Search NASA⌕ Search

SEARCH · Search NASA

Results for “consequence management”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 397 records · Page 22
All sourcesNASA NTRSDOE OSTI
DOE OSTI2025

ARCADE Analysis Methods & Validation Pathway

The Advanced Reactor Cyber Analysis and Development Environment (ARCADE) provides an automated analysis system which supports risk-informed performance based (RIPB) evaluations of nuclear control systems. Every possible cyber threat which could lead to consequence is identified by simulating the unsafe control action sequences which transform digital harm into physical harm. Eliminating the simulation of complex digital cyber attack chains cuts out unnecessary computational overhead and focuses directly on the physics of cyber-physical attacks. This focus enables designers to make informed decisions which can entirely eliminate categories of cyber threats against advanced reactors through the physical nature of the plant design. This narrowing of cyber threat against nuclear power plants through the physics of the system is intended to make any remaining threat management and cost efficient. This is the goal of the Tiered Cyber Analysis (TCA) outlined in NRC Draft Regulation Guide (RG) 5.96, which provides a RIPB cybersecurity approach for new reactors. ARCADE has been custom developed to meet the demands of the rigorous analysis required in Tier 1 of the TCA, which forms the foundation of the TCA process. Currently, ARCADE is still under development, but has made significant leaps in capability. A pilot analysis on the opensource Asherah simulator was performed which demonstrated key functionality goals. The next stage of ARCADE development involves improvements to the applications which support the analysis system, and enabling the analysis system to utilize the full suite of unsafe control action simulations. Since the analysis method’s core functions are complete, validation of the analysis method will be started concurrent to the next development stages. The automated analysis ARCADE will provide can radically change the cybersecurity design process for advanced reactors, reducing the cost of security implementation while enhancing cyber resilience. The pathway for ARCADE’s development to this goal has become much clearer. The majority of technical hurdles have been cleared, and the remaining development needs have been solidified. ARCADE is now capable of assisting the advanced reactor design process and directly support advanced reactor industry RIPB practices.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
NASA NTRS2008

Managing Space Radiation Risk in the New Era of Space Exploration

Space exploration is a risky enterprise. Rockets launch astronauts at enormous speeds into a harsh, unforgiving environment. Spacecraft must withstand the bitter cold of space and the blistering heat of reentry. Their skin must be strong enough to keep the inside comfortably pressurized and tough enough to resist damage from micrometeoroids. Spacecraft meant for lunar or planetary landings must survive the jar of landing, tolerate dust, and be able to take off again. For astronauts, however, there is one danger in space that does not end when they step out of their spacecraft. The radiation that permeates space -- unattenuated by Earth s atmosphere and magnetosphere -- may damage or kill cells within astronauts bodies, resulting in cancer or other health consequences years after a mission ends. The National Aeronautics and Space Administration (NASA) has recently embarked on Project Constellation to implement the Vision for Space Exploration -- a program announced by President George W. Bush in 2004 with the goal of returning humans to the Moon and eventually transporting them to Mars. To adequately prepare for the safety of these future space explorers, NASA s Exploration Systems Mission Directorate requested that the Aeronautics and Space Engineering Board of the National Research Council establish a committee to evaluate the radiation shielding requirements for lunar missions and to recommend a strategic plan for developing the radiation mitigation capabilities needed to enable the planned lunar mission architecture

Source record↗
NASA NTRS1994

Breaking down barriers in cooperative fault management: Temporal and functional information displays

At the highest level, the fundamental question addressed by this research is how to aid human operators engaged in dynamic fault management. In dynamic fault management there is some underlying dynamic process (an engineered or physiological process referred to as the monitored process - MP) whose state changes over time and whose behavior must be monitored and controlled. In these types of applications (dynamic, real-time systems), a vast array of sensor data is available to provide information on the state of the MP. Faults disturb the MP and diagnosis must be performed in parallel with responses to maintain process integrity and to correct the underlying problem. These situations frequently involve time pressure, multiple interacting goals, high consequences of failure, and multiple interleaved tasks.

Potter, Scott S.↗
NASA NTRS1994

Decision Making in Action: Applying Research to Practice

The importance of decision-making to safety in complex, dynamic environments like mission control centers, aviation, and offshore installations has been well established. NASA-ARC has a program of research dedicated to fostering safe and effective decision-making in the manned spaceflight environment: Because access to spaceflight is limited, environments with similar characteristics, including aviation and nuclear power plants, serve as analogs from which space-relevant data can be gathered and theories developed. Analyses of aviation accidents cite crew judgement and decision making as causes or contributing factors in over half of all accidents. Yet laboratory research on decision making has not proven especially helpful in improving the quality of decisions in these kinds of environments. One reason is that the traditional, analytic decision models are inappropriate to multi-dimensional, high-risk environments, and do not accurately describe what expert human decision makers do when they make decisions that have consequences. A new model of dynamic, naturalistic decision making is offered that may prove useful for improving decision making in complex, isolated, confined and high-risk environments. Based on analyses of crew performance in full-mission simulators and accident reports, features that define effective decision strategies in abnormal or emergency situations have been identified. These include accurate situation assessment (including time and risk assessment), appreciation of the complexity of the problem, sensitivity to constraints on the decision, timeliness of the response, and use of adequate information. More effective crews also manage their workload to provide themselves with time and resources to make good good decisions are appropriate to the demands of the situation. Effective crew decision making and overall performance are mediated by crew communication. Communication contributes to performance because it assures that all crew members have essential information, but it also regulates and coordinates crew actions and is the medium of collective thinking in response to a problem. This presentation will examine the relations between leadership, communication, decision making and overall crew performance. Implications of these findings for training will be discussed.

Orasanu, Judith↗
NASA NTRS1994

Decision Making in Action: Applying Research to Practice

The importance of decision-making to safety in complex, dynamic environments like mission control centers and offshore installations has been well established. NASA-ARC has a program of research dedicated to fostering safe and effective decision-making in the manned spaceflight environment. Because access to spaceflight is limited, environments with similar characteristics, including aviation and nuclear power plants, serve as analogs from which space-relevant data can be gathered and theories developed. Analyses of aviation accidents cite crew judgement and decision making as causes or contributing factors in over half of all accidents. A similar observation has been made in nuclear power plants. Yet laboratory research on decision making has not proven especially helpful in improving the quality of decisions in these kinds of environments. One reason is that the traditional, analytic decision models are inappropriate to multidimensional, high-risk environments, and do not accurately describe what expert human decision makers do when they make decisions that have consequences. A new model of dynamic, naturalistic decision making is offered that may prove useful for improving decision making in complex, isolated, confined and high-risk environments. Based on analyses of crew performance in full-mission simulators and accident reports, features that define effective decision strategies in abnormal or emergency situations have been identified. These include accurate situation assessment (including time and risk assessment), appreciation of the complexity of the problem, sensitivity to constraints on the decision, timeliness of the response, and use of adequate information. More effective crews also manage their workload to provide themselves with time and resources to make good decisions. In brief, good decisions are appropriate to the demands of the situation. Effective crew decision making and overall performance are mediated by crew communication. Communication contributes to performance because it assures that all crew members have essential information, but it also regulates and coordinates crew actions and is the medium of collective thinking in response to a problem. This presentation will examine the relations between leadership, communication, decision making and overall crew performance. Implications of these findings for spaceflight and training for offshore installations will be discussed.

Orasanu, Judith↗
NASA NTRS1994

Decision Making in Action

The importance of decision-making to safety in complex, dynamic environments like mission control centers and offshore installations has been well established. NASA-ARC has a program of research dedicated to fostering safe and effective decision-making in the manned spaceflight environment. Because access to spaceflight is limited, environments with similar characteristics, including aviation and nuclear power plants, serve as analogs from which space-relevant data can be gathered and theories developed. Analyses of aviation accidents cite crew judgement and decision making as causes or contributing factors in over half of all accidents. A similar observation has been made in nuclear power plants. Yet laboratory research on decision making has not proven especially helpful in improving the quality of decisions in these kinds of environments. One reason is that the traditional, analytic decision models are inappropriate to multidimensional, high-risk environments, and do not accurately describe what expert human decision makers do when they make decisions that have consequences. A new model of dynamic, naturalistic decision making is offered that may prove useful for improving decision making in complex, isolated, confined and high-risk environments. Based on analyses of crew performance in full-mission simulators and accident reports, features that define effective decision strategies in abnormal or emergency situations have been identified. These include accurate situation assessment (including time and risk assessment), appreciation of the complexity of the problem, sensitivity to constraints on the decision, timeliness of the response, and use of adequate information. More effective crews also manage their workload to provide themselves with time and resources to make good decisions. In brief, good decisions are appropriate to the demands of the situation. Effective crew decision making and overall performance are mediated by crew communication. Communication contributes to performance because it assures that all crew members have essential information, but it also regulates and coordinates crew actions and is the medium of collective thinking in response to a problem. This presentation will examine the relations between leadership, communication, decision making and overall crew performance. Implications of these findings for spaceflight and training for offshore installations will be discussed.

Orasanu, Judith↗
NASA NTRS1995

Decision Making in the Airplane

The Importance of decision-making to safety in complex, dynamic environments like mission control centers, aviation, and offshore installations has been well established. NASA-ARC has a program of research dedicated to fostering safe and effective decision-making in the manned spaceflight environment. Because access to spaceflight is limited, environments with similar characteristics, including aviation and nuclear power plants, serve as analogs from which space-relevant data can be gathered and theories developed. Analyses of aviation accidents cite crew judgement and decision making as causes or contributing factors in over half of all accidents. Yet laboratory research on decision making has not proven especially helpful In improving the quality of decisions in these kinds of environments. One reason is that the traditional, analytic decision models are inappropriate to multi-dimensional, high-risk environments, and do not accurately describe what expert human decision makers do when they make decisions that have consequences. A new model of dynamic, naturalistic decision making is offered that may prove useful for improving decision making in complex, isolated, confined and high-risk environments. Based on analyses of crew performance in full-mission simulators and accident reports, features that define effective decision strategies in abnormal or emergency situations have been identified. These include accurate situation assessment (including time and risk assessment), appreciation of the complexity of the problem, sensitivity to constraints on the decision, timeliness of the response, and use of adequate information. More effective crews also manage their workload to provide themselves with time and resources to make good decisions. In brief, good decisions are appropriate to the demands of the situation. Effective crew decision making and overall performance are mediated by crew communication. Communication contributes to performance because it assures that all crew members have essential information, but it also regulates and coordinates crew actions and is the medium of collective thinking In response to a problem, This presentation will examine the relations between leadership, communication, decision making and overall crew performance. Implications of these findings for training will be discussed.

Orasanu, Judith↗
NASA NTRS1999

The Effect of Shared Information on Pilot/Controller And Controller/Controller Interactions

In order to respond to the increasing demand on limited airspace system resources, a number of applications of information technology have been proposed, or are under investigation, to improve the efficiency, capacity and reliability of ATM (Asynchronous Transfer Mode) operations. Much of the attention in advanced ATM technology has focused on advanced automation systems or decision aiding systems to improve the performance of individual Pilots or Controllers. However, the most significant overall potential for information technology appears to he in increasing the shared information between human agents such as Pilots, Controllers or between interacting Controllers or traffic flow managers. Examples of proposed shared information systems in the US include; Controller Pilot Databank Communication (CPDLC), Traffic Management Advisor (TMA); Automatic Dependent Surveillance (ADS); Collaborative Decision Making (CDM) and NAS Level Common Information Exchange. Air Traffic Management is fundamentally a human centered process consisting of the negotiation, execution and monitoring of contracts between human agents for the allocation of limited airspace, runway and airport surface resources. The decision processes within ATM tend to be Semistructured. Many of the routine elements in ATM decision making on the part of the Controllers or Pilots are well Structured and can be represented by well defined rules or procedures. However in disrupted conditions, the ATM decision processes are often Unstructured and cannot be reduced to a set of discrete rules. As a consequence, the ability to automate ATM processes will be limited and ATM will continue to be a human centric process where the responsibility and the authority for the negotiation will continue to rest with human Controllers and Pilots. The use of information technology to support the human decision process will therefore be an important aspect of ATM modernization. The premise of many of the proposed shared information systems is that the performance of ATM operations will improve with an increase in Shared Situation Awareness between agents (Pilots, Controller, Dispatchers). This will allow better informed control decisions and an improved ability to negotiate between agents. A common information basis may reduce communication load and may increase the level of collaboration in the decision process. In general, information sharing is expected to have advantages for all agents within the system. However there are important questions which remain to be,addressed. For example: What shared information is most important for developing effective Shared Situation Awareness? Are there issues of information saturation? Does information parity create ambiguity in control authority? Will information sharing induce undesirable or unstable gaming behavior between agents? This paper will explore the effect of current and proposed information sharing between different ATM agents. The paper will primarily concentrate on bilateral tactical interactions between specific agents (Pilot/Controller; Controller/Controller; Pilot/Dispatcher; Controller/Dispatcher) however it will also briefly discuss multilateral interaction and more strategic interactions.

Hansman, R. John↗
NASA NTRS2003

The Interaction Between an Insoluble Particle and an Advancing Solid/Liquid Interface: Micro-Gravity Experiments and Theoretical Developments

The interaction of an insoluble particle with an advancing solid/liquid interface (SLI) has been a subject of investigation for the past four decades. While the original interest stemmed from geology applications (e.g., frost heaving in soil), researchers soon realized that the complex science associated with such an interaction is relevant to many other scientific fields encompassing metal matrix composites (MMCs), high temperature superconductors, inclusion management in steel, growth of monotectics, and preservation of biological cells. During solidification of a liquid containing an insoluble particle, three distinct interaction phenomena have been experimentally observed: instantaneous engulfment of the particle, continuous pushing, and particle pushing followed by engulfment. It was also observed that for given experimental conditions and particle size there is a critical solidification velocity, V(sub cr), above which a particle is engulfed. During solidification of MMCs pushing leads to particle agglomeration at the grain boundaries and this has detrimental effects on mechanical properties of the casting. Consequently, the process must be designed for instantaneous engulfment to occur. This implies the development of accurate theoretical models to predict V(sub cr), and perform benchmark experiments to test the validity of such models. Although considerable progress has been made in understanding the pushing/engulfment phenomenon (PEP), its quantification in terms of the material and processing parameters remains a focus of research. Since natural convection currents occurring during terrestrial solidification experiments complicate the study of PEP, execution of experiments on the International Space Station (ISS) has been approved and funded by NASA. Extensive terrestrial (1g) experiments and preliminary micro-gravity (mu g) experiments on two space shuttle missions have been conducted in preparation for future experiments on the ISS. The investigated systems included metal-ceramic particles (pure aluminum - zirconia particles) and transparent organic - non-reactive particles (succinonitrile - polystyrene and biphenyl - glass). This paper will discuss the experimental results obtained in both lg and pg conditions and the influence of the natural convection on V(sub cr). A summary of past mathematical models and our recent theoretical developments will also be presented to explain the experimentally observed particle/SLI interaction.

Catalina, Adrian V.↗
NASA NTRS2010

Future Plans in US Flight Missions: Using Laser Remote Sensing for Climate Science Observations

Laser Remote Sensing provides critical climate science observations necessary to better measure, understand, model and predict the Earth's water, carbon and energy cycles. Laser Remote Sensing applications for studying the Earth and other planets include three dimensional mapping of surface topography, canopy height and density, atmospheric measurement of aerosols and trace gases, plume and cloud profiles, and winds measurements. Beyond the science, data from these missions will produce new data products and applications for a multitude of end users including policy makers and urban planners on local, national and global levels. NASA Missions in formulation including Ice, Cloud, and land Elevation Satellite (ICESat 2) and the Deformation, Ecosystem Structure, and Dynamics of Ice (DESDynI), and future missions such as the Active Sensing of CO2 Emissions over Nights, Days and Seasons (ASCENDS), will incorporate the next generation of LIght Detection And Ranging (lidar) instruments to measure changes in the surface elevation of the ice, quantify ecosystem carbon storage due to biomass and its change, and provide critical data on CO 2 in the atmosphere. Goddard's plans for these instruments and potential uses for the resulting data are described below. For the ICESat 2 mission, GSFC is developing a micro-pulse multi-beam lidar. This instrument will provide improved ice elevation estimates over high slope and very rough areas and result in improved lead detection for sea ice estimates. Data about the sea ice and predictions related to sea levels will continue to help inform urban planners as the changes in the polar ice accelerate. DESDynI is planned to be launched in 2017 and includes both lidar and radar instruments. GSFC is responsible for the lidar portion of the DESDynI mission and is developing a scanning laser altimeter that will measure the Earth's topography, the structure of tree canopies, biomass, and surface roughness. The DESDynI lidar will also measure and predict the response of ice masses to climate change and impact on sea level. Data from the lidar will ultimately be fused with radar data products with heretofore unseen results and applications. The 3-D structure of forests is critical to understanding the impact of land use and associated landscape changes on the habitat of life forms and consequently on their biodiversity. Lidar instruments are also under development to measure trace gases in the atmospheric such as CO2 and methane. GSFC is developing an active measurement approach to determine the CO2 column density and surface pressure for the proposed ASCENDS mission. The objective of this approach is to produce data on the amounts of anthropogenic and organic CO2 in the atmosphere with sufficient accuracy to meet the needs of target users including state, federal and international users as well as policy-related legislative, regulatory, and voluntary carbon-related management groups local to international interests. In summary, NASA will continue to rely on laser remote sensing for critical climate science observations and is committed to the development of the next generation of lidar instruments for a range of applications.

Callahan, Lisa W.↗
NASA NTRS1985

Optimal symmetric flight studies

Several topics in optimal symmetric flight of airbreathing vehicles are examined. In one study, an approximation scheme designed for onboard real-time energy management of climb-dash is developed and calculations for a high-performance aircraft presented. In another, a vehicle model intermediate in complexity between energy and point-mass models is explored and some quirks in optimal flight characteristics peculiar to the model uncovered. In yet another study, energy-modelling procedures are re-examined with a view to stretching the range of validity of zeroth-order approximation by special choice of state variables. In a final study, time-fuel tradeoffs in cruise-dash are examined for the consequences of nonconvexities appearing in the classical steady cruise-dash model. Two appendices provide retrospective looks at two early publications on energy modelling and related optimal control theory.

Weston, A. R.↗
NASA NTRS1993

Management of government quality assurance functions for NASA contracts

This handbook sets forth requirements for NASA direction and management of government quality assurance functions performed for NASA contracts and is applicable to all NASA installations. These requirements will standardize management to provide the minimum oversight and effective use of resources. This handbook implements Federal Acquisition Regulation (FAR) Part 46, NASA FAR Supplement 18-46, Quality Assurance, and NMI 7410.1. Achievement of established quality and reliability goals at all levels is essential to the success of NASA programs. Active participation by NASA and other agency quality assurance personnel in all phases of contract operations, including precontract activity, will assist in the economic and timely achievement of program results. This involves broad participation in design, development, procurement, inspection, testing, and preventive and corrective actions. Consequently, government, as well as industry, must place strong emphasis on the accomplishment of all functions having a significant bearing on quality and reliability from program initiation through end-use of supplies and services produced. For purposes of implementing NASA and other agency agreements, and to provide for uniformity and consistency, the terminology and definitions prescribed herein and in a future handbook shall be utilized for all NASA quality assurance delegations and subsequent redelegations.

Source record↗
NASA NTRS2018

Optimization of Thin-Film Solar Cells for Lunar Surface Operations

Thin-film solar cells have been in production for decades, but technology has only recently advanced enough to allow for comparable efficiencies to traditional rigid cells. Some of the benefits of thin-films, such as lighter weight and being foldable, are particularly advantageous to space applications since mass and volume are key considerations of any flight project. Using these thin-film cells in space, however, is outside of their ground-based design criteria. This requires special care to be taken in designing the power generation system of a spacecraft around a thin-film solar cell, particularly in regards to thermal management. Without the diffusion of an atmosphere to mitigate solar load, the temperature of the panels can rapidly exceed their design specification. In this paper a design solution is presented that allows for thin-film solar cells to be used in a robotic lunar lander. Due to the low thermal mass and in-plane conductivity of thin films, it is difficult to remove waste heat by any other method than radiation. On the lunar surface this means angling the arrays to increase their view factor to space, which has the negative consequence of decreasing their power generation. An optimization was developed to balance the heat rejection and power generation of the cells, using constraints on the maximum cell temperature and minimum spacecraft power requirements. The resulting solar panel angle was then used as an input to the Thermal Desktop model to verify the final panel temperatures.

Breeding, Shawn↗
NASA NTRS2013

Integrated Systems Health Management (ISHM) Toolkit

A framework of software components has been implemented to facilitate the development of ISHM systems according to a methodology based on Reliability Centered Maintenance (RCM). This framework is collectively referred to as the Toolkit and was developed using General Atomics' Health MAP (TM) technology. The toolkit is intended to provide assistance to software developers of mission-critical system health monitoring applications in the specification, implementation, configuration, and deployment of such applications. In addition to software tools designed to facilitate these objectives, the toolkit also provides direction to software developers in accordance with an ISHM specification and development methodology. The development tools are based on an RCM approach for the development of ISHM systems. This approach focuses on defining, detecting, and predicting the likelihood of system functional failures and their undesirable consequences.

Venkatesh, Meera↗
NASA NTRSDate not supplied

Validation of A Simulation Environment for Future Space Traffic Management

This study presents initial results of a newly developed simulation environment intendedto explore and assess future Space Traffic Management (STM) scenarios. The number ofnew Resident Space Objects (RSOs) in near-Earth orbit is expected to increase significantlywith the expected future deployment of a number of large constellations. These futurescenarios involve the addition of many tens of thousands of new RSOs, making the analysisinto their impact on collision risk extend beyond what traditional data-mining of present-dayconjunction data can reliably predict. To address this, a robust simulation environment wasdeveloped that implements a full force-model for orbit propagation, and computes continuousall-on-all conjunction statistics for arbitrarily large catalog sizes and simulation timeframes.Collision avoidance and station-keeping maneuvers can be optionally implemented based onconfigurable user inputs including physical characteristics and spacecraft meta-data (e.g.,commercial/government, owner country, etc.). Constellation build-out and de-orbit scenarioswere also implemented and modeled based on real-data analysis. Validation of the simulationresults was a critical component of the simulation development, and was done using the currentcatalog with comparisons against both public and internal NASA data-sets. The comparisonsdemonstrate that, with the appropriate settings, representative levels of conjunction ratesand probabilities can be obtained, providing confidence that the simulation tool can generatemeaningful outcomes for test scenarios. As an initial demonstration of the tool’s capabilities,year-long simulations with station-keeping were conducted to examine conjunction historiesusing both the current object catalog (5800 active satellites) and a hypothetical 60,000 objectscenario involving five potential large constellations. Output metrics include the number ofconjunction events, estimates of collision consequence (fragmentation), delta-V maneuver costs,and the probability of at least one collision occurring. The results highlight the potential thatthe simulation tool has for incorporating and running performance comparisons between, e.g.,various sets of maneuver guidelines, industry norms, and definitions of risk, with the overallobjective of providing actionable data to STM policy makers. The presentation will providean overview of the simulation development and validation efforts, as well as a discussion ofobservations gathered from the initial simulations performed.

conjunction assessment↗
NASA NTRS2010

The ICARE Method

The ICARE method is a flexible, widely applicable method for systems engineers to solve problems and resolve issues in a complete and comprehensive manner. The method can be tailored by diverse users for direct application to their function (e.g. system integrators, design engineers, technical discipline leads, analysts, etc.). The clever acronym, ICARE, instills the attitude of accountability, safety, technical rigor and engagement in the problem resolution: Identify, Communicate, Assess, Report, Execute (ICARE). This method was developed through observation of Space Shuttle Propulsion Systems Engineering and Integration (PSE&I) office personnel approach in an attempt to succinctly describe the actions of an effective systems engineer. Additionally it evolved from an effort to make a broadly-defined checklist for a PSE&I worker to perform their responsibilities in an iterative and recursive manner. The National Aeronautics and Space Administration (NASA) Systems Engineering Handbook states, engineering of NASA systems requires a systematic and disciplined set of processes that are applied recursively and iteratively for the design, development, operation, maintenance, and closeout of systems throughout the life cycle of the programs and projects. ICARE is a method that can be applied within the boundaries and requirements of NASA s systems engineering set of processes to provide an elevated sense of duty and responsibility to crew and vehicle safety. The importance of a disciplined set of processes and a safety-conscious mindset increases with the complexity of the system. Moreover, the larger the system and the larger the workforce, the more important it is to encourage the usage of the ICARE method as widely as possible. According to the NASA Systems Engineering Handbook, elements of a system can include people, hardware, software, facilities, policies and documents; all things required to produce system-level results, qualities, properties, characteristics, functions, behavior and performance. The ICARE method can be used to improve all elements of a system and, consequently, the system-level functional, physical and operational performance. Even though ICARE was specifically designed for a systems engineer, any person whose job is to examine another person, product, or process can use the ICARE method to improve effectiveness, implementation, usefulness, value, capability, efficiency, integration, design, and/or marketability. This paper provides the details of the ICARE method, emphasizing the method s application to systems engineering. In addition, a sample of other, non-systems engineering applications are briefly discussed to demonstrate how ICARE can be tailored to a variety of diverse jobs (from project management to parenting).

Henke, Luke↗
NASA NTRS1996

A Framework for Modeling Human-Machine Interactions

Modern automated flight-control systems employ a variety of different behaviors, or modes, for managing the flight. While developments in cockpit automation have resulted in workload reduction and economical advantages, they have also given rise to an ill-defined class of human-machine problems, sometimes referred to as 'automation surprises'. Our interest in applying formal methods for describing human-computer interaction stems from our ongoing research on cockpit automation. In this area of aeronautical human factors, there is much concern about how flight crews interact with automated flight-control systems, so that the likelihood of making errors, in particular mode-errors, is minimized and the consequences of such errors are contained. The goal of the ongoing research on formal methods in this context is: (1) to develop a framework for describing human interaction with control systems; (2) to formally categorize such automation surprises; and (3) to develop tests for identification of these categories early in the specification phase of a new human-machine system.

Shafto, Michael G.↗
NASA NTRS2010

Software Model Checking of ARINC-653 Flight Code with MCP

The ARINC-653 standard defines a common interface for Integrated Modular Avionics (IMA) code. In particular, ARINC-653 Part 1 specifies a process- and partition-management API that is analogous to POSIX threads, but with certain extensions and restrictions intended to support the implementation of high reliability flight code. MCP is a software model checker, developed at NASA Ames, that provides capabilities for model checking C and C++ source code. In this paper, we present recent work aimed at implementing extensions to MCP that support ARINC-653, and we discuss the challenges and opportunities that consequentially arise. Providing support for ARINC-653 s time and space partitioning is nontrivial, though there are implicit benefits for partial order reduction possible as a consequence of the API s strict interprocess communication policy.

Thompson, Sarah J.↗