Search NASA⌕ Search

SEARCH · Search NASA

Results for “fail operational”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 361 records · Page 20

Acoustic Detection of Faults and Degradation in a High-Bypass Turbofan Engine during VIPR Phase III Testing

The Vehicle Integrated Propulsion Research (VIPR) Phase III project was executed at Edwards Air Force Base, California, by the National Aeronautics and Space Administration and several industry, academic, and government partners in the summer of 2015. One of the research objectives was to use external radial acoustic microphone arrays to detect changes in the noise characteristics produced by the research engine during volcanic ash ingestion and seeded fault insertion scenarios involving bleed air valves. Preliminary results indicate the successful acoustic detection of suspected degradation as a result of cumulative exposure to volcanic ash. This detection is shown through progressive changes, particularly in the high-frequency content, as a function of exposure to greater cumulative quantities of ash. Additionally, detection of the simulated failure of the 14th stage stability bleed valve and, to a lesser extent, the station 2.5 stability bleed valve, to their fully-open fail-safe positions was achieved by means of spectral comparisons between nominal (normal valve operation) and seeded fault scenarios.

noise spectra↗

NASA Efforts to Explore Additively Manufactured Thermal Protection Systems

Development of the thermal protection system (TPS) needed to protect external and internal surfaces during launch, ascent, cruise, and reentry, is a very specialized field with expertise developed over seven decades and has enabled successful robotic as well as human exploration. Well known examples are: 1) the ablative heatshield that protected Apollo Astronauts during reentry in 1960’s, 2) reusable TPS used on the Space Shuttle Orbiter, which is now sought after by commercial space industry, and 3) hot structures, such as Carbon-Carbon and other high temperature materials needed to operate control surfaces and sharp leading edges during hypervelocity flight. TPS function demands fail-safe design to ensure mission success. One TPS does not fit all, and each application requires a unique material along with manufacturing and integration approach. TPS mass is a key metric. A robust but inefficient TPS reduces payload mass. Mission- and domain-unique TPS development and flight certification efforts have been expensive with long lead times. As a result, there are limited TPS choices with high cost. For future commercial efforts to be successful, the ability to rapidly develop TPS, based on specific needs and at a lower cost, without compromising either mass efficiency or functionality is necessary. NASA is looking into this. Additive manufacturing (AM) techniques have shown their utility in making complex parts and, through automation, the potential to reduce cost and schedule in some applications. The promise of additive manufacturing to TPS, while exciting, is unexplored. In the past several years, NASA has made exploratory investments in internal development as well as in small business and universities through SBIR and STTR programs. In addition, NASA is bringing together the TPS as well as Additive Manufacturing communities to explore approaches to prioritize focus areas for broad benefits. The very first “Additively Manufactured Thermal Protection System Workshop,” to be held at NASA Johnson Space Center in Houston at the end of March of this year, is the culmination of a year-long effort to engage the research, development, and user communities involved in both TPS as well as additive manufacturing. The workshop participants include representatives from large and small commercial space industry, DoD, Federally Funded Research and Development Centers, University Researchers and NASA personnel. The proposed talk will highlight future TPS needs of both emerging commercial and Government interests, NASA’s development efforts in additively manufactured TPS, and the findings and recommendations from the first AM TPS Workshop.

Ethiraj Venkatapathy↗

Analysis of Launch Vehicle Liftoff Debris: Historical Perspective from Space Shuttle and Application to Artemis I

Human exploration-class launch vehicles are inherently prone to debris due to the extreme environments generated during pre-launch operations, liftoff, and flight. The use of cryogenic propellants often requires thermal protection system (TPS) coatings, typically foam, to maintain the propellant conditions in the tank and prevent an accumulation ice on the external surface of the vehicle. Some ice growth is to be expected at umbilical interfaces, vents, flanges, or brackets where it is difficult to apply TPS. This ice may come loose at any time due to wind on the launch pad, structural vibration and acoustics after rocket ignition, or aerodynamic forces during flight. This phenomena is especially apparent on vehicles with no TPS, such as the Saturn V rockets used in the Apollo Program, see Figure 1. During propellant tanking, the thermal contraction of the underlying substrate may generate cracks in the TPS (Figure 1). Chunks of TPS can release due to the expansion of ingested gas from cryopumping or from aerodynamic forces if the crack creates an offset surface. Most foams will also have a certain amount of “popcorning” where small pieces of foam will pop off during flight because of the differential between the static surface pressure and the pressure of the gas trapped in the foam cell structure. There are a number of other coating or closeout materials that may be shed from the vehicle and become debris. During pre-launch operations and liftoff, the vehicle may also be exposed to debris originating from the launch pad or ground support equipment. This debris is separate from foreign object debris, or FOD, which is not intended to be present and is strictly controlled through operations and maintenance procedures. In this case, debris is generated from hardware and materials that are necessary for launch and are subject to the intense vibration, acoustics, and direct plume impingement of the launch environment. Examples include ice from umbilicals, tape and tie wraps that protect cables, and rust or corrosion from the launch platform. While NASA has historically been aware of debris as a potential issue that could cause a failure resulting in loss of mission, loss of vehicle, or loss of crew, the likelihood and severity of that risk was not always well understood or given sufficient weight in program and flight decisions. After the Space Shuttle Columbia accident (STS-107), the investigation found that foam TPS debris shed from the external tank was the proximate cause of the damage to the orbiter wing. Six previous observations of debris released from the foam ramp that covered the bipod connecting the forward end of the orbiter to the external tank resulted in minor changes or were determined to be accepted flight risks. Two occurrences of bipod ramp foam loss were not identified until the STS-107 investigation. Despite the damage inflicted by these debris strikes, the Shuttle Program Requirements Control Board deemed the vehicle safe to fly. During the Return to Flight effort following the Columbia disaster, NASA Engineering developed a process for the assessment of debris transport, impact, and damage tolerance to support independent assessments of risk by NASA Safety and Mission Assurance (S&MA). Under this system, each element (vehicle or ground system) defines a catalog of all expected debris based on launch history, component testing, or analysis. Debris transport analysis (DTA) is conducted using the debris catalog characteristics and potential flow transport mechanisms (e.g., vehicle aerodynamics, gravity, wind, plume-driven). The predicted debris impact locations and velocities are provided to the hardware owners, who use available test data and analysis to determine whether each component can withstand the impacts. In cases where the element hardware may be severely damaged or fail, the options are to mitigate the debris source through some change in design or operation, or to work with S&MA to try to characterize the probability of the impact and damage for program risk acceptance. Because of the differences in debris characteristics and transport, the DTA has been divided between the Liftoff and Ascent regimes. The development and application of Liftoff DTA methodology from the Shuttle Program to the current Artemis Program is the subject of this paper. Liftoff DTA covers the time from the start of pre-launch operations at the launch pad, up until the vehicle clears the launch tower and there is no longer any interaction with ground systems. Debris transport during this period is broadly classified as either gravity, wind, and plume-entrained (GWPE) or plume driven (PD). GWPE debris is generally lower speed, travelling in a forward-to-aft direction. PD transport includes flow features from the rocket ignition transient, as well as plume impingement and recirculation that occur as the vehicle lifts off the launch platform. In these cases, the debris typically moves in an aft-to-forward direction at higher speeds. The applicable transport mechanisms must be considered for each piece of debris depending on the material, and release location and time. For example, rust or metallic debris from the tower could fall (GWPE) and impact the vehicle before landing on the launch platform deck where it could be also be transported by plume impingement (PD). However, falling ice (GWPE) from an umbilical is unlikely to survive impact with the vehicle or launch platform and be available for PD transport. Modeling of debris transport is accomplished using a set of DTA tools which simulate debris trajectories subject to a reference frame acceleration (i.e., gravity) and aerodynamic drag. Where the trajectory encounters a solid surface, the debris is allowed to rebound with a specified coefficient of restitution. The drag is calculated by interpolating the fluid state at each point in the debris trajectory from high-fidelity computational fluid dynamics (CFD) simulations of the launch vehicle and pad. The CFD data may either be static (steady state or time averaged), typically for GWPE transport, or dynamic (time-accurate) for PD flow features like the ignition transient. Examples of the CFD flow field solutions for the Space Launch System (SLS) rocket and launch pad are shown in Figure 2. Typical SLS debris trajectory predictions from DTA are illustrated in Figure 3. The final version of this paper will include a more detailed examination of the Liftoff DTA process developed during the Shuttle Program, and how it has been augmented and applied to the SLS rocket under the Artemis Program. Comparisons with debris observations from the Artemis I launch will demonstrate validation of the tools and methodology.

Debris↗

Real-Time Distributed Embedded Oscillator Operating Frequency Monitoring

A document discusses the utilization of embedded clocks inside of operating network data links as an auxiliary clock source to satisfy local oscillator monitoring requirements. Modem network interfaces, typically serial network links, often contain embedded clocking information of very tight precision to recover data from the link. This embedded clocking data can be utilized by the receiving device to monitor the local oscillator for tolerance to required specifications, often important in high-integrity fault-tolerant applications. A device can utilize a received embedded clock to determine if the local or the remote device is out of tolerance by using a single link. The local device can determine if it is failing, assuming a single fault model, with two or more active links. Network fabric components, containing many operational links, can potentially determine faulty remote or local devices in the presence of multiple faults. Two methods of implementation are described. In one method, a recovered clock can be directly used to monitor the local clock as a direct replacement of an external local oscillator. This scheme is consistent with a general clock monitoring function whereby clock sources are clocking two counters and compared over a fixed interval of time. In another method, overflow/underflow conditions can be used to detect clock relationships for monitoring. These network interfaces often provide clock compensation circuitry to allow data to be transferred from the received (network) clock domain to the internal clock domain. This circuit could be modified to detect overflow/underflow conditions of the buffering required and report a fast or slow receive clock, respectively.

Pollock, Julie↗

Characterization of wind conditions and impact on wind loading at an operational parabolic trough concentrating solar power plant using LiDAR observations

Wind loading is a major factor influencing the structural design costs of Concentrating Solar Power (CSP) collector systems, including heliostats and parabolic troughs. Traditionally, these designs have been based on wind-tunnel data, which often fail to accurately represent the dynamic effects experienced at full scale. This study presents a first-of-its-kind experimental characterization of wind conditions within an operational parabolic-trough CSP power plant focusing specifically on using lidar observations. The lidar observations give a unique opportunity to provide insights into wind flow conditions deep within the trough arrays. Our results suggest that (1) after being blocked by the first few rows, the wind speed above the troughs recovers to 73% of its inflow magnitude as it flows further over the trough field due to enhanced turbulent mixing and (2) due to the wind speed recovery, troughs in the interior field will likely experience higher shear-induced turning moments compared those at the front. The conclusions from this work stress the importance of better understanding the wind patterns and interior wind loads when designing solar collectors and highlights the need for more interior load measurements in the future field campaigns.

17 WIND ENERGY↗

Some Improvements in Utilization of Flash Memory Devices

Two developments improve the utilization of flash memory devices in the face of the following limitations: (1) a flash write element (page) differs in size from a flash erase element (block), (2) a block must be erased before its is rewritten, (3) lifetime of a flash memory is typically limited to about 1,000,000 erases, (4) as many as 2 percent of the blocks of a given device may fail before the expected end of its life, and (5) to ensure reliability of reading and writing, power must not be interrupted during minimum specified reading and writing times. The first development comprises interrelated software components that regulate reading, writing, and erasure operations to minimize migration of data and unevenness in wear; perform erasures during idle times; quickly make erased blocks available for writing; detect and report failed blocks; maintain the overall state of a flash memory to satisfy real-time performance requirements; and detect and initialize a new flash memory device. The second development is a combination of hardware and software that senses the failure of a main power supply and draws power from a capacitive storage circuit designed to hold enough energy to sustain operation until reading or writing is completed.

Gender, Thomas K.↗

Isokinetic TWC Evaporator Probe: Calculations and Systemic Uncertainty Analysis

A new Isokinetic Total Water Content Evaporator (IKP2) was downsized from a prototype instrument, specifically to make airborne measurements of hydrometeor total water content (TWC) in deep tropical convective clouds to assess the new ice crystal Appendix D icing envelope. The probe underwent numerous laboratory and wind tunnel investigations to ensure reliable operation under the difficult high altitude/speed/TWC conditions under which other TWC instruments have been known to either fail, or have unknown performance characteristics and the results are presented in a companion paper. This paper presents the equations used to determine the total water content (TWC) of the sampled atmosphere from the values measured by the IKP2 or necessary ancillary data from other instruments. The uncertainty in the final TWC is determined by propagating the uncertainty in the measured values through the calculations to the final result. Two techniques were used and the results compared. The first is a typical analytical method of propagating uncertainty and the second performs a Monte Carlo simulation. The results are very similar with differences that are insignificant for practical purposes. The uncertainty is between 2 percent and 3 percent at most practical operating conditions. The capture efficiency of the IKP2 was also examined based on a computational fluid dynamic simulation of the original IKP and scaled down to the IKP2. Particles above 24 microns were found to have a capture efficiency greater than 99 percent at all operating conditions.

Aircraft Icing↗

Isokinetic TWC Evaporator Probe: Calculations and Systemic Uncertainty Analysis

A new Isokinetic Total Water Content Evaporator (IKP2) was downsized from a prototype instrument, specifically to make airborne measurements of hydrometeor total water content (TWC) in deep tropical convective clouds to assess the new ice crystal Appendix D icing envelope. The probe underwent numerous laboratory and wind tunnel investigations to ensure reliable operation under the difficult high altitude/speed/TWC conditions under which other TWC instruments have been known to either fail, or have unknown performance characteristics and the results are presented in a companion paper (Ref. 1). This paper presents the equations used to determine the total water content (TWC) of the sampled atmosphere from the values measured by the IKP2 or necessary ancillary data from other instruments. The uncertainty in the final TWC is determined by propagating the uncertainty in the measured values through the calculations to the final result. Two techniques were used and the results compared. The first is a typical analytical method of propagating uncertainty and the second performs a Monte Carlo simulation. The results are very similar with differences that are insignificant for practical purposes. The uncertainty is between 2 and 3 percent at most practical operating conditions. The capture efficiency of the IKP2 was also examined based on a computational fluid dynamic simulation of the original IKP and scaled down to the IKP2. Particles above 24 micrometers were found to have a capture efficiency greater than 99 percent at all operating conditions.

Meteorological Instrument↗

An overview of silicon carbide device technology

Recent progress in the development of silicon carbide (SiC) as a semiconductor is briefly reviewed. This material shows great promise towards providing electronic devices that can operate under the high-temperature, high-radiation, and/or high-power conditions where current semiconductor technologies fail. High quality single crystal wafers have become available, and techniques for growing high quality epilayers have been refined to the point where experimental SiC devices and circuits can be developed. The prototype diodes and transistors that have been produced to date show encouraging characteristics, but by the same token they also exhibit some device-related problems that are not unlike those faced in the early days of silicon technology development. Although these problems will not prevent the implementation of some useful circuits, the performance and operating regime of SiC electronics will be limited until these device-related issues are solved.

Neudeck, Philip G.↗

Optimization of an Impedance-Matched Test Fixture with the Modal Projection Error

Across many industries and engineering disciplines, components and systems are designed and deployed into their operational environment of intended use. It is the desire of the design agency to be able to predict whether their component or system will function in its shock and vibration environments or if it will fail due to mechanical stresses. One method to determine if the component will survive the shock and vibration environments is to expose the component to the operational environment in a laboratory. One difficulty in executing a representative laboratory test is that the component may not have the same boundary condition in the laboratory as in the operational configuration. This paper examines the use of parameterized optimization to design the test fixture in order to better match the operational configuration. Several frequency and modal-based objective functions are examined for the optimization. The study shows that the Modal Projection Error objective function performs the best of the functions studied. The efficacy of the Modal Projection Error is demonstrated with respect to dynamic test fixture design on several analytical and experimental exemplars.

dynamic↗

A radiation hardened 256 x 4 bulk CMOS RAM

A radiation hardened version of the C2L process has been developed that utilizes all-low-temperature processes subsequent to channel oxidation. This process has been used on 1K RAMS. The RAMs functioned reliably at a dose of 200,000 rads (Si) and failed at a dose of 500,000 rads (Si). The 1K RAM is capable of operating from 7.5 to 12 volts and has an access time from address change of 160 nsec at 10 volts

Napoli, L. S.↗

Analysis of 7- X 10-foot high speed wind tunnel shaft loads in support of fan blade failure investigation

This is a report of the investigation of the High-Speed 7- X 10-Foot Wind Tunnel at NASA Langley Research Center, which experienced a catastrophic failure of all 18 Sitka spruce fan blades during operation at 0.8 Mach number on 2 July 1985. The High-Speed Tunnel, a closed-circuit/single-return atmospheric wind tunnel, had been operated since 1945 to support a wide range of subsonic aerodynamic tests and studies. The failed blade set had been in use since 1975. In addition to blade loss, the most significant damage was a bent main drive shaft for a total estimated damage loss of 1.7 million dollars. An analysis of the natural frequency characteristics as well as loads, reactions, stresses, and deflections of the fan drive system resulting from steady-state and dynamic loads due to unbalance was performed. Transient load cases were simulated by step input and ramp input loading functions intended to simulate the loss of one to nine blades (maximum unbalance forces).

Faison, Richard W.↗

Monitoring the health of control system components

One characteristic of intelligent behavior is recognition of impaired capability. So an intelligent system should be able to monitor its own performance and determine when one of its components has failed - causing it to lose some degree of capability. This is especially important in autonomous operation which is one of the primary motivations for intelligent systems. This paper briefly reviews the principal approaches that have been suggested for monitoring control systems for failures of its sensors and actuators. The important characteristics of these methods are noted and two are selected for further consideration. These two methods, the failure detection filter and generalized parity relations, are described. Results of experiments are then given of detection and isolation of sensor failures using data taken on the Mini-Mast facility at the NASA Langley Research Center. The effects of certain design options are illustrated. The paper concludes with some observations about the general problem of monitoring the health of control systems.

Vander Velde, W. E.↗

Experimental Investigation of an Overriding Control to Effect Recovery from Surge and Stall in a Turbojet Engine

The override was designed to automatically recover the engine from stall and surge by reducing fuel flow and then increasing fuel flow in a manner to avoid repeated stalls and surges and successfully complete the acceleration. One of two parameters was used to operate the override, tailpipe temperature, or the derivative of compressor-discharge pressure. The override operating with tailpipe temperature recovered the engine from stall and surge. Operating on compressor-discharge-pressure derivative, the override recovered the engine from surge, but failed when stall was encountered.

Stiglic, Paul M↗

Space Transportation System Availability Requirements and Its Influencing Attributes Relationships

It is essential that management and engineering understand the need for an availability requirement for the customer's space transportation system as it enables the meeting of his needs, goal, and objectives. There are three types of availability, e.g., operational availability, achieved availability, or inherent availability. The basic definition of availability is equal to the mean uptime divided by the sum of the mean uptime plus the mean downtime. The major difference is the inclusiveness of the functions within the mean downtime and the mean uptime. This paper will address tIe inherent availability which only addresses the mean downtime as that mean time to repair or the time to determine the failed article, remove it, install a replacement article and verify the functionality of the repaired system. The definitions of operational availability include the replacement hardware supply or maintenance delays and other non-design factors in the mean downtime. Also with inherent availability the mean uptime will only consider the mean time between failures (other availability definitions consider this as mean time between maintenance - preventive and corrective maintenance) that requires the repair of the system to be functional. It is also essential that management and engineering understand all influencing attributes relationships to each other and to the resultant inherent availability requirement. This visibility will provide the decision makers with the understanding necessary to place constraints on the design definition for the major drivers that will determine the inherent availability, safety, reliability, maintainability, and the life cycle cost of the fielded system provided the customer. This inherent availability requirement may be driven by the need to use a multiple launch approach to placing humans on the moon or the desire to control the number of spare parts required to support long stays in either orbit or on the surface of the moon or mars. It is the intent of this paper to provide the visibility of relationships of these major attribute drivers (variables) to each other and the resultant system inherent availability, but also provide the capability to bound the variables providing engineering the insight required to control the system's engineering solution. An example of this visibility will be the need to provide integration of similar discipline functions to allow control of the total parts count of the space transportation system. Also the relationship visibility of selecting a reliability requirement will place a constraint on parts count to achieve a given inherent availability requirement or accepting a larger parts count with the resulting higher reliability requirement. This paper will provide an understanding for the relationship of mean repair time (mean downtime) to maintainability, e.g., accessibility for repair, and both mean time between failure, e.g., reliability of hardware and the system inherent availability. Having an understanding of these relationships and resulting requirements before starting the architectural design concept definition will avoid considerable time and money required to iterate the design to meet the redesign and assessment process required to achieve the results required of the customer's space transportation system. In fact the impact to the schedule to being able to deliver the system that meets the customer's needs, goals, and objectives may cause the customer to compromise his desired operational goal and objectives resulting in considerable increased life cycle cost of the fielded space transportation system.

Rhodes, Russel E.↗

Flight Computer Processing Avionics for Space Station Microgravity Experiments: A Risk Assessment of Commercial Off-the-Shelf Utilization

NASA/Marshall Space Flight Center (MSFC) is continually looking for ways to reduce the costs and schedule and minimize the technical risks during the development of microgravity programs. One of the more prominent ways to minimize the cost and schedule is to use off-the-shelf hardware (OTS). However, the use of OTS often increases the risk. This paper addresses relevant factors considered during the selection and utilization of commercial off-the-shelf (COTS) flight computer processing equipment for the control of space station microgravity experiments. The paper will also discuss how to minimize the technical risks when using COTS processing hardware. Two microgravity experiments for which the COTS processing equipment is being evaluated for are the Equiaxed Dendritic Solidification Experiment (EDSE) and the Self-diffusion in Liquid Elements (SDLE) experiment. Since MSFC is the lead center for Microgravity research, EDSE and SDLE processor selection will be closely watched by other experiments that are being designed to meet payload carrier requirements. This includes the payload carriers planned for the International Space Station (ISS). The purpose of EDSE is to continue to investigate microstructural evolution of, and thermal interactions between multiple dendrites growing under diffusion controlled conditions. The purpose of SDLE is to determine accurate self-diffusivity data as a function of temperature for liquid elements selected as representative of class-like structures. In 1999 MSFC initiated a Center Director's Discretionary Fund (CDDF) effort to investigate and determine the optimal commercial data bus architecture that could lead to faster, better, and lower cost data acquisition systems for the control of microgravity experiments. As part of this effort various commercial data acquisition systems were acquired and evaluated. This included equipment with various form factors, (3U, 6U, others) and equipment that utilized various bus structures, (VME, PC104, STD bus). This evaluation of hardware was performed in conjunction with a trade study that considered over twenty (20) different factors relevant to the selection of an optimum design approach. These factors included; safety, sizing and timing, radiation hardness and single event upset, power consumption, heat dissipation, size and volume, expected service life, maintainability, heritage, operating systems, requirements for software reuse, availability of compatible interface boards, relative cost, schedule, reliability, EMI/EMC factors, "hot swap" capability, standards for conduction cooling, I/O capabilities, unique carrier requirements and operating system considerations. The approach to evaluate Safety as part of this study included a review of the Preliminary Hazard Analysis (PHA) for each of the experiment designs and a determination of how each hazard could be addressed and eliminated when different processors were selected. This included evaluating various design approaches and trade-offs between fault tolerant designs and fail-safe designs in accordance with NSTS 1700.7B. This will include the results of radiation testing where available. Various operating systems, such as VxWorks, Linux, QNX, and Embedded NT are evaluated and the advantages and disadvantages of their utilization are also addressed. Design implementation strategies for the various operating systems are considered and discussed. This paper presents the results and recommendations from this trade study. Preliminary conclusions from this study are that safety concerns from lack or radiation testing on COTS equipment can be addressed by additional testing and design considerations, the PC104 bus provided adequate I/O for the SDLE and EDSE microgravity experiments, and PC104 bus components offered significant advantages over VME and cPCI for weight and space reductions.

Estes, Howard↗

MER Telemetry Processor

MERTELEMPROC processes telemetered data in data product format and generates Experiment Data Records (EDRs) for many instruments (HAZCAM, NAVCAM, PANCAM, microscopic imager, Moessbauer spectrometer, APXS, RAT, and EDLCAM) on the Mars Exploration Rover (MER). If the data is compressed, then MERTELEMPROC decompresses the data with an appropriate decompression algorithm. There are two compression algorithms (ICER and LOCO) used in MER. This program fulfills a MER specific need to generate Level 1 products within a 60-second time requirement. EDRs generated by this program are used by merinverter, marscahv, marsrad, and marsjplstereo to generate higher-level products for the mission operations. MERTELEPROC was the first GDS program to process the data product. Metadata of the data product is in XML format. The software allows user-configurable input parameters, per-product processing (not streambased processing), and fail-over is allowed if the leading image header is corrupted. It is used within the MER automated pipeline. MERTELEMPROC is part of the OPGS (Operational Product Generation Subsystem) automated pipeline, which analyzes images returned by in situ spacecraft and creates level 1 products to assist in operations, science, and outreach.

Lee, Hyun H.↗

Advanced air traffic management

Air traffic worldwide continues to grow, and this growth is predicted to continue in the coming decades. Air traffic management (ATM) systems in several parts of the world have now reached their operating limits. The external symptoms of this are increases in the number of delays experienced by the system, and a rise in the frequency of near-misses. If the ATM system fails to develop to provide more capacity, then the result will be a decrease in safety levels, and increasing delays, or a limit on the number of permitted aircraft operations.

Wangermann, J. P.↗