutoGNC solution matures and integrates two previously existing JPL capabilities into a single unified GN&C system. The two capabilities are AutoNAV and GREX. AutoNAV is JPL s current flight navigation system, and is fairly mature with respect to flybys and rendezvous with small bodies, but is lacking capability for close surface proximity operations, sampling, and contact. G-REX is a suite of low-TRL algorithms and capabilities that enables spacecraft operations in close surface proximity and for performing sampling/contact. The development and integration of AutoNAV and G-REX components into AutoGNC provides a single, unified GN&C capability for addressing the autonomy, close-proximity, and sampling/contact aspects of small-body sample return missions. AutoGNC is an integrated capability comprising elements that were developed separately. The main algorithms and component capabilities that have been matured and integrated are autonomy for near-surface operations, terrain-relative navigation (TRN), real-time image-based feedback guidance and control, and six degrees of freedom (6DOF) control of the TAG sampling event. Autonomy is achieved based on an AutoGNC Executive written in Virtual Machine Language (VML) incorporating high-level control, data management, and fault protection. In descending to the surface, the AutoGNC system uses camera images to determine its position and velocity relative to the terrain. This capability for TRN leverages native capabilities of the original AutoNAV system, but required advancements that integrate the separate capabilities for shape modeling, state estimation, image rendering, defining a database of onboard maps, and performing real-time landmark recognition against the stored maps. The ability to use images to guide the spacecraft requires the capability for image-based feedback control. In Auto- GNC, navigation estimates are fed into an onboard guidance and control system that keeps the spacecraft guided along a desired path, as it descends towards its targeted landing or sampling site. Once near the site, AutoGNC achieves a prescribed guidance condition for TAG sampling (position/orientation, velocity), and a prescribed force profile on the sampling end-effector. A dedicated 6DOF TAG control then implements the ascent burn while recovering from sampling disturbances and induced attitude rates. The control also minimizes structural interactions with flexible solar panels and disallows any part of the spacecraft from making contact with the ground (other than the intended end-effector).

Carson, John M.↗
NASA NTRS1981

Neotectonics of the San Andreas Fault system: Basin and range province juncture

A thorough evaluation of all LANDSAT coverage of the study area (considering atmospheric clarity, seasonal aspects, specific swath location, and digital quality) resulted in the selection of two consecutive (continuously recorded) scenes for detailed analyses. The acquisition of HCMM and SEASAT imagery as well as high altitude U-2 uniform coverage is being considered. A bibliography of previous geological studies and methodological examples is estimated to be 70% complete.

Estes, J. E.↗
NASA NTRS1981

Reliability analysis of the F-8 digital fly-by-wire system

The F-8 Digital Fly-by-Wire (DFBW) flight test program intended to provide the technology for advanced control systems, giving aircraft enhanced performance and operational capability is addressed. A detailed analysis of the experimental system was performed to estimated the probabilities of two significant safety critical events: (1) loss of primary flight control function, causing reversion to the analog bypass system; and (2) loss of the aircraft due to failure of the electronic flight control system. The analysis covers appraisal of risks due to random equipment failure, generic faults in design of the system or its software, and induced failure due to external events. A unique diagrammatic technique was developed which details the combinatorial reliability equations for the entire system, promotes understanding of system failure characteristics, and identifies the most likely failure modes. The technique provides a systematic method of applying basic probability equations and is augmented by a computer program written in a modular fashion that duplicates the structure of these equations.

Brock, L. D.↗
NASA NTRS1986

On the early thermal state of the moon

New theories for the formation of the moon from an accretion disk thrown into circumterrestrial orbit after the collision of a planet-sized object with the earth have led to a reexamination of the tectonic consequences of an initially molten moon. Even the smallest estimates of radial contraction that would accompany cooling of the moon from an initially molten state predict accumulated near-surface horizontal compressive stresses considerably in excess of the compressive strength of the upper lunar crust, estimated to be 0.5 to 1 kbar on the basis of topographic relief, the stress levels necessary to form mare ridges in mascon mare basins, and measurements of rock friction. Various mechanisms for relieving or modifying such large near-surface stresses are considered, including viscoelastic effects, widespread development of major fault systems, impact gardening, and opposing stresses arising from other global-scale processes. All of these mechanisms face substantial difficulties when tested against geological and mechanical information from the moon and other terrestrial planets. These considerations pose a serious problem for theories of lunar origin that call for an initially molten state.

Solomon, Sean C.↗
NASA NTRS1991

Permutation codes for the state assignment of fault tolerant sequential machines

A new fault-tolerant state assignment method is suggested for synchronous sequential machines. It is assumed that the inputs are fault free and that for no input it is possible to reach all or most of the states, whose number may be fairly large. Error correcting codes for the state assignment are generated by permutations of a chosen linear code. A state assignment algorithm is developed and its computational complexity is estimated. Examples are given.

Chen, M.↗
NASA NTRS2008

Controller for Driving a Piezoelectric Actuator at Resonance

A digital control system based partly on an extremum-seeking control algorithm tracks the changing resonance frequency of a piezoelectric actuator or an electrically similar electromechanical device that is driven by a sinusoidal excitation signal and is required to be maintained at or near resonance in the presence of uncertain, changing external loads and disturbances. Somewhat more specifically, on the basis of measurements of the performance of the actuator, this system repeatedly estimates the resonance frequency and alters the excitation frequency as needed to keep it at or near the resonance frequency. In the original application for which this controller was developed, the piezoelectric actuator is part of an ultrasonic/sonic drill/corer. Going beyond this application, the underlying principles of design and operation are generally applicable to tracking changing resonance frequencies of heavily perturbed harmonic oscillators. Resonance-frequency-tracking analog electronic circuits are commercially available, but are not adequate for the present purpose for several reasons: The input/output characteristics of analog circuits tend to drift, often necessitating recalibration, especially whenever the same controller is used in driving a different resonator. In the case of an actuator in a system that has multiple modes characterized by different resonance frequencies, an analog controller can tune erroneously to one of the higher-frequency modes. The lack of programmability of analog controllers is problematic when faults occur, and is especially problematic for preventing tuning to a higher-frequency mode. In contrast, a digital controller can be programmed to restrict itself to a specified frequency range and to maintain stability even when the affected resonator is driven at high power and subjected to uncertain disturbances and variable loads. The present digital control system (see figure) is implemented by means of an algorithm that comprises three main subalgorithms: a hill-climbing control algorithm, an estimation-based extremum-seeking control (ESC) algorithm, and a supervisory algorithm. The hill-climbing algorithm is useful for coarse tracking to find and remain within the vicinity of the resonance. The ESC algorithm is not capable of coarse resonance tracking, but is capable of fine resonance tracking once the estimates of parameters generated by the hill-climbing algorithm have converged sufficiently. On the basis of the parameter-estimation errors, the supervisory algorithm switches operation to whichever of the other two algorithms performs best at a given time.

Aldrich, Jack↗
NASA NTRS2008

Robustness Analysis and Reliable Flight Regime Estimation of an Integrated Resilent Control System for a Transport Aircraft

Formal robustness analysis of aircraft control upset prevention and recovery systems could play an important role in their validation and ultimate certification. As a part of the validation process, this paper describes an analysis method for determining a reliable flight regime in the flight envelope within which an integrated resilent control system can achieve the desired performance of tracking command signals and detecting additive faults in the presence of parameter uncertainty and unmodeled dynamics. To calculate a reliable flight regime, a structured singular value analysis method is applied to analyze the closed-loop system over the entire flight envelope. To use the structured singular value analysis method, a linear fractional transform (LFT) model of a transport aircraft longitudinal dynamics is developed over the flight envelope by using a preliminary LFT modeling software tool developed at the NASA Langley Research Center, which utilizes a matrix-based computational approach. The developed LFT model can capture original nonlinear dynamics over the flight envelope with the ! block which contains key varying parameters: angle of attack and velocity, and real parameter uncertainty: aerodynamic coefficient uncertainty and moment of inertia uncertainty. Using the developed LFT model and a formal robustness analysis method, a reliable flight regime is calculated for a transport aircraft closed-loop system.

Shin, Jong-Yeob↗
NASA NTRS1990

An experimental evaluation of software redundancy as a strategy for improving reliability

The strategy of using multiple versions of independently developed software as a means to tolerate residual software design faults is suggested by the success of hardware redundancy for tolerating hardware failures. Although, as generally accepted, the independence of hardware failures resulting from physical wearout can lead to substantial increases in reliability for redundant hardware structures, a similar conclusion is not immediate for software. The degree to which design faults are manifested as independent failures determines the effectiveness of redundancy as a method for improving software reliability. Interest in multi-version software centers on whether it provides an adequate measure of increased reliability to warrant its use in critical applications. The effectiveness of multi-version software is studied by comparing estimates of the failure probabilities of these systems with the failure probabilities of single versions. The estimates are obtained under a model of dependent failures and compared with estimates obtained when failures are assumed to be independent. The experimental results are based on twenty versions of an aerospace application developed and certified by sixty programmers from four universities. Descriptions of the application, development and certification processes, and operational evaluation are given together with an analysis of the twenty versions.

Eckhardt, Dave E., Jr.↗
NASA NTRS1991

An experimental evaluation of software redundancy as a strategy for improving reliability

The strategy of using multiple versions of independently developed software as a means to tolerate residual software design faults is suggested by the success of hardware redundancy for tolerating hardware failires. Although, as generally accepted, the independence of hardware failures resulting from physical wearout can lead to substantial increases in reliability for redundant hardware structures, a similar conclusion is not immediate for software. The degree to which design faults are manifested as independent failures determines the effectiveness of redundancy as a method for improving software reliability. Interest in multi-version software centers on whether it provides an adequate measure of increased reliability to warrant its use in critical applications. The effectiveness of multi-version software is studied by comparing estimates of the failure probabilities of these systems with the failure probabilities of single versions. The estimates are obtained under a model of dependent failures and compared with the estimates obtained when failures are assumed to be independent. The experimental results are based on twenty versions of an aerospace application developed and certified by sixty programmers from four universities. Descriptions of the application, development and certifications processes, and operational evaluation are given together with an analysis of the twenty versions.

Eckhardt, Dave E.↗
NASA NTRS1998

Remotely-Sensed Regional-Scale Evapotranspiration of a Semi-Arid Great Basin Desert and its Relationship to Geomorphology, Soils, and Vegetation

Landsat thematic mapper data are used to estimate instantaneous regional-scale surface water and energy fluxes in a semi-arid Great Basin desert of the western United States. Results suggest that it is possible to scale from point measurements of environmental state variables to regional estimates of water and energy exchange. This research characterizes the unifying thread in the classical climate-topography-soil-vegetation relation -the surface water and energy balance-through maps of the partitioning of energy throughout the landscape. The study was conducted in Goshute Valley of northeastern Nevada, which is characteristic of most faulted graben valleys of the Basin and Range Province of the western United States. The valley comprises a central playa and lake plain bordered by alluvial fans emanating from the surrounding mountains. The distribution of evapotranspiration (ET) is lowest in the middle reaches of the fans where the water table is deep and plants are small, resulting in low evaporation and transpiration. Highest ET occurs in the center of the valley, particularly in the playa, where limited to no vegetation occurs, but evaporation is relatively high because of a shallow water table and silty clay soil capable of large capillary movement. Intermediate values of ET are associated with large shrubs and is dominated by transpiration.

Laymon, C.↗
NASA NTRS2011

Accommodating Sensor Bias in MRAC for State Tracking

The problem of accommodating unknown sensor bias is considered in a direct model reference adaptive control (MRAC) setting for state tracking using state feedback. Sensor faults can occur during operation, and if the biased state measurements are directly used with a standard MRAC control law, neither closed-loop signal boundedness, nor asymptotic tracking can be guaranteed and the resulting tracking errors may be unbounded or unacceptably large. A modified MRAC law is proposed, which combines a bias estimator with control gain adaptation, and it is shown that signal boundedness can be accomplished, although the tracking error may not go to zero. Further, for the case wherein an asymptotically stable sensor bias estimator is available, an MRAC control law is proposed to accomplish asymptotic tracking and signal boundedness. Such a sensor bias estimator can be designed if additional sensor measurements are available, as illustrated for the case wherein bias is present in the rate gyro and airspeed measurements. Numerical example results are presented to illustrate each of the schemes.

Patre, Parag↗
NASA NTRS2011

Vehicle-Level Reasoning Systems: Integrating System-Wide Data to Estimate the Instantaneous Health State

At the aircraft level, a Vehicle-Level Reasoning System (VLRS) can be developed to provide aircraft with at least two significant capabilities: improvement of aircraft safety due to enhanced monitoring and reasoning about the aircrafts health state, and also potential cost savings by enabling Condition Based Maintenance (CBM). Along with the benefits of CBM, an important challenge facing aviation safety today is safeguarding against system and component failures and malfunctions. Faults can arise in one or more aircraft subsystem their effects in one system may propagate to other subsystems, and faults may interact.

system-wide data↗