SEARCH · Search NASA

Results for “System reliability”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 397 records · Page 22

All sources NASA NTRS DOE OSTI

NASA NTRS2008

Reconfigurable HIL Testing of Earth Satellites

In recent years, hardware-in-the-loop (HIL) testing has carved a strong niche in several industries, such as automotive, aerospace, telecomm, and consumer electronics. As desktop computers have realized gains in speed, memory size, and data storage capacity, hardware/software platforms have evolved into high performance, deterministic HIL platforms, capable of hosting the most demanding applications for testing components and subsystems. Using simulation software to emulate the digital and analog I/O signals of system components, engineers of all disciplines can now test new systems in realistic environments to evaluate their function and performance prior to field deployment. Within the Aerospace industry, space-borne satellite systems are arguably some of the most demanding in terms of their requirement for custom engineering and testing. Typically, spacecraft are built one or few at a time to fulfill a space science or defense mission. In contrast to other industries that can amortize the cost of HIL systems over thousands, even millions of units, spacecraft HIL systems have been built as one-of-a-kind solutions, expensive in terms of schedule, cost, and risk, to assure satellite and spacecraft systems reliability. The focus of this paper is to present a new approach to HIL testing for spacecraft systems that takes advantage of a highly flexible hardware/software architecture based on National Instruments PXI reconfigurable hardware and virtual instruments developed using LabVIEW. This new approach to HIL is based on a multistage/multimode spacecraft bus emulation development model called Reconfigurable Hardware In-the-Loop or RHIL.

Source record↗

NASA NTRS2014

Ultrahigh Temperature Capacitive Pressure Sensor

Robust, miniaturized sensing systems are needed to improve performance, increase efficiency, and track system health status and failure modes of advanced propulsion systems. Because microsensors must operate in extremely harsh environments, there are many technical challenges involved in developing reliable systems. In addition to high temperatures and pressures, sensing systems are exposed to oxidation, corrosion, thermal shock, fatigue, fouling, and abrasive wear. In these harsh conditions, sensors must be able to withstand high flow rates, vibration, jet fuel, and exhaust. In order for existing and future aeropropulsion turbine engines to improve safety and reduce cost and emissions while controlling engine instabilities, more accurate and complete sensor information is necessary. High-temperature (300 to 1,350 C) capacitive pressure sensors are of particular interest due to their high measurement bandwidth and inherent suitability for wireless readout schemes. The objective of this project is to develop a capacitive pressure sensor based on silicon carbon nitride (SiCN), a new class of high-temperature ceramic materials, which possesses excellent mechanical and electric properties at temperatures up to 1,600 C.

Harsh, Kevin↗

DOE OSTI2025

Enhancing Security and Resiliency in Operational Technology Environments Through Network Slicing and Federated Learning

The growing convergence of Information Technology (IT) and Operational Technology (OT) within Industry 4.0 environments has introduced new demands on industrial network infrastructure. As cyber-physical systems become increasingly interconnected, ensuring the secure, timely, and efficient exchange of critical data is essential. This thesis explores how network slicing, a method of creating isolated virtual network segments, can be applied within OT environments to address challenges such as latency, security, and resource allocation. The first research question addressed in this thesis is: How can OT networks take advantage of NFV and SDN technology to become cyber resilient? This study examines the operational, security, and architectural implications of introducing network slicing into traditionally static OT infrastructures such as Industrial Control Systems (ICS) and SCADA. Through simulated deployments and case studies, the research demonstrates how slicing enables better isolation between critical and non-critical services, thereby improving response time, throughput, and security in sensitive environments. The second question considers: How to dynamically implement network slicing and take advantage of network resources towards integrating decentralized machine learning? In response, this thesis proposes a framework that combines Software-Defined Networking (SDN), Network Function Virtualization (NFV), and Federated Learning (FL) to enable real-time analytics while maintaining data locality. The proposed approach reduces the burden on centralized infrastructure and minimizes privacy risks by supporting on-site training of models across distributed OT nodes, coordinated through dynamically allocated network slices. The third focus explores: How slicing helps to increase the resiliency of OT networks through the orchestration of a dynamic DMZ? To answer this, the thesis presents a method for creating and managing Dynamic Demilitarized Zones (DMZs) using network slicing. This enables flexible and automated isolation of sensitive subsystems during threat scenarios or high-risk operations. Coupled with intelligent orchestration and containerized security services, the dynamic DMZ significantly enhances the system's ability to respond to cyber incidents without halting production. Ultimately, this thesis contributes a comprehensive architecture that blends network slicing with machine learning, secure segmentation, and automation, paving the way for resilient, adaptive, and intelligent OT environments. Performance evaluations across multiple scenarios show improvements in system reliability, threat response time, model accuracy, and resource utilization, providing a strong foundation for future industrial automation systems.

Rodiles Delgado, Brian G↗

NASA NTRS1990

A graphical language for reliability model generation

A graphical interface capability of the hybrid automated reliability predictor (HARP) is described. The graphics-oriented (GO) module provides the user with a graphical language for modeling system failure modes through the selection of various fault tree gates, including sequence dependency gates, or by a Markov chain. With this graphical input language, a fault tree becomes a convenient notation for describing a system. In accounting for any sequence dependencies, HARP converts the fault-tree notation to a complex stochastic process that is reduced to a Markov chain which it can then solve for system reliability. The graphics capability is available for use on an IBM-compatible PC, a Sun, and a VAX workstation. The GO module is written in the C programming language and uses the Graphical Kernel System (GKS) standard for graphics implementation. The PC, VAX, and Sun versions of the HARP GO module are currently in beta-testing.

Howell, Sandra V.↗

NASA NTRS1999

Evaluation of the Self-Nulling Rotating Eddy Current Probe System

In order to detect multi-site fatigue cracks located under flush-head rivets, automated eddy current equipment is required. To assure a reliable system, the eddy current probe must be centered easily over the installed rivets. To meet these requirements, the NDE Group at NASA LaRC developed the Self-Nulling Rotating Eddy Current Probe System (SNRECPS) which will be referred to as RPS in this document. The system was evaluated at the FAA, NDI Validation Center, in Albuquerque, New Mexico. The system was capable of detecting a 0.032 inch long crack with a 90/95% PoD. Further evaluations were conducted at Boeing in Long Beach, California. These evaluations included fatigue cracks and notches in a range from 0.025 to 0.100 inch long under flush-head aluminum rivets, and titanium or steel flush-head fasteners. The results of these tests are reported herein. Subsequently, the system was loaned to the USAF Structures Laboratory for the purpose of detecting and measuring short cracks under flush-head rivets in a variety of fatigue test specimens. The inspection task was to detect and plot crack growth from numbered fasteners in lettered rows. In January, 1998, the system was taken to Northwest Airlines Maintenance Base, in Atlanta, to inspect a DC-9, for multi-site cracks in three circumferential splices. The aircraft had 83,000 cycles. The inspection was conducted at 30 kHz from longeron 5 left to longeron 5 right. The system was calibrated using a 0,030 EDM first layer notch. The instrument gain was set to 19 mV from the notch. The reject level was set at 10 mV and the unflawed fasteners yielded a signal amplitude of 2 to 3 mV. Only one fastener location, out of about 2,500 tested, yielded a signal of 58 mV. The rivet was removed and visually evaluated. It appeared to be a slight gouge in the counter-sink zone. No fatigue cracks were detected. The same fastener locations were also inspected using the Boeing MAUS system at 60 kHz. No cracks were detected. Thus far, the rotating probe eddy current system has been found to be very user friendly and capable of detecting first layer cracks on the order of 0.030 inch long or longer.

Hagemaier, Don↗

NASA NTRS2016

James Webb Space Telescope (JWST) Integrated Science Instruments Module (ISIM) Cryo-Vacuum (CV) Test Campaign Summary

JWST Integrated Science Instruments Module (ISIM) has completed its system-level testing program at the NASA Goddard Space Flight Center (GSFC). In March 2016, ISIM was successfully delivered for integration with the Optical Telescope Element (OTE) after the successful verification of the system through a series of three cryo-vacuum (CV) tests. The first test served as a risk reduction test; the second test provided the initial verification of the fully-integrated flight instruments; and the third test verified the system in its final flight configuration. The complexity of the mission has generated challenging requirements that demand highly reliable system performance and capabilities from the Space Environment Simulator (SES) vacuum chamber. As JWST progressed through its CV testing campaign, deficiencies in the test configuration and support equipment were uncovered from one test to the next. Subsequent upgrades and modifications were implemented to improve the facility support capabilities required to achieve test requirements. This paper: (1) provides an overview of the integrated mechanical and thermal facility systems required to achieve the objectives of JWST ISIM testing, (2) compares the overall facility performance and instrumentation results from the three ISIM CV tests, and (3) summarizes lessons learned from the ISIM testing campaign.

Yew, Calinda↗

DOE OSTI2024

Power Systems Resilience

As communities take steps toward identifying and achieving their clean energy goals, the topic of resilience will likely emerge. This presentation aims to help inform and empower communities as they explore how their clean energy projects can address evolving power systems reliability and resilience due to climate change and other factors. The training provides a basic introduction to power systems and the resilience challenges this traditional infrastructure faces, as well as strategies for enhancing this important quality of electric service.

communities↗

NASA NTRS1983

A flight test of laminar flow control leading-edge systems

NASA's program for development of a laminar flow technology base for application to commercial transports has made significant progress since its inception in 1976. Current efforts are focused on development of practical reliable systems for the leading-edge region where the most difficult problems in applying laminar flow exist. Practical solutions to these problems will remove many concerns about the ultimate practicality of laminar flow. To address these issues, two contractors performed studies, conducted development tests, and designed and fabricated fully functional leading-edge test articles for installation on the NASA JetStar aircraft. Systems evaluation and performance testing will be conducted to thoroughly evaluate all system capabilities and characteristics. A simulated airline service flight test program will be performed to obtain the operational sensitivity, maintenance, and reliability data needed to establish that practical solutions exist for the difficult leading-edge area of a future commercial transport employing laminar flow control.

Fischer, M. C.↗

NASA NTRS1983

A flight test of laminar flow control leading-edge systems

Fischer, M. C.↗

DOE OSTI2025

ASEAN Technical Exchange Workshop for System Operators, Regulators, and Policymakers

This presentation provides an in-depth exploration of power system planning, cross-border electricity trading, and battery energy storage systems (BESS), offering actionable insights for system operators, regulators, and policymakers. The first section delves into power system planning and analysis, focusing on capacity expansion models and resource adequacy studies, including their role in optimizing system efficiency, managing emissions, and addressing system reliability risks. Key considerations, such as integration of transmission into generation planning and the forecasting versus optimization of customer distributed energy resources (DER) technologies, are explored. The session highlights critical trade-offs in spatial granularity and model runtimes, as well as the feasibility of aligning distribution investments with capacity expansion efforts. The second section examines cross-border electricity trading, with an emphasis on resource adequacy concepts such as reliability targets, loss of load expectation (LOLE), and planning reserve margins (PRM). Case studies on reserve market design and coordination across US regions provide insights into improving reserve deliverability and managing interregional power balance and congestion. This section also addresses market-to-market congestion management, including advanced strategies for high-voltage direct current (HVDC) optimization and ancillary service delivery. Finally, the presentation covers the rapid evolution of Battery Energy Storage Systems (BESS), highlighting their operational growth, regulatory frameworks, and use cases in grid flexibility, energy storage, and reliability. The discussion focuses on the benefits of BESS for system stability, resilience, and integration of renewable energy, offering insights into its role as a vital component in the transition toward a more sustainable and flexible grid. Key performance parameters, such as throughput, round-trip efficiency, and state of charge, are also examined.

25 ENERGY STORAGE↗

NASA NTRS2010

Physics-Based Methods of Failure Analysis and Diagnostics in Human Space Flight

The Integrated Health Management (IHM) for the future aerospace systems requires to interface models of multiple subsystems in an efficient and accurate information environment at the earlier stages of system design. The complexity of modern aeronautic and aircraft systems (including e.g. the power distribution, flight control, solid and liquid motors) dictates employment of hybrid models and high-level reasoners for analysing mixed continuous and discrete information flow involving multiple modes of operation in uncertain environments, unknown state variables, heterogeneous software and hardware components. To provide the information link between key design/performance parameters and high-level reasoners we rely on development of multi-physics performance models, distributed sensors networks, and fault diagnostic and prognostic (FD&P) technologies in close collaboration with system designers. The main challenges of our research are related to the in-flight assessment of the structural stability, engine performance, and trajectory control. The main goal is to develop an intelligent IHM that not only enhances components and system reliability, but also provides a post-flight feedback helping to optimize design of the next generation of aerospace systems. Our efforts are concentrated on several directions of the research. One of the key components of our strategy is an innovative approach to the diagnostics/prognostics based on the real time dynamical inference (DI) technologies extended to encompass hybrid systems with hidden state trajectories. The major investments are into the multiphysics performance modelling that provides an access of the FD&P technologies to the main performance parameters of e.g. solid and liquid rocket motors and composite materials of the nozzle and case. Some of the recent results of our research are discussed in this chapter. We begin by introducing the problem of dynamical inference of stochastic nonlinear models and reviewing earlier results. Next, we present our analytical approach to the solution of this problem based on the path integral formulation. The resulting algorithm does not require an extensive global search for the model parameters, provides optimal compensation for the effects of dynamical noise, and is robust for a broad range of dynamical models. In the following Section the strengths of the algorithm are illustrated illustrated by inferring the parameters of the stochastic Lorenz system and comparing the results with those of earlier research. Next, we discuss a number of recent results in application to the development of the IHM for aerospace system. Firstly, we apply dynamical inference approach to a solution of classical three tank problems with mixed unknown continuous and binary parameters. The problem is considered in the context of ground support system for filling fuel tanks of liquid rocket motors. It is shown that the DI algorithm is well suited for successful solution of a hybrid version of this benchmark problem even in the presence of additional periodic and stochastic perturbation of unknown strength. Secondly, we illustrate our approach by its application to an analysis of the nozzle fault in a solid rocket motor (SRM). The internal ballistics of the SRM is modelled as a set of one-dimensional partial differential equations coupled to the dynamics of the propellant regression. In this example we are specifically focussed on the inference of discrete and continuous parameters of the nozzle blocking fault and on the possibility of an application of the DI algorithm to reducing the probability of "misses" of an on-board FD&P for SRM. In the next section re-contact problem caused by first stage/upper stage separation failure is discussed. The reaction forces imposed on the nozzle of the upper stage during the re-contact and their connection to the nozzle damage and to the thrust vector control (TVC) signal are obtained. It is shown that transient impact induced torquean be modelled as a response of an effective damped oscillator. A possible application of the DI algorithm to the inference of damage parameters and predicting fault dynamics ahead of time using the actuator signal is discussed. Finally, we formulate Bayesian inferential framework for development of the IHM system for in-flight structural health monitoring (SHM) of composite materials. We consider the signal generated by piezoelectric actuator mounted on composite structure generating elastic waves in it. The signal received by the sensor is than compared with the baseline signal. The possibility of damage inference is discussed in the context of development of the SHM.

Smelyanskiy, Vadim N.↗

NASA NTRS2016

Active Vibration Reduction of the Advanced Stirling Convertor

Stirling Radioisotope Power Systems (RPS) are being developed as an option to provide power on future space science missions where robotic spacecraft will orbit, flyby, land or rove. A Stirling Radioisotope Generator (SRG) could offer space missions a more efficient power system that uses one fourth of the nuclear fuel and decreases the thermal footprint compared to the current state of the art. The Stirling Cycle Technology Development (SCTD) Project is funded by the RPS Program to developing Stirling-based subsystems, including convertors and controller maturation efforts that have resulted in high fidelity hardware like the Advanced Stirling Radioisotope Generator (ASRG), Advanced Stirling Convertor (ASC), and ASC Controller Unit (ACU). The SCTD Project also performs research to develop less mature technologies with a wide variety of objectives, including increasing temperature capability to enable new environments, improving system reliability or fault tolerance, reducing mass or size, and developing advanced concepts that are mission enabling. Active vibration reduction systems (AVRS), or "balancers", have historically been developed and characterized to provide fault tolerance for generator designs that incorporate dual-opposed Stirling convertors or enable single convertor, or small RPS, missions. Balancers reduce the dynamic disturbance forces created by the power piston and displacer internal moving components of a single operating convertor to meet spacecraft requirements for induced disturbance force. To improve fault tolerance for dual-opposed configurations and enable single convertor configurations, a breadboard AVRS was implemented on the Advanced Stirling Convertor (ASC). The AVRS included a linear motor, a motor mount, and a closed-loop controller able to balance out the transmitted peak dynamic disturbance using acceleration feedback. Test objectives included quantifying power and mass penalty and reduction in transmitted force over a range of ASC operating parameters and mounting conditions. All tests were performed at three different piston amplitudes, 3.0, 3.75, and 4.5 mm. Overall, the transmitted force was reduced to 2 percent of the total unbalanced force by actively balancing out only the first fundamental frequency, with balancer motor power remaining under 1 watt. The test results will be used to guide future balancer designs.

Balancer↗

NASA NTRS2016

Active Vibration Reduction of the Advanced Stirling Convertor

Stirling Radioisotope Power Systems (RPS) are being developed as an option to provide power on future space science missions where robotic spacecraft will orbit, flyby, land or rove. A Stirling Radioisotope Generator (SRG) could offer space missions a more efficient power system that uses one fourth of the nuclear fuel and decreases the thermal footprint compared to the current state of the art. The Stirling Cycle Technology Development (SCTD) Project is funded by the RPS Program to developing Stirling-based subsystems, including convertors and controller maturation efforts that have resulted in high fidelity hardware like the Advanced Stirling Radioisotope Generator (ASRG), Advanced Stirling Convertor (ASC), and ASC Controller Unit (ACU). The SCTD Project also performs research to develop less mature technologies with a wide variety of objectives, including increasing temperature capability to enable new environments, improving system reliability or fault tolerance, reducing mass or size, and developing advanced concepts that are mission enabling. Active vibration reduction systems (AVRS), or "balancers", have historically been developed and characterized to provide fault tolerance for generator designs that incorporate dual-opposed Stirling convertors or enable single convertor, or small RPS, missions. Balancers reduce the dynamic disturbance forces created by the power piston and displacer internal moving components of a single operating convertor to meet spacecraft requirements for induced disturbance force. To improve fault tolerance for dual-opposed configurations and enable single convertor configurations, a breadboard AVRS was implemented on the Advanced Stirling Convertor (ASC). The AVRS included a linear motor, a motor mount, and a closed-loop controller able to balance out the transmitted peak dynamic disturbance using acceleration feedback. Test objectives included quantifying power and mass penalty and reduction in transmitted force over a range of ASC operating parameters and mounting conditions. All tests were performed at three different piston amplitudes, 3.0 mm, 3.75 mm, and 4.5 mm. Overall, the transmitted force was reduced to 2% of the total unbalanced force by actively balancing out only the first fundamental frequency, with balancer motor power remaining under one watt. The test results will be used to guide future balancer designs.

Active Vibration Reduction↗

NASA NTRSDate not supplied

The Plant Water Management Experiments: Hydroponics 3 & 4

As humans consider longer-duration missions in space, NASA has identified production of fresh vegetables aboard spacecraft as beneficial for crew nutrition, mental wellbeing, and enabling bioregenerative life support (i.e., air, water, and waste processing). Current low-g plant growth techniques have successfully grown a variety of leafy and flowering plants. However, unique microgravity fluidics challenges to maintain plant moisture levels persist which hamper overall system reliability. The Plant Water Management (PWM) experiments seek to demonstrate low-cost, low-mass, reusable plant growth systems that leverage recent advances in low-g capillary fluidics phenomena to provide routine, largely passive, water delivery to plants. This paper presents findings from a series of PWM-Hydroponics 3 & 4 experiments, which were collected during three ISS flight operations that occurred in March, May, and July of 2021. Open hydroponic capillary channel flows with synthetic evapo-transpiring plant models were used. Tests demonstrated flow stability for single and parallel channel flow configurations across a range of flow rates, plant types, and plant arrangements. Technology demonstrations of both passive aeration and bubble phase separation are reported. We provide details of the data reduction and archive. Insights from the successful flight demonstrations provide a foundation from which follow-on PWM-Hydroponics 5 & 6 experiments on ISS, potentially incorporate living plants, are being considered. Xx Summary of positives and negatives..

Marc B. Wasserman↗

NASA NTRS2003

Performance Evaluation of Electrochem's PEM Fuel Cell Power Plant for NASA's 2nd Generation Reusable Launch Vehicle

NASA's Next Generation Launch Technology (NGLT) program is being developed to meet national needs for civil and commercial space access with goals of reducing the launch costs, increasing the reliability, and reducing the maintenance and operating costs. To this end, NASA is considering an all- electric capability for NGLT vehicles requiring advanced electrical power generation technology at a nominal 20 kW level with peak power capabilities six times the nominal power. The proton exchange membrane (PEM) fuel cell has been identified as a viable candidate to supply this electrical power; however, several technology aspects need to be assessed. Electrochem, Inc., under contract to NASA, has developed a breadboard power generator to address these technical issues with the goal of maximizing the system reliability while minimizing the cost and system complexity. This breadboard generator operates with dry hydrogen and oxygen gas using eductors to recirculate the gases eliminating gas humidification and blowers from the system. Except for a coolant pump, the system design incorporates passive components allowing the fuel cell to readily follow a duty cycle profile and that may operate at high 6:1 peak power levels for 30 second durations. Performance data of the fuel cell stack along with system performance is presented to highlight the benefits of the fuel cell stack design and system design for NGLT vehicles.

Kimble, Michael C.↗

DOE OSTI2026

Representation and Impact of Water Head on Power System Planning and Operation

Representing water head information in power system model files, can provide a more realistic model of the system and thereby inform operation and planning personnel in the decision-making process. This article describes a procedure for modifying the power system model files (steady-state and dynamic) to represent water head information. Additionally, the impact of representing the water head on power system reliability studies including contingency analysis, cascading failure analysis and dynamic frequency response analysis has been investigated, using the modified power system models. This paper considers the detailed Western Electricity Coordination Council model during summer and winter conditions as the test system for the impact analysis. Results show that under reduced water head: 1) the number of critical voltage and branch flow violations increases; 2) chances of cascading failure and island formation increases; and 3) frequency nadir decreases as compared to those of the base cases where the water head information is not represented.

13 - HYDRO ENERGY↗

NASA NTRS1985

Reactor power system deployment and startup

This paper addresses issues that should receive further examination in the near-term as concept selection for development of a U.S. space reactor power system is approached. The issues include: the economics, practicality and system reliability associated with transfer of nuclear spacecraft from low earth shuttle orbits to operational orbits, via chemical propulsion versus nuclear electric propulsion; possible astronaut supervised reactor and nuclear electric propulsion startup in low altitude Shuttle orbit; potential deployment methods for nuclear powered spacecraft from Shuttle; the general public safety of low altitude startup and nuclear safe and disposal orbits; the question of preferred reactor power level; and the question of frozen versus molten alkali metal coolant during launch and deployment. These issues must be considered now because they impact the SP-100 concept selection, power level selection, weight and size limits, use of deployable radiators, reliability requirements, and economics, as well as the degree of need for and the urgency of developing space reactor power systems.

Wetch, J. R.↗

NASA NTRS1994

Does human cognition allow Human Factors (HF) certification of advanced aircrew systems?

This paper has examined the requirements of HF specification and certification within advanced or complex aircrew systems. It suggests reasons for current inadequacies in the use of HF in the design process, giving some examples in support, and suggesting an avenue towards the improvement of the HF certification process. The importance of human cognition to the operation and performance of advanced aircrew systems has been stressed. Many of the shortfalls of advanced aircrew systems must be attributed to over automated designs that show little consideration on either the mental limits or the cognitive capabilities of the human system component. Traditional approaches to system design and HF certification are set within an over physicalistic foundation. Also, traditionally it was assumed that physicalistic system functions could be attributed to either the human or the machine on a one to one basis. Moreover, any problems associated with the parallel needs, or promoting human understanding alongside system operation and direction, were generally equated in reality by the natural flexibility and adaptability of human skills. The consideration of the human component of a complex system is seen as being primarily based on manifestations of human behavior to the almost total exclusion of any appreciation of unobservable human mental and cognitive processes. The argument of this paper is that the considered functionality of any complex human-machine system must contain functions that are purely human and purely cognitive. Human-machine system reliability ultimately depends on human reliability and dependability and, therefore, on the form and frequency of cognitive processes that have to be conducted to support system performance. The greater the demand placed by an advanced aircraft system on the human component's basic knowledge processes or cognition, rather than on skill, the more insiduous the effects the human may have on that system. This paper discusses one example of an attempt to devise an improved method of specificaiton and certification with relation to the advanced aircrew system, that of the RN Merlin helicopter. The method is realized to have limitations in practice, these mainly associated with the late production of the system specification in relation to the system development process. The need for a careful appreciation of the capabilities and support needs of human cognition within the design process of a complex man machine system has been argued, especially with relation to the concept of system functionality. Unlike the physicalistic Fitts list, a new classification of system functionality is proposed, namely: (1) equipment - system equipment related; (2) cognitive - human cognition related; and (3) associated - necessary combinatin of equipment and cognitive. This paper has not proposed a method for a fuller consideration of cognition within systems design, but has suggested the need for such a method and indicated an avenue towards its development. Finally, the HF certification of advanced aircrew systems is seen as only being possible in a qualified sense until the important functions of human cognition are considered within the system design process. (This paper contains the opinions of its authors and does not necessarily refledt the standpoint of their respective organizations).

Macleod, Iain S.↗