SEARCH · Search NASA

Results for “System Safety Assessment”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 379 records · Page 21

All sources NASA NTRS DOE OSTI

NASA NTRSDate not supplied

Defining A Modelling Language to Support Functional Hazard Assessment

Functional Hazard Assessment (FHA) is a key early-stage engineering process that supports the incorporation of safety in design by identifying the high-level functional hazards the system may encounter. While many FHA-like methodologies have been proposed in the design engineering literature, many of these methodologies have had difficulty becoming accepted industry practice. Industry standards, on the other hand, either provide too little recommendation on how to represent the function of the system to perform FHA, or rely on existing design artefacts which insufficiently support the goals of the process. This paper presents some of the problems with current modeling languages (both proposed and used) for FHA which limit the scope, expressiveness, flexibility, and precision of the analysis. It then outlines desirable principles an FHA-supporting analysis language should embody, and introduces the Functional Reasoning Design Language (FRDL), a formal modeling language for describing the functional elements of a system and their interactions, which aims to satisfy these principles. To demonstrate the use of this language, the modeling and hazard analysis of a disaster response drone is presented. While this case study is limited in scope, it highlights how FRDL can represent system function while reducing the ambiguity present in typical FHA-supporting functional modeling languages

Hazard Assessment↗

NASA NTRS1978

Management: A continuing literature survey with indexes

This bibliography lists 782 reports, articles, and other documents introduced into the NASA scientific and technical information system in 1977. The citations, and abstracts when available, are reproduced exactly as they appeared originally in IAA and STAR, including the original accession numbers from the respective announcement journals. Topics cover the management of research and development contracts, production, logistics, personnel, safety, reliability and quality control citations. Includes references on: program, project and systems management; management policy, philosophy, tools, and techniques; decisionmaking processes for managers; technology assessment; management of urban problems; and information for managers on Federal resources, expenditures, financing, and budgeting.

Source record↗

NASA NTRS1991

Method for optimal configuration of an ECLSS on the Space Station Freedom

The establishment of a permanently manned Space Station represents a substantial challenge in the design of a life support system, specifically in the need to supply a large crew for missions of extended duration. The Space Station will evolve by time phased modular increments delivered and supplied by the Space Shuttle and other advanced launch systems. With the addition of each subsequent phase or alteration of mission duties, the requirements of the Station may differ from previous phases of development. With the addition of future crews and pressurized volume throughout the lifetime of the Space Station, change-out of individual subsystems may be necessary in order to meet the performance, safety, and reliability levels required from the Environmental Control and Life Support System (ECLSS). The analysis of this system growth demands the capability for advanced, integrated assessment techniques so that the unique mission drivers during each phase and mission scenario may be identified and evaluated. In order to determine the impacts of the interdependency between the ECLSS, the crew, the various user experiments, and the other distributed systems, consideration must be given to all Space Station resources and requirements during the initial and subsequent evolution phase. Therefore, it is necessary for analysis efforts to study the long term effects of established designs. These studies must quantify the optimal degree of loop closure within the capabilities of existing and future technologies including any resulting maintenance and logistics requirements. In addition, the necessity for subsystem retrofit during the lifetime of the Station must be examined. The source of system requirements due to long term exposure to the microgravity environment is illustrated, the criticality of the ECLSS functions is reviewed, and a method is described to develop an optimal design during each configuration based on the cross-consumption of Station resources. A comparison utilizing this procedure is discussed.

Gould, Marston J.↗

NASA NTRS2016

Safety and Certification Considerations for Expanding the Use of UAS in Precision Agriculture

The agricultural community is actively engaged in adopting new technologies such as unmanned aircraft systems (UAS) to help assess the condition of crops and develop appropriate treatment plans. In the United States, agricultural use of UAS has largely been limited to small UAS, generally weighing less than 55 lb and operating within the line of sight of a remote pilot. A variety of small UAS are being used to monitor and map crops, while only a few are being used to apply agricultural inputs based on the results of remote sensing. Larger UAS with substantial payload capacity could provide an option for site-specific application of agricultural inputs in a timely fashion, without substantive damage to the crops or soil. A recent study by the National Aeronautics and Space Administration (NASA) investigated certification requirements needed to enable the use of larger UAS to support the precision agriculture industry. This paper provides a brief introduction to aircraft certification relevant to agricultural UAS, an overview of and results from the NASA study, and a discussion of how those results might affect the precision agriculture community. Specific topics of interest include business model considerations for unmanned aerial applicators and a comparison with current means of variable rate application. The intent of the paper is to inform the precision agriculture community of evolving technologies that will enable broader use of unmanned vehicles to reduce costs, reduce environmental impacts, and enhance yield, especially for specialty crops that are grown on small to medium size farms.

Hayhurst, Kelly J.↗

NASA NTRS2016

Evaluating Alerting and Guidance Performance of a UAS Detect-And-Avoid System

A key challenge to the routine, safe operation of unmanned aircraft systems (UAS) is the development of detect-and-avoid (DAA) systems to aid the UAS pilot in remaining "well clear" of nearby aircraft. The goal of this study is to investigate the effect of alerting criteria and pilot response delay on the safety and performance of UAS DAA systems in the context of routine civil UAS operations in the National Airspace System (NAS). A NAS-wide fast-time simulation study was conducted to assess UAS DAA system performance with a large number of encounters and a broad set of DAA alerting and guidance system parameters. Three attributes of the DAA system were controlled as independent variables in the study to conduct trade-off analyses: UAS trajectory prediction method (dead-reckoning vs. intent-based), alerting time threshold (related to predicted time to LoWC), and alerting distance threshold (related to predicted Horizontal Miss Distance, or HMD). A set of metrics, such as the percentage of true positive, false positive, and missed alerts, based on signal detection theory and analysis methods utilizing the Receiver Operating Characteristic (ROC) curves were proposed to evaluate the safety and performance of DAA alerting and guidance systems and aid development of DAA system performance standards. The effect of pilot response delay on the performance of DAA systems was evaluated using a DAA alerting and guidance model and a pilot model developed to support this study. A total of 18 fast-time simulations were conducted with nine different DAA alerting threshold settings and two different trajectory prediction methods, using recorded radar traffic from current Visual Flight Rules (VFR) operations, and supplemented with DAA-equipped UAS traffic based on mission profiles modeling future UAS operations. Results indicate DAA alerting distance threshold has a greater effect on DAA system performance than DAA alerting time threshold or ownship trajectory prediction method. Further analysis on the alert lead time (time in advance of predicted loss of well clear at which a DAA alert is first issued) indicated a strong positive correlation between alert lead time and DAA system performance (i.e. the ability of the UAS pilot to maneuver the unmanned aircraft to remain well clear). While bigger distance thresholds had beneficial effects on alert lead time and missed alert rate, it also generated a higher rate of false alerts. In the design and development of DAA alerting and guidance systems, therefore, the positive and negative effects of false alerts and missed alerts should be carefully considered to achieve acceptable alerting system performance by balancing false and missed alerts. The results and methodology presented in this study are expected to help stakeholders, policymakers and standards committees define the appropriate setting of DAA system parameter thresholds for UAS that ensure safety while minimizing operational impacts to the NAS and equipage requirements for its users before DAA operational performance standards can be finalized.

UAS Detect-and-Avoid (DAA) System↗

NASA NTRS1994

The Charlotte (TM) intra-vehicular robot

NASA has identified telerobotics and telescience as essential technologies to reduce the crew extra-vehicular activity (EVA) and intra-vehicular activity (IVA) workloads. Under this project, we are developing and flight testing a novel IVA robot to relieve the crew of tedious and routine tasks. Through ground telerobotic control of this robot, we will enable ground researchers to routinely interact with experiments in space. Our approach is to develop an IVA robot system incrementally by employing a series of flight tests with increasing complexity. This approach has the advantages of providing an early IVA capability that can assist the crew, demonstrate capabilities that ground researchers can be confident of in planning for future experiments, and allow incremental refinement of system capabilities and insertion of new technology. In parallel with this approach to flight testing, we seek to establish ground test beds, in which the requirements of payload experimenters can be further investigated. In 1993 we reviewed manifested SpaceHab experiments and defined IVA robot requirements to assist in their operation. We also examined previous IVA robot designs and assessed them against flight requirements. We rejected previous design concepts on the basis of threat to crew safety, operability, and maintainability. Based on this insight, we developed an entirely new concept for IVA robotics, the CHARLOTTE robot system. Ground based testing of a prototype version of the system has already proven its ability to perform most common tasks demanded of the crew, including operation of switches, buttons, knobs, dials, and performing video surveys of experiments and switch panels.

Swaim, Patrick L.↗

NASA NTRS1976

Management: A continuing literature survey with indexes, March 1976

Management is a compilation of references to selected reports, journal articles, and other documents on the subject of management. This publication lists 368 documents originally announced in the 1975 issues of Scientific and Technical Aerospace Reports (STAR) or International Aerospace Abstracts (IAA). It includes references on the management of research and development, contracts, production, logistics, personnel, safety, reliability and quality control. It also includes references on: program, project and systems management; management policy, philosophy, tools, and techniques; decisionmaking processes for managers; technology assessment; management of urban problems; and information for managers on Federal resources, expenditures, financing, and budgeting.

Source record↗

NASA NTRS1983

Qualification testing and electrical measurement experience: A manufacturer's view

ARCO Solar's experiences as a participant in an industry-utility-government environmental qualification team examining photovoltaic devices are discussed. Included is an assessment of the applicability, completeness and appropriateness of the testing procedures and of the acceptance criteria for megawatt-sized procurements for utilities. Like the stand-alone users, the utility industry is interested in obtaining low costs, but additional concerns exist related to reliability and durability, safety, grounding and overall system criteria including performance prediction (related to output power acceptance testing), power quality and dispatchability. For purposes of this first major purchase of photovoltaic modules and panels by the utility industry, there was a carry-over of the JPL specifications. The need exists for futher development, assessement, and selection of qualification and testing standards and evaluation criteria specifically addressing these additional concerns for utility-connected PV power-plant applications.

Arnett, J. C.↗

NASA NTRS2008

Integrating Safety and Mission Assurance in Design

This presentation describes how the Ares Projects are learning from the successes and failures of previous launch systems in order to maximize safety and reliability while maintaining fiscal responsibility. The Ares Projects are integrating Safety and Mission Assurance into design activities and embracing independent assessments by Quality experts in thorough reviews of designs and processes. Incorporating Lean thinking into the design process, Ares is also streamlining existing processes and future manufacturing flows which will yield savings during production. Understanding the value of early involvement of Quality experts, the Ares Projects are leading launch vehicle development into the 21st century.

Cianciola, Chris↗

NASA NTRS2012

Comparison of Aircraft Models and Integration Schemes for Interval Management in the TRACON

Reusable models of common elements for communication, computation, decision and control in air traffic management are necessary in order to enable simulation, analysis and assurance of emergent properties, such as safety and stability, for a given operational concept. Uncertainties due to faults, such as dropped messages, along with non-linearities and sensor noise are an integral part of these models, and impact emergent system behavior. Flight control algorithms designed using a linearized version of the flight mechanics will exhibit error due to model uncertainty, and may not be stable outside a neighborhood of the given point of linearization. Moreover, the communication mechanism by which the sensed state of an aircraft is fed back to a flight control system (such as an ADS-B message) impacts the overall system behavior; both due to sensor noise as well as dropped messages (vacant samples). Additionally simulation of the flight controller system can exhibit further numerical instability, due to selection of the integration scheme and approximations made in the flight dynamics. We examine the theoretical and numerical stability of a speed controller under the Euler and Runge-Kutta schemes of integration, for the Maintain phase for a Mid-Term (2035-2045) Interval Management (IM) Operational Concept for descent and landing operations. We model uncertainties in communication due to missed ADS-B messages by vacant samples in the integration schemes, and compare the emergent behavior of the system, in terms of stability, via the boundedness of the final system state. Any bound on the errors incurred by these uncertainties will play an essential part in a composable assurance argument required for real-time, flight-deck guidance and control systems,. Thus, we believe that the creation of reusable models, which possess property guarantees, such as safety and stability, is an innovative and essential requirement to assessing the emergent properties of novel airspace concepts of operation.

Neogi, Natasha↗

NASA NTRS2015

Probabilistic Surface Characterization for Safe Landing Hazard Detection and Avoidance (HDA)

Apparatuses, systems, computer programs and methods for performing hazard detection and avoidance for landing vehicles are provided. Hazard assessment takes into consideration the geometry of the lander. Safety probabilities are computed for a plurality of pixels in a digital elevation map. The safety probabilities are combined for pixels associated with one or more aim points and orientations. A worst case probability value is assigned to each of the one or more aim points and orientations.

Ivanov, Tonislav I.↗

NASA NTRS2021

A Study of Lessons and Experiences of NASA Centers in the Use of Commercial Off the Shelf (COTS) Electronics

The NASA Engineering and Safety Center (NESC) sponsored a Technical Assessment relating to the utilization of commercial-off-the-shelf (COTS) electrical, electronic, and electromechanical (EEE) parts in spaceflight systems at NASA Centers. The assessment had two primary goals. The first was to capture each NASA Centers’ current practices, best practices, lessons learned and Center-proposed recommendations on the use of COTS EEE parts and assemblies in critical ground support equipment (GSE). The second was to provide recommendations on the use of COTS, including a set of current best practices based on the Centers’ current and best practices and the NESC team’s discussions. One key achievement made by the assessment team was the characterization of the term Industry Leading Parts Manufacturers (ILPMs) as parts manufacturer with high volume automatic production facilities and which can provide documented proof of the technology, process and product qualification, and its implementation of the best practices for “zero defects” for parts quality, reliability and workmanship. The assessment concluded with numerous findings, takeaways and recommendations that will be discussed during this presentation.

commercial↗

NASA NTRSDate not supplied

Design and Testing of an Approach to Automated In-Flight Safety Risk Management for sUAS Operations

An onboard risk management automation design is presented based on run-time assurance principles, as well as the concept for In-Time Aviation Safety Management Systems (IASMS) as described by the National Academies. The automation is designed to operate independently of the autopilot and perform real-time risk assessment spanning multiple classes of hazards, predict constraint violations, and track autopilot states. In the event of elevated risk conditions or predicted constraint violations, the automation will select from a set of available contingencies and trigger autopilot mode changes if necessary to mitigate risk exposure. The onboard automation also informs the remote operator/pilot of what the independent monitor is observing and any contingency decisions or actions that may arise during flight. Details of an implementation of this design and results of verification and validation activities, as required to meet stringent NASA software and system assurance standards, are also presented. This includes simulation and flight testing using small unmanned aircraft systems.

Ersin Ancel↗

NASA NTRSDate not supplied

A Concept of Operations for Power Beaming of Electric Air Vehicles

A concept of operations is presented for power beaming of microwaves to extend battery charge of an electric air vehicle. Critical aspects of airspace operations and power beam charging are addressed. Three classes of electric Vertical Take-Off and Landing vehicle models are considered for recharging. The effects of transmitter frequency, antenna size, and beam width are analyzed. Based on past experiments in the industry, a 2.5 kW power beam is selected. A no-drag rectifying antenna under the belly of the vehicle is selected along with the conversion efficiency, power density, and its size. The combined efficiency of the transmit/receive system as well as the beam containment values are addressed. These parameters are chosen to assess viability and feasibility of the energy augmentation method to establish safety for humans on-board from exposure to the transmitted energy. NASA will test the concept of operations in a laboratory experiment with parameters selected and presented in this paper.

eVTOL vehicles↗

NASA NTRSDate not supplied

A Concept of Operations for Power Beaming of Electric Air Vehicles

eVTOL vehicles↗

NASA NTRS2004

Agent Architecture for Aviation Data Integration System

This paper describes the proposed agent-based architecture of the Aviation Data Integration System (ADIS). ADIS is a software system that provides integrated heterogeneous data to support aviation problem-solving activities. Examples of aviation problem-solving activities include engineering troubleshooting, incident and accident investigation, routine flight operations monitoring, safety assessment, maintenance procedure debugging, and training assessment. A wide variety of information is typically referenced when engaging in these activities. Some of this information includes flight recorder data, Automatic Terminal Information Service (ATIS) reports, Jeppesen charts, weather data, air traffic control information, safety reports, and runway visual range data. Such wide-ranging information cannot be found in any single unified information source. Therefore, this information must be actively collected, assembled, and presented in a manner that supports the users problem-solving activities. This information integration task is non-trivial and presents a variety of technical challenges. ADIS has been developed to do this task and it permits integration of weather, RVR, radar data, and Jeppesen charts with flight data. ADIS has been implemented and used by several airlines FOQA teams. The initial feedback from airlines is that such a system is very useful in FOQA analysis. Based on the feedback from the initial deployment, we are developing a new version of the system that would make further progress in achieving following goals of our project.

Kulkarni, Deepak↗

NASA NTRS1999

Autonomous Command Operations of the WIRE Spacecraft

This paper presents operational innovations which will be introduced on NASA's Wide Field Infrared Explorer (WIRE) mission. These innovations include an end-to-end design architecture for an autonomous commanding capability for the uplink of command loads during unattended station contacts. The WIRE mission is the fifth and final mission of NASA's Goddard Space Flight Center Small Explorer (SMEX) series to be launched in March of 1999. Its primary mission is the targeting of deep space fields using an ultra-cooled infrared telescope. Due to its mission design WIRE command loads are large (approximately 40 Kbytes per 24 hours) and must be performed daily. To reduce the cost of mission operations support that would be required in order to uplink command loads, the WIRE Flight Operations Team has implemented all autonomous command loading capability. This capability allows completely unattended operations over a typical two-day weekend period. The key factors driving design and implementation of this capability were: 1) integration with already existing ground system autonomous capabilities and systems, 2) the desire to evolve autonomous operations capabilities based upon previous SMEX operations experience - specifically the TRACE mission, 3) integration with ground station operations - both autonomous and man-tended, 4) low cost and quick implementation, and 5) end-to-end system robustness. A trade-off study was performed to examine these factors in light of the low-cost, higher-risk SMEX mission philosophy. The study concluded that a STOL (Spacecraft Test and Operations Language) based script, highly integrated with other scripts used to perform autonomous operations, was best suited given the budget and goals of the mission. Each of these factors is discussed in addition to use of the TRACE mission as a testbed for autonomous commanding prior to implementation on WIRE. The capabilities implemented on the WIRE mission are an example of a low-cost, robust, and efficient method for autonomous command loading when implemented with other autonomous features of the ground system. They call be used as a design and implementation template by other missions interested in evolving toward autonomous and lower cost operations. Additionally, the WIRE spacecraft will be used as an operational testbed upon completion of its nominal mission later in 1999. One idea being studied is advanced on-board modeling. Advanced on-board modeling techniques will be used to more efficiently display the spacecraft state. This health and safety information could be used by engineers on the ground or could be used by tile spacecraft for its own assessments. Additionally, this same state information could also be input into the event-driven scheduling system, as the scheduling system will need to assess the spacecraft state before undertaking a new activity. Advanced modeling techniques are being evaluated for a number of NASA missions including The Next Generation Space Telescope (NGST), which is scheduled to launch in 2007.

Walyus, Keith↗

NASA NTRS2020

Enabling Assurance in the MBSE Environment

A number of specific benefits that fit within the hallmarks of effective development are realized with implementation of model-based approaches to systems and assurance. Model Based Systems Engineering (MBSE) enabled by standardized modeling languages (e.g., SysML®) is at the core. These benefits in the context of spaceflight system challenges can include [1]: • Improved management of complex development • Reduced risk in the development process • Improved cost management • Improved design decisions With appropriate modeling techniques the assurance community also can improve early oversight and insight into project development. NASA has shown the basic constructs of SysML in an MBSE environment offer several key advantages, within a Model Based Mission Assurance (MBMA) initiative [2, 3]. These include the following: • Model viewpoints that promote rapid and systematic assessment of requirements coverage, hazard tagging and risk management • Embedded safety assessments for launch vehicles • Deployment of model assisted development of reliability products - Failure Modes and Effects Analyses (FMEAs) and Fault Trees • Test Planning • Validation and Verification of complex functions • Support of Assurance Case development for complex systems In addition, while there are benefits to be harvested, there is a realization that these do not come without effort and cost. Enabling model-based approaches requires structure, not only in an organizational context, but in a modeling context as well. There can be a steep learning curve and costs associated to train skilled modelers. But, on the other hand, not all of the assurance community need to be modelers. Models themselves must conform to ontologies that enable assurance. This places constraints upon the models and modelers. Optimums have yet to be developed where resources and constraints on modeling must be traded off in the organization and modeling efforts for projects. A number of barriers need to be overcome, as well, which pose challenges to the developers of the software that supports MBSE/MBMA. Information and data must be made to flow seamlessly through the life cycle. Because there is a wide variety of tools used in the community, to avoid the problems of the past of silos, delays, and diverging interests, information should flow among these tools to support the “single source of truth” paradigm of MBSE. This will greatly facilitate MBMA and advancement of assurance functions.

Evans, John W.↗