Search NASA⌕ Search

SEARCH · Search NASA

Results for “functional redundancy”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 379 records · Page 21
All sourcesNASA NTRSDOE OSTI
NASA NTRS1997

Baroreflex regulation of blood pressure during dynamic exercise

From the work of Potts et al. Papelier et al. and Shi et al. it is readily apparent that the arterial (aortic and carotid) baroreflexes are reset to function at the prevailing ABP of exercise. The blood pressure of exercise is the result of the hemodynamic (cardiac output and TPR) responses, which appear to be regulated by two redundant neural control systems, "Central Command" and the "exercise pressor reflex". Central Command is a feed-forward neural control system that operates in parallel with the neural regulation of the locomotor system and appears to establish the hemodynamic response to exercise. Within the central nervous system it appears that the HLR may be the operational site for Central Command. Specific neural sites within the HLR have been demonstrated in animals to be active during exercise. With the advent of positron emission tomography (PET) and single-photon emission computed tomography (SPECT), the anatomical areas of the human brain related to Central Command are being mapped. It also appears that the Nucleus Tractus Solitarius and the ventrolateral medulla may serve as an integrating site as they receive neural information from the working muscles via the group III/IV muscle afferents as well as from higher brain centers. This anatomical site within the CNS is now the focus of many investigations in which arterial baroreflex function, Central Command and the "exercise pressor reflex" appear to demonstrate inhibitory or facilitatory interaction. The concept of whether Central Command is the prime mover in the resetting of the arterial baroreceptors to function at the exercising ABP or whether the resetting is an integration of the "exercise pressor reflex" information with that of Central Command is now under intense investigation. However, it would be justified to conclude, from the data of Bevegard and Shepherd, Dicarlo and Bishop, Potts et al., and Papelier et al. that the act of exercise results in the resetting of the arterial baroreflex. In addition, if, as we have proposed, the cardiopulmonary baroreceptors primarily monitors and reflexly regulates cardiac filling volume, it would seem from the data of Mack et al. and Potts et al. that the cardiopulmonary baroreceptor is also reset at the beginning of exercise. Therefore, investigations of the neural mechanisms of regulation involving Central Command and cardiopulmonary afferents, similar to those being undertaken for the arterial baroreflex, need to be established.

NASA Discipline Cardiopulmonary↗
NASA NTRS1989

Laboratory test methodology for evaluating the effects of electromagnetic disturbances on fault-tolerant control systems

Control systems for advanced aircraft, especially those with relaxed static stability, will be critical to flight and will, therefore, have very high reliability specifications which must be met for adverse as well as nominal operating conditions. Adverse conditions can result from electromagnetic disturbances caused by lightning, high energy radio frequency transmitters, and nuclear electromagnetic pulses. Tools and techniques must be developed to verify the integrity of the control system in adverse operating conditions. The most difficult and illusive perturbations to computer based control systems caused by an electromagnetic environment (EME) are functional error modes that involve no component damage. These error modes are collectively known as upset, can occur simultaneously in all of the channels of a redundant control system, and are software dependent. A methodology is presented for performing upset tests on a multichannel control system and considerations are discussed for the design of upset tests to be conducted in the lab on fault tolerant control systems operating in a closed loop with a simulated plant.

Belcastro, Celeste M.↗
NASA NTRS1989

Real-time closed-loop simulation and upset evaluation of control systems in harsh electromagnetic environments

Digital control systems for applications such as aircraft avionics and multibody systems must maintain adequate control integrity in adverse as well as nominal operating conditions. For example, control systems for advanced aircraft, and especially those with relaxed static stability, will be critical to flight and will, therefore, have very high reliability specifications which must be met regardless of operating conditions. In addition, multibody systems such as robotic manipulators performing critical functions must have control systems capable of robust performance in any operating environment in order to complete the assigned task reliably. Severe operating conditions for electronic control systems can result from electromagnetic disturbances caused by lightning, high energy radio frequency (HERF) transmitters, and nuclear electromagnetic pulses (NEMP). For this reason, techniques must be developed to evaluate the integrity of the control system in adverse operating environments. The most difficult and illusive perturbations to computer-based control systems that can be caused by an electromagnetic environment (EME) are functional error modes that involve no component damage. These error modes are collectively known as upset, can occur simultaneously in all of the channels of a redundant control system, and are software dependent. Upset studies performed to date have not addressed the assessment of fault tolerant systems and do not involve the evaluation of a control system operating in a closed-loop with the plant. A methodology for performing a real-time simulation of the closed-loop dynamics of a fault tolerant control system with a simulated plant operating in an electromagnetically harsh environment is presented. In particular, considerations for performing upset tests on the controller are discussed. Some of these considerations are the generation and coupling of analog signals representative of electromagnetic disturbances to a control system under test, analog data acquisition, and digital data acquisition from fault tolerant systems. In addition, a case study of an upset test methodology for a fault tolerant electromagnetic aircraft engine control system is presented.

Belcastro, Celeste M.↗
NASA NTRS1991

Digital array scanned interferometers for astronomy

Investigations are reported of digital array scanned interferometers (DASI) with silicon CCD array detectors to define the operational capabilities of a mapping (polarimetric) spectrometer for astronomical applications based on these instruments. For spectral mapping, spatially resolved spectra using a cylindrical lens to image in the interferometers's redundant coordinate are given. The signal-to-noise characteristics of the Fourier transformed data are demonstrated with regard to the effects of a rectangular sampling function, spectral multiplexing and the pixel-to-pixel variation of the CCD array. These data indicate that DASIs can offer simple, versatile (polarization) mapping spectrometers suitable for spectral mapping observations from the ultraviolet to the infrared of extended sources at variable spatial resolution, particularly where long term stable operation is essential, as for spacecraft instruments.

Smith, Wm. Hayden↗
NASA NTRS2017

The Juno Magnetic Field Investigation

The Juno Magnetic Field investigation (MAG) characterizes Jupiter's planetary magnetic field and magnetosphere, providing the first globally distributed and proximate measurements of the magnetic field of Jupiter. The magnetic field instrumentation consists of two independent magnetometer sensor suites, each consisting of a tri-axial Fluxgate Magnetometer (FGM) sensor and a pair of co-located imaging sensors mounted on an ultra-stable optical bench. The imaging system sensors are part of a subsystem that provides accurate attitude information (to approx. 20 arcsec on a spinning spacecraft) near the point of measurement of the magnetic field. The two sensor suites are accommodated at 10 and 12 m from the body of the spacecraft on a 4 m long magnetometer boom affixed to the outer end of one of 's three solar array assemblies. The magnetometer sensors are controlled by independent and functionally identical electronics boards within the magnetometer electronics package mounted inside Juno's massive radiation shielded vault. The imaging sensors are controlled by a fully hardware redundant electronics package also mounted within the radiation vault. Each magnetometer sensor measures the vector magnetic field with 100 ppm absolute vector accuracy over a wide dynamic range (to 16 Gauss = 1.6 x 10(exp. 6) nT per axis) with a resolution of approx. 0.05 nT in the most sensitive dynamic range (+/-1600 nT per axis). Both magnetometers sample the magnetic field simultaneously at an intrinsic sample rate of 64 vector samples per second. The magnetic field instrumentation may be reconfigured in flight to meet unanticipated needs and is fully hardware redundant. The attitude determination system compares images with an on-board star catalog to provide attitude solutions (quaternions) at a rate of up to 4 solutions per second, and may be configured to acquire images of selected targets for science and engineering analysis. The system tracks and catalogs objects that pass through the imager field of view and also provides a continuous record of radiation exposure. A spacecraft magnetic control program was implemented to provide a magnetically clean environment for the magnetic sensors, and residual spacecraft fields andor sensor offsets are monitored in flight taking advantage of Juno's spin (nominally 2 rpm) to separate environmental fields from those that rotate with the spacecraft.

Juno spacecraft↗
NASA NTRS1994

A PC program to optimize system configuration for desired reliability at minimum cost

High reliability is desired in all engineered systems. One way to improve system reliability is to use redundant components. When redundant components are used, the problem becomes one of allocating them to achieve the best reliability without exceeding other design constraints such as cost, weight, or volume. Systems with few components can be optimized by simply examining every possible combination but the number of combinations for most systems is prohibitive. A computerized iteration of the process is possible but anything short of a super computer requires too much time to be practical. Many researchers have derived mathematical formulations for calculating the optimum configuration directly. However, most of the derivations are based on continuous functions whereas the real system is composed of discrete entities. Therefore, these techniques are approximations of the true optimum solution. This paper describes a computer program that will determine the optimum configuration of a system of multiple redundancy of both standard and optional components. The algorithm is a pair-wise comparative progression technique which can derive the true optimum by calculating only a small fraction of the total number of combinations. A designer can quickly analyze a system with this program on a personal computer.

Hills, Steven W.↗
NASA NTRS2001

Impact of dilution on microbial community structure and functional potential: comparison of numerical simulations and batch culture experiments

A series of microcosm experiments was performed using serial dilutions of a sewage microbial community to inoculate a set of batch cultures in sterile sewage. After inoculation, the dilution-defined communities were allowed to regrow for several days and a number of community attributes were measured in the regrown assemblages. Based upon a set of numerical simulations, community structure was expected to differ along the dilution gradient; the greatest differences in structure were anticipated between the undiluted-low-dilution communities and the communities regrown from the very dilute (more than 10(-4)) inocula. Furthermore, some differences were expected among the lower-dilution treatments (e.g., between undiluted and 10(-1)) depending upon the evenness of the original community. In general, each of the procedures used to examine the experimental community structures separated the communities into at least two, often three, distinct groups. The groupings were consistent with the simulated dilution of a mixture of organisms with a very uneven distribution. Significant differences in community structure were detected with genetic (amplified fragment length polymorphism and terminal restriction fragment length polymorphism), physiological (community level physiological profiling), and culture-based (colony morphology on R2A agar) measurements. Along with differences in community structure, differences in community size (acridine orange direct counting), composition (ratio of sewage medium counts to R2A counts, monitoring of each colony morphology across the treatments), and metabolic redundancy (i.e., generalist versus specialist) were also observed, suggesting that the differences in structure and diversity of communities maintained in the same environment can be manifested as differences in community organization and function.

Non-NASA Center↗
NASA NTRS2011

Solid Rocket Booster (SRB) Flight System Integration at Its Best

The Solid Rocket Booster (SRB) element integrates all the subsystems needed for ascent flight, entry, and recovery of the combined Booster and Motor system. These include the structures, avionics, thrust vector control, pyrotechnic, range safety, deceleration, thermal protection, and retrieval systems. This represents the only human-rated, recoverable and refurbishable solid rocket ever developed and flown. Challenges included subsystem integration, thermal environments and severe loads (including water impact), sometimes resulting in hardware attrition. Several of the subsystems evolved during the program through design changes. These included the thermal protection system, range safety system, parachute/recovery system, and others. Because the system was recovered, the SRB was ideal for data and imagery acquisition, which proved essential for understanding loads, environments and system response. The three main parachutes that lower the SRBs to the ocean are the largest parachutes ever designed, and the SRBs are the largest structures ever to be lowered by parachutes. SRB recovery from the ocean was a unique process and represented a significant operational challenge; requiring personnel, facilities, transportation, and ground support equipment. The SRB element achieved reliability via extensive system testing and checkout, redundancy management, and a thorough postflight assessment process. However, the in-flight data and postflight assessment process revealed the hardware was affected much more strongly than originally anticipated. Assembly and integration of the booster subsystems required acceptance testing of reused hardware components for each build. Extensive testing was done to assure hardware functionality at each level of stage integration. Because the booster element is recoverable, subsystems were available for inspection and testing postflight, unique to the Shuttle launch vehicle. Problems were noted and corrective actions were implemented as needed. The postflight assessment process was quite detailed and a significant portion of flight operations. The SRBs provided fully redundant critical systems including thrust vector control, mission critical pyrotechnics, avionics, and parachute recovery system. The design intent was to lift off with full redundancy. On occasion, the redundancy management scheme was needed during flight operations. This paper describes some of the design challenges and technical issues, how the design evolved with time, and key areas where hardware reusability contributed to improved system level understanding.

Wood, T. David↗
DOE OSTI2020

Highly Available Nuclear Power for Mission-Critical Applications

Some energy consumers require power on an anytime, all-year-round basis with a high level of certainty, including defense installations, isolated communities, and some industrial processes. For these customers, interruptions in electricity or heat can mean substantial financial loss or even loss of life. In the absence of grid-scale energy storage, a high level of power availability can be accomplished only through the robustness and redundancy of power generators. The NuScale small modular reactor design is well suited to provide highly available power because of several features related to both the nuclear steam supply system and the overall plant design. In analogy to Redundant Array of Independent Disks (RAID) systems used to provide highly reliable data storage, a NuScale plant can assure sustained power generation by virtue of its Redundant Array of Integral Reactors (RAIR).This paper describes the NuScale RAIR plant features and summarizes the results of a rigorous analysis of RAIR availability as a function of power or, conversely, the RAIR plant output power as a function of power availability. The analysis utilized the Matrix Laboratory code (MATLAB) and included probability distributions for the frequency and duration of module outages due to planned and unplanned events. Further, the study evaluated the impact of implementing turbine bypass rather than module shutdown and using one or more modules to supply house loads in the case of loss of off-site power (LOOP). Availability results are presented for a 12-module RAIR plant with and without turbine bypass enabled during a LOOP and for different possible connections to the off-site power distribution grid and dedicated service loads. Results indicate that a very high level of availability can be achieved at relatively high power output levels, regardless of turbine bypass and dedicated load connection, compared to the operating fleet.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
NASA NTRS1977

Class of near-perfect coded apertures

Coded aperture imaging of gamma ray sources has long promised an improvement in the sensitivity of various detector systems. The promise has remained largely unfulfilled, however, for either one of two reasons. First, the encoding/decoding method produces artifacts, which even in the absence of quantum noise, restrict the quality of the reconstructed image. This is true of most correlation-type methods. Second, if the decoding procedure is of the deconvolution variety, small terms in the transfer function of the aperture can lead to excessive noise in the reconstructed image. It is proposed to circumvent both of these problems by use of a uniformly redundant array (URA) as the coded aperture in conjunction with a special correlation decoding method.

Cannon, T. M.↗
NASA NTRS1990

A highly reliable, autonomous data communication subsystem for an advanced information processing system

The need to meet the stringent performance and reliability requirements of advanced avionics systems has frequently led to implementations which are tailored to a specific application and are therefore difficult to modify or extend. Furthermore, many integrated flight critical systems are input/output intensive. By using a design methodology which customizes the input/output mechanism for each new application, the cost of implementing new systems becomes prohibitively expensive. One solution to this dilemma is to design computer systems and input/output subsystems which are general purpose, but which can be easily configured to support the needs of a specific application. The Advanced Information Processing System (AIPS), currently under development has these characteristics. The design and implementation of the prototype I/O communication system for AIPS is described. AIPS addresses reliability issues related to data communications by the use of reconfigurable I/O networks. When a fault or damage event occurs, communication is restored to functioning parts of the network and the failed or damage components are isolated. Performance issues are addressed by using a parallelized computer architecture which decouples Input/Output (I/O) redundancy management and I/O processing from the computational stream of an application. The autonomous nature of the system derives from the highly automated and independent manner in which I/O transactions are conducted for the application as well as from the fact that the hardware redundancy management is entirely transparent to the application.

Nagle, Gail↗
NASA NTRS2011

Reliability Impacts in Life Support Architecture and Technology Selection

Equivalent System Mass (ESM) and reliability estimates were performed for different life support architectures based primarily on International Space Station (ISS) technologies. The analysis was applied to a hypothetical 1-year deep-space mission. High-level fault trees were initially developed relating loss of life support functionality to the Loss of Crew (LOC) top event. System reliability was then expressed as the complement (nonoccurrence) this event and was increased through the addition of redundancy and spares, which added to the ESM. The reliability analysis assumed constant failure rates and used current projected values of the Mean Time Between Failures (MTBF) from an ISS database where available. Results were obtained showing the dependence of ESM on system reliability for each architecture. Although the analysis employed numerous simplifications and many of the input parameters are considered to have high uncertainty, the results strongly suggest that achieving necessary reliabilities for deep-space missions will add substantially to the life support system mass. As a point of reference, the reliability for a single-string architecture using the most regenerative combination of ISS technologies without unscheduled replacement spares was estimated to be less than 1%. The results also demonstrate how adding technologies in a serial manner to increase system closure forces the reliability of other life support technologies to increase in order to meet the system reliability requirement. This increase in reliability results in increased mass for multiple technologies through the need for additional spares. Alternative parallel architecture approaches and approaches with the potential to do more with less are discussed. The tall poles in life support ESM are also reexamined in light of estimated reliability impacts.

Lange, Kevin E.↗
NASA NTRS2016

Experiences with Extra-Vehicular Activities in Response to Critical ISS Contingencies

The maturation of the International Space Station (ISS) design from the proposed Space Station Freedom to today's current implementation resulted in external hardware redundancy vulnerabilities in the final design. Failure to compensate for or respond to these vulnerabilities could put the ISS in a posture where it could no longer function as a habitable space station. In the first years of ISS assembly, these responses were to largely be addressed by the continued resupply and Extra-Vehicular Activity (EVA) capabilities of the Space Shuttle. Even prior to the decision to retire the Space Shuttle, it was realized that ISS needed to have its own capability to be able to rapidly repair or replace external hardware without needing to wait for the next cargo resupply mission. As documented in a previous publication, in 2006 development was started to baseline Extra-Vehicular Activity (EVA, or spacewalk) procedures to replace hardware components whose failure would expose some of the ISS vulnerabilities should a second failure occur. This development work laid the groundwork for the onboard crews and the ground operations and engineering teams to be ready to replace any of this failed hardware. In 2010, this development work was put to the test when one of these pieces of hardware failed. This paper will provide a brief summary of the planning and processes established in the original Contingency EVA development phase. It will then review how those plans and processes were implemented in 2010, highlighting what went well as well as where there were deficiencies between theory and reality. This paper will show that the original approach and analyses, though sound, were not as thorough as they should have been in the realm of planning for next worse failures, for documenting Programmatic approval of key assumptions, and not pursuing sufficient engineering analysis prior to the failure of the hardware. The paper will further highlight the changes made to the Contingency EVA preparation team structure, approach, goals, and the resources allocated to its work after the 2010 events. Finally, the authors will overview the implementation of these updates in addressing failures onboard the ISS in 2012, 2013, and 2014. The successful use of the updated approaches, and the application of the approaches to other spacewalks, will demonstrate the effectiveness of this additional work and make a case for putting significant time and resources into pre-failure planning and analysis for critical hardware items on human-tended spacecraft.

Van Cise, E. A.↗
NASA NTRS2005

Quadratic Programming for Allocating Control Effort

A computer program calculates an optimal allocation of control effort in a system that includes redundant control actuators. The program implements an iterative (but otherwise single-stage) algorithm of the quadratic-programming type. In general, in the quadratic-programming problem, one seeks the values of a set of variables that minimize a quadratic cost function, subject to a set of linear equality and inequality constraints. In this program, the cost function combines control effort (typically quantified in terms of energy or fuel consumed) and control residuals (differences between commanded and sensed values of variables to be controlled). In comparison with prior control-allocation software, this program offers approximately equal accuracy but much greater computational efficiency. In addition, this program offers flexibility, robustness to actuation failures, and a capability for selective enforcement of control requirements. The computational efficiency of this program makes it suitable for such complex, real-time applications as controlling redundant aircraft actuators or redundant spacecraft thrusters. The program is written in the C language for execution in a UNIX operating system.

Singh, Gurkirpal↗
DOE OSTI2021

Stochastic evaluation of fourth-order many-body perturbation energies

A scalable, stochastic algorithm evaluating the fourth-order many-body perturbation (MP4) correction to energy is proposed. Three hundred Goldstone diagrams representing the MP4 correction are computer generated and then converted into algebraic formulas expressed in terms of Green’s functions in real space and imaginary time. They are evaluated by the direct (i.e., non-Markov, non-Metropolis) Monte Carlo (MC) integration accelerated by the redundant-walker and control-variate algorithms. The resulting MC-MP4 method is efficiently parallelized and is shown to display O(n 5.3 ) size-dependence of cost, which is nearly two ranks lower than the O(n 7 ) dependence of the deterministic MP4 algorithm. Furthermore, it evaluates the MP4/aug-cc-pVDZ energy for benzene, naphthalene, phenanthrene, and corannulene with the statistical uncertainty of 10 mE h (1.1% of the total basis-set correlation energy), 38 mE h (2.6%), 110 mE h (5.5%), and 280 mE h (9.0%), respectively, after about 10 9 MC steps.

74 ATOMIC AND MOLECULAR PHYSICS↗
NASA NTRS1981

A fully redundant power hinge for LANDSAT-D appendages

The configuration and testing of a power driven hinge for deployment of the solar array and antenna boom for the LANDSAT-D spacecraft is discussed. The hinge is fully mechanically and electrically redundant and, thereby, can sustain a single point failure of any one motor (or its power supply), speed reducer, or bearing set without loss of its ability to function. This design utilizes the capability of the stepper motor drive to remove the flexibility of the drive train from the joint stiffness equation when the hinge is loaded against its stop. This feature precludes gapping of the joint under spacecraft maneuver loads even in the absence of a latching feature. Thus, retraction is easily accomplished by motor reversal without the need for a solenoid function to remove the latch.

Mamrol, F. E.↗
NASA NTRS2016

Experiences with Extra-Vehicular Activities in Response to Critical ISS Contingencies

The maturation of the International Space Station (ISS) design from the proposed Space Station Freedom to today's current implementation resulted in external hardware redundancy vulnerabilities in the final design. Failure to compensate for or respond to these vulnerabilities could put the ISS in a posture to where it could no longer function as a habitable space station. In the first years of ISS assembly, these responses were to largely be addressed by the continued resupply and Extra-Vehicular Activity (EVA) capabilities of the Space Shuttle. Even prior to the decision to retire the Space Shuttle, it was realized that ISS needed to have its own capability to be able to rapidly repair or replace external hardware without needing to wait for the next cargo resupply mission. As documented in a previous publicatoin5, in 2006 development was started to baseline Extra- Vehicular Activity (EVA, or spacewalk) procedures to replace hardware components whose failure would expose some of the ISS vulnerabilities should a second failure occur. This development work laid the groundwork for the onboard crews and the ground operations and engineering teams to be ready to replace any of this failed hardware. In 2010, this development work was put to the test when one of these pieces of hardware failed. This paper will provide a brief summary of the planning and processes established in the original Contingency EVA development phase. It will then review how those plans and processes were implemented in 2010, highlighting what went well as well as where there were deficiencies between theory and reality. This paper will show that the original approach and analyses, though sound, were not as thorough as they should have been in the realm of planning for next worse failures, for documenting Programmatic approval of key assumptions, and not pursuing sufficient engineering analysis prior to the failure of the hardware. The paper will further highlight the changes made to the Contingency EVA preparation team structure, approach, goals, and the resources allocated to its work after the 2010 events. Finally, the authors will overview the implementation of these updates in addressing failures onboard the ISS in 2012, 2013, and 2014. The successful use of the updated approaches, and the application of the approaches to other spacewalks, will demonstrate the effectiveness of this additional work and make a case for putting significant time and resources into pre-failure planning and analysis for critical hardware items on human-tended spacecraft.

Van Cise, E. A.↗