SEARCH · Search NASA
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
Allowances made for erroneous sensor readings. Algorithm developed to increase reliability of digital electronic control systems for aircraft turbine engines. Detects, isolates, and accommodates failures or errors in engine sensors. Generates engine-output estimates based on measurements of inputs and outputs and detects failures of input- and output-measuring sensors.
As organizations increasingly automate their core missions and essential functions to address business risks and enhance efficiency, process automation becomes pivotal. This shift, involving minimal or no manual intervention, significantly impacts an organization's cyber-risk landscape. While automation drives efficiencies, it also introduces new cyber risks if not properly managed. Cyber-Informed Engineering (CIE) provides a proactive framework for managing these digital risks, enhancing cyber-resilience in process automation. This document supports organizations in applying CIE principles to mitigate the cyber risks associated with automation. The outlined approach can be independently implemented to improve any organization’s cyber-resilience, ensuring that the advantages of automation do not result in unaddressed or unmanaged digital risks. It serves as a starting point, offering considerations for integrating CIE principles and practices into organizational processes. CIE is presented as an iterative process, fostering continuous improvement and reinforcing the engineering and operational cultures to manage digital risks effectively. The document is structured as follows: Section 1 provides background on CIE and process automation, and their integration. Section 2 explores the twelve CIE principles in the context of process automation, highlighting key questions, engineering considerations, and implications for digital risk management. Section 3 synthesizes the findings and offers recommendations to advance resilience by design.
The 2023 National Cybersecurity Strategy has recommended a transition to secure-by-design methodologies in critical infrastructure. This paper presents the adoption of the National Cyber-Informed Engineering (CIE) Strategy as initiated by the U.S. DOE’s CESER office, advocating for the integration of cybersecurity at the earliest stages of system design. The strategy targets design engineers responsible for energy infrastructure to embed CIE principles within the engineering lifecycle, thus enhancing cyber resilience. This paper discusses the expansion of secure-by-design concepts to cyber-physical systems, moving beyond traditional IT security to include engineering considerations that can mitigate cyber risks through design choices. The paper introduces Digital Risk Management, balancing traditional cybersecurity with CIE to reduce both likelihood and impact of cyber threats. A set of CIE starter questions derived from 12 core principles is detailed, aiding engineers to consider cybersecurity in their designs and highlights the importance of CIE in anticipating and reducing the impacts of cyber attacks, suggesting that such integration is essential for national security and infrastructure resilience.
The early problems and the solutions developed to provide the required quality software needed to support the space shuttle engine development program are described. The decision to use a programmable digital control system on the space shuttle engine was primarily based upon the need for a flexible control system capable of supporting the total engine mission on a large complex pump fed engine. The mission definition included all control phases from ground checkout through post shutdown propellant dumping. The flexibility of the controller through reprogrammable software allowed the system to respond to the technical challenges and innovation required to develop both the engine and controller hardware. This same flexibility, however, placed a severe strain on the capability of the software development and verification organization. The overall development program required that the software facility accommodate significant growth in both the software requirements and the number of software packages delivered. This challenge was met by reorganization and evolution in the process of developing and verifying software.
The ARES Directorate education team is charged with translating the work of ARES scientists into content that can be used in formal and informal K-12 education settings and assisting with public outreach. This is accomplished through local efforts and national partnerships. Local efforts include partnerships with universities, school districts, museums, and the Lunar and Planetary Institute (LPI) to share the content and excitement of space science research. Sharing astromaterials and exploration science with the public is an essential part of the Directorate's work. As a small enclave of physical scientists at a NASA Center that otherwise emphasizes human space operations and engineering, the ARES staff is frequently called upon by the JSC Public Affairs and Education offices to provide presentations and interviews. Scientists and staff actively volunteer with the JSC Speaker's Bureau, Digital Learning Network, and National Engineers Week programs as well as at Space Center Houston activities and events. The education team also participates in many JSC educator and student workshops, including the Pre-Service Teacher Institute and the Texas Aerospace Scholars program, with workshop presentations, speakers, and printed materials.
A high-fidelity component-type model and real-time digital simulation of the General Electric T700-GE-700 turboshaft engine were developed for use with current generation real-time blade-element rotor helicopter simulations. A control system model based on the specification fuel control system used in the UH-60A Black Hawk helicopter is also presented. The modeling assumptions and real-time digital implementation methods particular to the simulation of small turboshaft engines are described. The validity of the simulation is demonstrated by comparison with analysis-oriented simulations developed by the manufacturer, available test data, and flight-test time histories.
Dynamic data from tests of a T55-L-712 engine are presented. Engine stall/surge data were analyzed using digital signal processing techniques. In addition, forced response testing (system identification studies) was done at various engine speeds. Forced response testing was done using eight jet ejectors approximately equally circumferentially spaced about the compressor front face. This paper presents some preliminary results for the ground idle (approximately 60% of design speed) point. Brief descriptions of the jet injection system, the test matrix, and analysis techniques used are presented. Results of these analyses indicate a substantial transfer of energy across the compressor first stage at some frequencies and that the ejectors are effective in modifying the local flow conditions in front of the first compressor stage.
Dynamic data from tests of a T55-L,712 engine are presented. Engine stall/surge data were analyzed using digital signal processing techniques. In addition, forced response testing (system identification studies) was done at various engine speeds. Forced response testing was done using eight jet ejectors approximately equally circumferentially spaced about the compressor front face. This paper presents some preliminary results for the ground idle (approximately 60% of design speed) point. Brief descriptions of the jet injection system, the test matrix, and analysis techniques used are presented. Results of these analyses indicate a substantial transfer of energy across the compressor first stage at some frequencies and that the ejectors are effective in modifying the local flow conditions in front of the first compressor stage.
Computational mechanics simulations using traditional finite element methods (FEM) require prohibitively expensive computational resources for real-time engineering applications, design optimization, and digital twin implementations. While machine learning (ML) surrogate models offer significant computational speedups, autoregressive ML models for time-dependent mechanical systems suffer from error accumulation that compromises long-term prediction reliability - a critical concern for engineering applications where accuracy over extended time horizons is essential for safety and performance assessments. Here, we propose a deep ensemble framework specifically designed to address this challenge in computational mechanics applications, where multiple ML surrogate models with random weight initializations are trained in parallel and their predictions aggregated during inference. This approach leverages statistical diversity to maximize information gain from a fixed set of training data and to mitigate error propagation, while maintaining the computational efficiency that makes ML surrogates attractive for engineering practice. We validate the framework on three representative problems spanning critical areas of computational mechanics: stress field evolution in heterogeneous microstructures under complex loading (relevant to advanced materials design and composite analysis), planetary-scale shallow water dynamics (applicable to environmental and geotechnical engineering), and Gray-Scott reaction-diffusion systems (relevant to mass transport and chemical process engineering). Across all test cases, the ensemble approach demonstrates consistent error reduction of 15-33% compared to individual models. The codes for this work are available on GitHub (https://github.com/Graham-Brady-Research-Group/AutoregressiveEnsemble_SpatioTemporal_Evolution).
The objective of the Advanced Detection, Isolation, and Accommodation Program is to improve the overall demonstrated reliability of digital electronic control systems for turbine engines. For this purpose, an algorithm was developed which detects, isolates, and accommodates sensor failures by using analytical redundancy. The performance of this algorithm was evaluated on a real time engine simulation and was demonstrated on a full scale F100 turbofan engine. The real time implementation of the algorithm is described. The implementation used state-of-the-art microprocessor hardware and software, including parallel processing and high order language programming.
Engineers have super powers to provide cybersecurity resilience with deterministic engineering solutions and to protect systems from the most catastrophic consequences that a cyber saboteur could cause. Come to this session to learn how to use engineering risk management skills to harden your engineered systems from cyberattacks. Objective 1 Identify what system functions could be digitally induced to cause undesired high-impact consequences. Objective 2 Analyze how loss or instability of digital controls in a subsystem could lead to high-impact consequences. Objective 3 Analyze how loss or instability in the digital connectivity between systems could lead to high-impact consequences. Objective 4 Identify engineering controls which could build resilience by eliminating digital loss or instability pathways or reduce the impact of digital loss or instability. This presentation will introduce Cyber-Informed Engineering, described below, and walk participants through specific engineering use cases to show how engineers can consider the potential for cyber sabotage in their existing system designs and enact deterministic engineering-based controls which eliminate pathways for attack or mitigate specific consequences. A wide variety of application use cases will be considered so that audience members can align the material with familiar engineering applications. CIE is an engineering approach that integrates cyber resilience into the conception, design, build, and operation of any physical system that has digital connectivity, sensors, monitoring, or control. CIE offers the opportunity to use engineering to eliminate or mitigate avenues for cyber attack—starting from the earliest stage of design and continuing throughout the system’s lifecycle. Today, engineers and industrial control system (ICS) technicians build engineered systems with specific goals for safety, reliability, and functionality. While systems engineering includes considerable safety and failure mode analysis, cybersecurity risks are often not specifically addressed—particularly the risks of intentional cyber compromise, exploitation, and misuse. Cyber-Informed Engineering pairs well with traditional cyber defenses and offers an extra designed-in protection to eliminate the most catastrophic consequences which can be realized by an adversary should traditional cyber defenses fail.
This study from the National Academies of Sciences, Engineering, and Medicine was launched to explore the foundational research gaps and opportunities for digital twins. As part of the information gathering process, the committee organized three targeted workshops—in engineering, climate sciences, and biomedical sciences—to better understand domain-specific nuances and barriers to developing digital twins. These sessions enabled cross-sector experts to surface field-specific needs, challenges, and open questions related to digital twins. Thousands of participants across multiple domains engaged in the discussions, which workshops were summarized in three separate Proceedings-in-Brief.
Computer programming for digital data acquisition system - digital tape format, obtaining data in engineering units, and data analysis
The British Broadcasting Corporation (BBC) has broadcast the Greenwich Time Signal (GTS) on its networks since 1924. Up to February 1990 this signal was generated by the Royal Greenwich Observatory (RGO) in England. The BBC was informed that the RGO was moving its location to Cambridge and might not be able to continue to provide the Greenwich Time Service. The BBC in its role of a public service broadcaster believed that a long tradition of providing a time signal to its listeners should be upheld, and as such decided to seek alternative methods of provision. In parallel with this activity, an in-house requirement arose to re-engineer time switch equipment and provide new facilities for digital audio projects. As both requirements have a common engineering core, a decision was taken to design and procure a Time and Frequency Standard that could generate the Greenwich Time Signal to the same specification adhered to by the RGO, and provide additional time and frequency facilities. The concept of time and time/frequency dissemination as used in a broadcast network is discussed, as well as the details of an engineering solution to the requirements of BBC Network Radio.
The development of a lightweight, compact, high-resolution Fabry-Perot interferometer (FPI) based spectrometer capable of detecting the spectral signatures of eroding engine components during test and/or flight operations is discussed. FPI based spectrometers will be designed to be smaller and lighter than grating or prism type devices and to provide greater wavelength resolving capability. The FPI system seeks to combine the features of high line resolution, active background discrimination, smart digital signal processing, and rocket engine flight capability. The design, fabrication, and test of a breadboard FPI spectrometer have been completed and the breadboard instrument has clearly demonstrated the viability of the approach. The breadboard instrument design and test results are also presented.
The quantification of the particulate erosion that occurs as a result of a rocket exhaust plume impinging on soil during extraterrestrial landings is critical for future robotic and human lander mission design. The aerodynamic environment that results from the reflected plumes results in dust lifting, site alteration and saltation, all of which create a potentially erosive and contaminant heavy environment for the lander vehicle and any surrounding structures. The Mars Science Lab (MSL), weighing nearly one metric ton, required higher levels of thrust from its retro propulsive systems and an entirely new descent system to minimize these effects. In this work we seek to quantify plume soil interaction and its resultant soil erosion caused by the MSL's Sky Crane descent stage engines by performing three dimensional digital terrain and elevation mapping of the Curiosity rover's landing site. Analysis of plume soil interaction altitude and time was performed by detailed examination of the Mars Descent Imager (MARDI) still frames and reconstructed inertial measurement unit (IMU) sensor data. Results show initial plume soil interaction from the Sky Crane's eight engines began at ground elevations greater than 60 meters and more than 25 seconds before the rovers' touchdown event. During this time, viscous shear erosion (VSE) was dominant typically resulting in dusting of the surface with flow propagating nearly parallel to the surface. As the vehicle descended and decreased to four powered engines plume-plume and plume soil interaction increased the overall erosion rate at the surface. Visibility was greatly reduced at a height of roughly 20 meters above the surface and fell to zero ground visibility shortly after. The deployment phase of the Sky Crane descent stage hovering at nearly six meters above the surface showed the greatest amount of erosion with several large particles of soil being kicked up, recirculated, and impacting the bottom of the rover chassis. Image data obtained from MSL's navigation camera (NAVCAM) pairs on Sols 002, 003, and 016 were used to virtually recreate local surface topography and features around the rover by means of stereoscopic depth mapping. Images taken simultaneously by the left and right navigation cameras located on the rover's mast assembly spaced 42 centimeters were used to generate a three dimensional depth map from flat, two dimensional images of the same feature at slightly different angles. Image calibration with physical hardware on the rover and known terrain features were used to provide scaling information that accurately sizes features and regions of interest within the images. Digital terrain mapping analysis performed in this work describe the crater geometry (shape, radius, and depth), eroded volume, volumetric erosion rate, and estimated mass erosion rate of the Hepburn, Sleepy Dragon, Burnside, and Goulburn craters. Crater depths ranged from five to ten centimeters deep influencing an area as wide as two meters in some cases. The craters formed were highly asymmetrical and generally oblong primarily due to the underlying bedrock formations underneath the surface. Comparison with ground tests performed at the NASA AMES Planetary Aeolian Laboratory (PAL) by Mehta showed good agreement with volumetric erosion rates and crater sizes of large particle soil simulants, providing validation to Earth based ground tests of Martian regolith.
The powered-phase autopilot for the Centaur upper stage rocket uses an autopilot forward loop gain scheduler that decreases the proportional gain as propellant mass is depleted. Nonlinear time response simulation studies revealed that Centaur vehicles with low-gain autopilots would have large attitude error limit cycles. These limit cycles were due to the assumed presence of Coulomb friction in the engine gimbals. This situation could be corrected through the use of an harmonic dither, programmed into the on-board digital computer and added to the engine command signal. This would introduce impending motion to the engines, allowing control of the engines even under small commands. Control authority was found to be restored when dither was used. A concern arose that the Centaur could be unacceptably excited at resonances near the dither frequency, if the dither amplitude was to be chosen on the basis of friction level present, a test was conducted to measure this level. Dither characteristics were to be based on the test results. The test results showed that the gimbal friction characteristic was actually hysteretic rather than the assumed Coulomb friction. The simulation results showed that, using this new model of gimbal friction, dither would no longer be necessary.
The powered-phase autopilot for the Centaur upper stage rocket uses an autopilot forward loop gain scheduler that decreases the proportional gain as propellant mass is depleted. Nonlinear time response simulation studies revealed that Centaur vehicles with low-gain autopilots would have large attitude error limit cycles. These limit cycles were due to the assumed presence of Coulomb friction in the engine gimbals. This situation could be corrected through the use of an harmonic dither, programmed into the on-board digital computer and added to the engine command signal. This would introduce impending motion to the engines, allowing control of the engines even under small commands. Control authority was found to be restored when dither was used. A concern arose that the Centaur could be unacceptably excited at resonances near the dither frequency, if the dither amplitude was to be chosen on the basis of friction level present, a test was conducted to measure this level. Dither characteristics were to be based on the test results. The test results showed that the gimbal friction characteristic was actually hysteretic rather than the assumed Coulomb friction. The simulation results showed that, using this new model of gimbal friction, dither would no longer be necessary.