Search NASA⌕ Search

SEARCH · Search NASA

Results for “safety requirements”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 379 records · Page 21
All sourcesNASA NTRSDOE OSTI
NASA NTRS2010

Proceedings of the Second NASA Formal Methods Symposium

This publication contains the proceedings of the Second NASA Formal Methods Symposium sponsored by the National Aeronautics and Space Administration and held in Washington D.C. April 13-15, 2010. Topics covered include: Decision Engines for Software Analysis using Satisfiability Modulo Theories Solvers; Verification and Validation of Flight-Critical Systems; Formal Methods at Intel -- An Overview; Automatic Review of Abstract State Machines by Meta Property Verification; Hardware-independent Proofs of Numerical Programs; Slice-based Formal Specification Measures -- Mapping Coupling and Cohesion Measures to Formal Z; How Formal Methods Impels Discovery: A Short History of an Air Traffic Management Project; A Machine-Checked Proof of A State-Space Construction Algorithm; Automated Assume-Guarantee Reasoning for Omega-Regular Systems and Specifications; Modeling Regular Replacement for String Constraint Solving; Using Integer Clocks to Verify the Timing-Sync Sensor Network Protocol; Can Regulatory Bodies Expect Efficient Help from Formal Methods?; Synthesis of Greedy Algorithms Using Dominance Relations; A New Method for Incremental Testing of Finite State Machines; Verification of Faulty Message Passing Systems with Continuous State Space in PVS; Phase Two Feasibility Study for Software Safety Requirements Analysis Using Model Checking; A Prototype Embedding of Bluespec System Verilog in the PVS Theorem Prover; SimCheck: An Expressive Type System for Simulink; Coverage Metrics for Requirements-Based Testing: Evaluation of Effectiveness; Software Model Checking of ARINC-653 Flight Code with MCP; Evaluation of a Guideline by Formal Modelling of Cruise Control System in Event-B; Formal Verification of Large Software Systems; Symbolic Computation of Strongly Connected Components Using Saturation; Towards the Formal Verification of a Distributed Real-Time Automotive System; Slicing AADL Specifications for Model Checking; Model Checking with Edge-valued Decision Diagrams; and Data-flow based Model Analysis.

Munoz, Cesar↗
NASA NTRS2010

Fission Surface Power Technology Development Status

Power is a critical consideration in planning exploration of the surfaces of the Moon, Mars, and beyond. Nuclear power is an important option, especially for locations in the solar system where sunlight is limited in availability or intensity. NASA is maintaining the option for fission surface power for the Moon and Mars by developing and demonstrating technology for an affordable fission surface power system. Because affordability drove the determination of the system concept that this technology will make possible, low development and recurring costs result, while required safety standards are maintained. However, an affordable approach to fission surface power also provides the benefits of simplicity, robustness, and conservatism in design. This paper will illuminate the multiplicity of benefits to an affordable approach to fission surface power, and will describe how the foundation for these benefits is being developed and demonstrated in the Exploration Technology Development Program s Fission Surface Power Project.

Palac, Donald T.↗
NASA NTRS2010

Seal Analysis for the Ares-I Upper Stage Fuel Tank Manhole Cover

Techniques for studying the performance of Naflex pressure-assisted seals in the Ares-I Upper Stage liquid hydrogen tank manhole cover seal joint are explored. To assess the feasibility of using the identical seal design for the Upper Stage as was used for the Space Shuttle External Tank manhole covers, a preliminary seal deflection analysis using the ABAQUS commercial finite element software is employed. The ABAQUS analyses are performed using three-dimensional symmetric wedge finite element models. This analysis technique is validated by first modeling a heritage External Tank liquid hydrogen tank manhole cover joint and correlating the results to heritage test data. Once the technique is validated, the Upper Stage configuration is modeled. The Upper Stage analyses are performed at 1.4 times the expected pressure to comply with the Constellation Program factor of safety requirement on joint separation. Results from the analyses performed with the External Tank and Upper Stage models demonstrate the effects of several modeling assumptions on the seal deflection. The analyses for Upper Stage show that the integrity of the seal is successfully maintained.

Phillips, Dawn R.↗
NASA NTRS2010

Building on the Past - Looking to the Future. Part 2: A Focus on Expanding Horizons

The history of space endeavors stretches far from the first liquid-fueled rocket created by the father of modern rocketry, Robert Goddard, in 1926 and will certainly extend far beyond the construction of the International Space Station (ISS) scheduled to be complete with the addition of the Permanent Multipurpose Module on STS-133/ULF5. National Aeronautics and Space Administration (NASA) and the ISS International Partners (IPs) will be the unrelenting venue used to satisfy the curiosities of man as we seek an understanding of space through various experiments (also referred to as payloads) conducted in microgravity. The NASA Payload Safety Review Panel (PSRP) continues to serve as the lead for the review and assessment of payload hardware to assure facility and crew safety. This is the second in a series of papers and presentations that illustrate challenges and lessons learned in the areas of communication, safety requirements, and processes which have been vital to the PSRP.

Nash, Sally K.↗
NASA NTRS2009

Generating Code Review Documentation for Auto-Generated Mission-Critical Software

Model-based design and automated code generation are increasingly used at NASA to produce actual flight code, particularly in the Guidance, Navigation, and Control domain. However, since code generators are typically not qualified, there is no guarantee that their output is correct, and consequently auto-generated code still needs to be fully tested and certified. We have thus developed AUTOCERT, a generator-independent plug-in that supports the certification of auto-generated code. AUTOCERT takes a set of mission safety requirements, and formally verifies that the autogenerated code satisfies these requirements. It generates a natural language report that explains why and how the code complies with the specified requirements. The report is hyper-linked to both the program and the verification conditions and thus provides a high-level structured argument containing tracing information for use in code reviews.

Denney, Ewen↗
NASA NTRS2010

Design of 8-ft-Diameter Barrel Test Article Attachment Rings for Shell Buckling Knockdown Factor Project

The Shell Buckling Knockdown Factor (SBKF) project includes the testing of sub-scale cylinders to validate new shell buckling knockdown factors for use in the design of the Ares-I and Ares-V launch vehicles. Test article cylinders represent various barrel segments of the Ares-I and Ares-V vehicles, and also include checkout test articles. Testing will be conducted at Marshall Space Flight Center (MSFC) for test articles having an eight-foot diameter outer mold line (OML) and having lengths that range from three to ten feet long. Both ends of the test articles will be connected to the test apparatus using attachment rings. Three multiple-piece and one single-piece design for the attachment rings were developed and analyzed. The single-piece design was chosen and will be fabricated from either steel or aluminum (Al) depending on the required safety factors (SF) for test hardware. This report summarizes the design and analysis of these attachment ring concepts.

Lovejoy, Andrew E.↗
NASA NTRS2011

The Application of Software Safety to the Constellation Program Launch Control System

The application of software safety practices on the LCS project resulted in the successful implementation of the NASA Software Safety Standard NASA-STD-8719.138 and CxP software safety requirements. The GOP-GEN-GSW-011 Hazard Report was the first report developed at KSC to identify software hazard causes and their controls. This approach can be applied to similar large software - intensive systems where loss of control can lead to a hazard.

Kania, James↗
NASA NTRS2011

Relaxing USOS Solar Array Constraints for Russian Vehicle Undocking

With the retirement of Space Shuttle cargo delivery capability and the ten year life extension of the International Space Station (ISS) more emphasis is being put on preservation of the service life of ISS critical components. Current restrictions on the United States Orbital Segment (USOS) Solar Array (SA) positioning during Russian Vehicle (RV) departure from ISS nadir and zenith ports cause SA to be positioned in the plume field of Service Module thrusters and lead to degradation of SAs as well as potential damage to Sun tracking Beta Gimbal Assemblies (BGA). These restrictions are imposed because of the single fault tolerant RV Motion Control System (MCS), which does not meet ISS Safety requirements for catastrophic hazards and dictates 16 degree Solar Array Rotary Joint position, which ensures that ISS and RV relative motion post separation, does lead to collision. The purpose of this paper is to describe a methodology and the analysis that was performed to determine relative motion trajectories of the ISS and separating RV for nominal and contingency cases. Analysis was performed in three phases that included ISS free drift prior to Visiting Vehicle separation, ISS and Visiting Vehicle relative motion analysis and clearance analysis. First, the ISS free drift analysis determined the worst case attitude and attitude rate excursions prior to RV separation based on a series of different configurations and mass properties. Next, the relative motion analysis calculated the separation trajectories while varying the initial conditions, such as docking mechanism performance, Visiting Vehicle MCS failure, departure port location, ISS attitude and attitude rates at the time of separation, etc. The analysis employed both orbital mechanics and rigid body rotation calculations while accounting for various atmospheric conditions and gravity gradient effects. The resulting relative motion trajectories were then used to determine the worst case separation envelopes during the clearance analysis. Analytical models were developed individually for each stage and the results were used to build initial conditions for the following stages. In addition to the analysis approach, this paper also discusses the analysis results, showing worst case relative motion envelopes, the recommendations for ISS appendage positioning and the suggested approach for future analyses.

Menkin, Evgeny↗
NASA NTRS2011

Seal Joint Analysis and Design for the Ares-I Upper Stage LOX Tank

The sealing capability of the Ares-I Upper Stage liquid oxygen tank-to-sump joint is assessed by analyzing the deflections of the joint components. Analyses are performed using three-dimensional symmetric wedge finite element models and the ABAQUS commercial finite element software. For the pressure loads and feedline interface loads, the analyses employ a mixed factor of safety approach to comply with the Constellation Program factor of safety requirements. Naflex pressure-assisted seals are considered first because they have been used successfully in similar seal joints in the Space Shuttle External Tank. For the baseline sump seal joint configuration with a Naflex seal, the predicted joint opening greatly exceeds the seal design specification. Three redesign options of the joint that maintain the use of a Naflex seal are studied. The joint openings for the redesigned seal joints show improvement over the baseline configuration; however, these joint openings still exceed the seal design specification. RACO pressure-assisted seals are considered next because they are known to also be used on the Space Shuttle External Tank, and the joint opening allowable is much larger than the specification for the Naflex seals. The finite element models for the RACO seal analyses are created by modifying the models that were used for the Naflex seal analyses. The analyses show that the RACO seal may provide sufficient sealing capability for the sump seal joint. The results provide reasonable data to recommend the design change and plan a testing program to determine the capability of RACO seals in the Ares-I Upper Stage liquid oxygen tank sump seal joint.

Phillips, Dawn R.↗
NASA NTRS2011

Performance and Life Tests of a Regenerative Blower for EVA Suit Ventilation

Ventilation fans for future space suits must meet demanding performance specifications, satisfy stringent safety requirements for operation in an oxygen atmosphere, and be able to increase output to operate in buddy mode. A regenerative blower is an attractive choice due to its ability to meet these requirements at low operating speed. This paper describes progress in the development and testing of a regenerative blower designed to meet requirements for ventilation subsystems in a future space suit Portable Life Support Systems (PLSS). The blower assembly includes a custom-designed motor that has significantly improved in efficiency during this development effort. The blower was tested at both nominal and buddy mode operating points and head/flow performance and power consumption were measured. The blower was operated for over 1000 hours to demonstrate safe operation in an oxygen test loop at prototypical pressures. In addition, the blower demonstrated operation with the introduction of simulated lunar dust.

Izenson, Mike↗
NASA NTRS2012

Performance and Life Tests of a Regenerative Blower for EVA Suit Ventilation

Ventilation fans for future space suits must meet demanding performance specifications, satisfy stringent safety requirements for operation in an oxygen atmosphere, and be able to increase output to operate in buddy mode. A regenerative blower is an attractive choice due to its ability to meet these requirements at low operating speed. This paper describes progress in the development and testing of a regenerative blower designed to meet requirements for ventilation subsystems in future space suits. The blower includes a custom-designed motor that has significantly improved its efficiency. We have measured the blower s head/flow performance and power consumption under conditions that simulate both the normal and buddy mode operating points. We have operated the blower for TBD hours and demonstrated safe operation in an oxygen test loop at prototypical pressures. We also demonstrated operation with simulated lunar dust.

Izenson, Michael G.↗
NASA NTRS2012

A Briefing on Metrics and Risks for Autonomous Decision-Making in Aerospace Applications

Significant technology advances will enable future aerospace systems to safely and reliably make decisions autonomously, or without human interaction. The decision-making may result in actions that enable an aircraft or spacecraft in an off-nominal state or with slightly degraded components to achieve mission performance and safety goals while reducing or avoiding damage to the aircraft or spacecraft. Some key technology enablers for autonomous decision-making include: a continuous state awareness through the maturation of the prognostics health management field, novel sensor development, and the considerable gains made in computation power and data processing bandwidth versus system size. Sophisticated algorithms and physics based models coupled with these technological advances allow reliable assessment of a system, subsystem, or components. Decisions that balance mission objectives and constraints with remaining useful life predictions can be made autonomously to maintain safety requirements, optimal performance, and ensure mission objectives. This autonomous approach to decision-making will come with new risks and benefits, some of which will be examined in this paper. To start, an account of previous work to categorize or quantify autonomy in aerospace systems will be presented. In addition, a survey of perceived risks in autonomous decision-making in the context of piloted aircraft and remotely piloted or completely autonomous unmanned autonomous systems (UAS) will be presented based on interviews that were conducted with individuals from industry, academia, and government.

Frost, Susan↗
NASA NTRS2012

Visual Analysis of Air Traffic Data

In this paper, we present visual analysis tools to help study the impact of policy changes on air traffic congestion. The tools support visualization of time-varying air traffic density over an area of interest using different time granularity. We use this visual analysis platform to investigate how changing the aircraft separation volume can reduce congestion while maintaining key safety requirements. The same platform can also be used as a decision aid for processing requests for unmanned aerial vehicle operations.

Albrecht, George Hans↗
NASA NTRS2012

Global Precipitation Measurement (GPM) Safety Inhibit Timeline Tool

The Global Precipitation Measurement (GPM) Observatory is a joint mission under the partnership by National Aeronautics and Space Administration (NASA) and the Japan Aerospace Exploration Agency (JAXA), Japan. The NASA Goddard Space Flight Center (GSFC) has the lead management responsibility for NASA on GPM. The GPM program will measure precipitation on a global basis with sufficient quality, Earth coverage, and sampling to improve prediction of the Earth's climate, weather, and specific components of the global water cycle. As part of the development process, NASA built the spacecraft (built in-house at GSFC) and provided one instrument (GPM Microwave Imager (GMI) developed by Ball Aerospace) JAXA provided the launch vehicle (H2-A by MHI) and provided one instrument (Dual-Frequency Precipitation Radar (DPR) developed by NTSpace). Each instrument developer provided a safety assessment which was incorporated into the NASA GPM Safety Hazard Assessment. Inhibit design was reviewed for hazardous subsystems which included the High Gain Antenna System (HGAS) deployment, solar array deployment, transmitter turn on, propulsion system release, GMI deployment, and DPR radar turn on. The safety inhibits for these listed hazards are controlled by software. GPM developed a "pathfinder" approach for reviewing software that controls the electrical inhibits. This is one of the first GSFC in-house programs that extensively used software controls. The GPM safety team developed a methodology to document software safety as part of the standard hazard report. As part of this process a new tool "safety inhibit time line" was created for management of inhibits and their controls during spacecraft buildup and testing during 1& Tat GSFC and at the Range in Japan. In addition to understanding inhibits and controls during 1& T the tool allows the safety analyst to better communicate with others the changes in inhibit states with each phase of hardware and software testing. The tool was very useful for communicating compliance with safety requirements especially when working with a foreign partner.

Dion, Shirley↗
NASA NTRS2012

Strut Shaping of 34m Beam Waveguide Antenna for Reductions in Near-Field RF and Noise Temperature

Strut shaping of NASA's Deep Space Network (DSN) 34m Beam Waveguide (BWG) antenna has been implemented to reduce near-field RF exposure while improving the antenna noise temperature. Strut shaping was achieved by introducing an RF shield that does not compromise the structural integrity of the existing antenna. Reduction in the RF near-field level will compensate for the planned transmit power increase of the antenna from 20 kW to 80 kW while satisfying safety requirements for RF exposure. Measured antenna noise temperature was also improved by as much as 1.5 K for the low elevation angles and 0.5 K in other areas.

near-field↗
NASA NTRS2013

A System for Measuring the Sway of the Vehicle Assembly Building

A system was developed to measure the sway of the Vehicle Assembly Building (VAB) at Kennedy Space Center. This system was installed in the VAB and gathered more than one total year of data. The building movement was correlated with measurements provided by three wind towers in order to determine the maximum deflection of the building during high-wind events. The VAB owners were in the process of obtaining new platforms for use in assembling very tall rockets when analysis of the VAB showed that a high wind could move the building sufficiently that an upper platform might impact a rocket. The problem arises because safety requires a relatively small gap between the platform and the rocket, while a large enough gap is needed to ensure that stacking tolerances prevent contact between the rocket and the platform. This only leaves an inch or two (approximately 2 to 5 cm) of total clearance, so when the analysis showed that more than a couple of inches of motion could occur in a high wind, there was a potential for damaging the rocket. The KSC Applied Physics Laboratory was asked to install a system in the VAB that could measure the motion of the building in high winds to determine the actual building sway. The motion of the VAB roof under wind load was measured optically, and under analysis, it was determined that a relatively large-aperture optical system would be required to reduce diffraction effects to less than a small fraction of an inch (approximately mm) at a distance of 500 ft (≈150 m). A 10-in. (approximately 250 mm) telescope was placed on the floor of the building, looking at the ceiling. On the ceiling, a flat plate with three white LEDs was mounted in an "L" shape, such that the telescope was essentially looking at three stars. Software was written to track the motion of these three points using an image processing system. This provided a better than 1/10-in. (approximately 2.5-mm) 2D measurement faster than once a second. Data was downloaded once a month for comparison with the wind tower data. The system was fully operational and provided enough data to show that the VAB will only move 1 in. (approximately 2.5 cm) at the ceiling under 70-knot winds. Adjustable platforms are not required.

Youngquist, Robert↗
NASA NTRS2014

Magnet Architectures and Active Radiation Shielding Study - SR2S Workshop

Analyze new coil configurations with maturing superconductor technology -Develop vehicle-level concept solutions and identify engineering challenges and risks -Shielding performance analysis Recent advances in superconducting magnet technology and manufacturing have opened the door for re-evaluating active shielding solutions as an alternative to mass prohibitive passive shielding.Publications on static magnetic field environments and its bio-effects were reviewed. Short-term exposure information is available suggesting long term exposure may be okay. Further research likely needed. center dotMagnetic field safety requirements exist for controlled work environments. The following effects have been noted with little noted adverse effects -Magnetohydrodynamic (MHD) effects on ionized fluids (e.g. blood) creating an aortic voltage change -MHD interaction elevates blood pressure (BP) center dot5 Tesla equates to 5% BP elevation -Prosthetic devises and pacemakers are an issue (access limit of 5 gauss).

Westover, Shane↗
NASA NTRS2013

Towards Real-time, On-board, Hardware-Supported Sensor and Software Health Management for Unmanned Aerial Systems

Unmanned aerial systems (UASs) can only be deployed if they can effectively complete their missions and respond to failures and uncertain environmental conditions while maintaining safety with respect to other aircraft as well as humans and property on the ground. In this paper, we design a real-time, on-board system health management (SHM) capability to continuously monitor sensors, software, and hardware components for detection and diagnosis of failures and violations of safety or performance rules during the flight of a UAS. Our approach to SHM is three-pronged, providing: (1) real-time monitoring of sensor and/or software signals; (2) signal analysis, preprocessing, and advanced on the- fly temporal and Bayesian probabilistic fault diagnosis; (3) an unobtrusive, lightweight, read-only, low-power realization using Field Programmable Gate Arrays (FPGAs) that avoids overburdening limited computing resources or costly re-certification of flight software due to instrumentation. Our implementation provides a novel approach of combining modular building blocks, integrating responsive runtime monitoring of temporal logic system safety requirements with model-based diagnosis and Bayesian network-based probabilistic analysis. We demonstrate this approach using actual data from the NASA Swift UAS, an experimental all-electric aircraft.

System & Software Health Management↗