SEARCH · Search NASA
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
Random-fault densities measured in array of standard structures. Test pattern is array of standard circuit elements built into circuit chip along with, or in lieu of, integrated circuit objective process. Measurements on ray made and interpreted so fabrication process can be corrected as necessary.
The concept of designing for reliability will be introduced along with a brief overview of reliability, redundancy and traditional methods of fault tolerance is presented, as applied to current logic devices. The fundamentals of advanced circuit design and analysis techniques will be the primary focus. The introduction will cover the definitions of key device parameters and how analysis is used to prove circuit correctness. Basic design techniques such as synchronous vs asynchronous design, metastable state resolution time/arbiter design, and finite state machine structure/implementation will be reviewed. Advanced topics will be explored such as skew-tolerant circuit design, the use of triple-modular redundancy and circuit hazards, device transients and preventative circuit design, lock-up states in finite state machines generated by logic synthesizers, device transient characteristics, radiation mitigation techniques. worst-case analysis, the use of timing analyzer and simulators, and others. Case studies and lessons learned from spaceflight designs will be given as examples
Several irregularly shaped topographic depressions occur near the dichotomy boundary in northern Arabia Terra, Mars. The geomorphology of these features suggests that they formed by collapse, opposed to meteor impact. At least one depression (approx.55 by 85 km) displays geologic features indicating a complex, multi-stage collapse history. Features within and around the collapse structure indicate volcanic processes. The complex occurs within Hesperian ridged plains of likely volcanic origin and displays no crater rim or evidence for ejecta. Instead the depression consists of a series of circumferential graben and down-dropped blocks which also display upper surfaces similar to ridged plain lavas. Large blocks within the depression are tilted towards the crater center, and display graben that appear to have originally been linked with circumferential graben outside of the complex related to earlier collapse events. A nearly 700 m high mound exists along a graben within the complex that might be a vent. The deepest depression displays two sets of nearly continuous terraces, which we interpret as high-stands of a drained lava lake. These features appear similar to the black ledge described during the Kilauea Iki eruption in 1959. A lacustrine origin for the terraces seems unlikely because of the paucity of channels found in or around the depression that could be linked to aqueous surface processes. In addition, there is no obvious evidence for lacustrine sediments within the basin. Together with the presence of significant faulting that is indicative of collapse we conclude that this crater complex represents a large caldera formed in the Late Noachian to Early Hesperian. Other linear and irregular depressions in the region also might be linked to ancient volcanism. If that hypothesis is correct, it suggests that northern Arabia Terra could contain a large, previously unrecognized highland igneous province. Evacuation of magma via explosive and effusive activity produced localized collapse, might have contributed to nearby ridged plains, and pyroclastic materials erupted from these vents might have supplied sediments in fretted terrain and other deposits. The recognition of volcanoes within Arabia Terra expands the known extent of Noachian-Hesperian volcanism to cover much of the preserved martian highland crust.
Unmanned aircraft systems (UAS) collaborate with humans to operate in diverse, safety-critical applications. However, assurance technologies need to be integrated into the design process in order to guarantee safe behavior, thereby enabling UAS operations in the National Airspace System (NAS). In this paper, formal methods are integrated with learning-enabled systems representations. The generation and representation of knowledge are captured via monadic second-order logic rules in the cognitive architecture Soar. These rules are translated into timed automata, and a proof of correctness for the translation is provided so that safety and liveness properties can be checked in the formal verification environment Uppaal. This approach is agnostic to the learning mechanism used to generate the learned rules (e.g., chunking, etc.). An example of a fault-tolerant, learning-enabled UAS deciding which of four contingency procedures to execute under a lost link scenario while overflying an urban area is used to illustrate the approach.
Large Language Models (LLMs) have demonstrated remarkable performance in various natural language processing tasks. However, the training of these models is computationally intensive and susceptible to faults, particularly in the attention mechanism, which is a critical component of transformer-based LLMs. In this paper, we investigate the impact of faults on LLM training, focusing on INF, NaN, and near-INF values in the computation results with systematic fault injection experiments. We observe the propagation patterns of these errors, which can trigger non-trainable states in the model and disrupt training, forcing the procedure to load from checkpoints. To mitigate the impact of these faults, we propose ATTNChecker, the first Algorithm-Based Fault Tolerance (ABFT) technique tailored for the attention mechanism in LLMs. ATTNChecker is designed based on fault propagation patterns of LLM and incorporates performance optimization to adapt to both system reliability and model vulnerability while providing lightweight protection for fast LLM training. Evaluations on four LLMs show that ATTNChecker on average incurs on average 7% overhead on training while detecting and correcting all extreme errors. Compared with the state-of-the-art checkpoint/restore approach, ATTNChecker reduces recovery overhead by up to 49×.
The atomic-scale structure of extended defects in GaAs/GaAs 1-x Sb x /GaAs (001) heterostructures has been characterized using aberration-corrected scanning transmission electron microscopy. The defect located at the tensile-strained GaAs(cap)/GaAs 0.34 Sb 0.66 interface had no edge component in the projection plane and is identified as either a dissociated screw dislocation or a partial dislocation dipole. The associated intrinsic stacking fault is bounded by two 30° Shockley partial dislocations of opposite sign. Another defect, located at the compressively-strained GaAs 0.91 Sb 0.09 /GaAs(substrate) interface, is identified as a dissociated 90° dislocation. The associated intrinsic stacking fault is bounded by a 30° Shockley partial dislocation and a partial dislocation with a Burgers vector of either or , where a is the lattice constant. Unpaired atomic columns observed at the cores of the 30° Shockley partial dislocations indicate that both defects belong primarily to the glide set.
Twenty pilots with instrument flight ratings were asked to perform a fault-diagnosis task for which they had relevant domain knowledge. The pilots were asked to think out loud as they requested and interpreted information. Performances were then modeled as the activation and use of a frame system. Cognitive biases, memory distortions and losses, and failures to correctly diagnose the problem were studied in the context of this frame system model.
A general procedure for error detection in complex systems, called the data block capture and analysis monitoring process, is described and analyzed. It is assumed that, in addition to being exposed to potential external fault sources, a complex system will in general always contain embedded hardware and software fault mechanisms which can cause the system to perform incorrect computations and/or produce incorrect output. Thus, in operation, the system continuously moves back and forth between error and no-error states. These external fault sources or internal fault mechanisms are extremely difficult to detect. The data block capture and analysis monitoring process is concerned with detecting deviations from the normal performance of the system, known as errors, which are symptomatic of fault conditions. The process consists of repeatedly recording a fixed amount of data from a set of predetermined observation lines of the system being monitored (i.e., capturing a block of data) and then analyzing the captured block in an attempt to determine whether the system is functioning correctly. The performances of linear, quadratic, and logarithmic data analysis algorithms are rigorously characterized in terms of the probability of correctly detecting an error, the expectation and variance of the number of false alarms per error, and the expectation and variance of the latency in detection of errors. Insight into the nature of the general problem of error detection is obtained.
A 2.3 kW Breadboard Power Processing Unit (BBPPU) was developed as part of the NASA Solar Electric Propulsion Technology Application Readiness (NSTAR) Program. The NSTAR program will deliver an electric propulsion system based on a 30 cm xenon ion thruster to the New Millennium (NM) program for use as the primary propulsion system for the initial NM flight. The final development test for the BBPPU, the Functional Integration Test, was carried out to demonstrate all aspects of BBPPU operation with an Engineering Model Thruster. Test objectives included: (1) demonstration and validation of automated thruster start procedures, (2) demonstration of stable closed loop control of the thruster beam current, (3) successful response and recovery to thruster faults, and (4) successful safing of the system during simulated spacecraft faults. These objectives were met over the specified 80-120 VDC input voltage range and 0.5-2.3 output power capability of the BBPPU. Two minor anomalies were noted in discharge and neutralizer keeper current. These anomalies did not affect the stability of the system and were successfully corrected.
The Mars Microprobe Mission is the second spacecraft developed as part of the New Millennium Program deep space missions. The objective of the Microprobe Project is to demonstrate the applicability of key technologies for future planetary missions by developing two probes for deployment on Mars. The probes are designed with a single stage entry, descent, and landing system and impact the Martian surface at speeds of approximately 200 meters per second. The microprobes are composed of two main sections, a forebody section that penetrates to a depth below the Martian surface of 0.5 to 2 meters, and an aftbody section that remains on the surface. Each probe system consists of a number of advanced technology components developed specifically for this mission. These include a non-erosive aeroshell for entry into. the atmosphere, a set of low temperature batteries to supply probe power, an advanced microcontroller to execute the mission sequence, collect the science data, and react to possible system fault conditions, a telecommunications subsystem implemented on a set of custom integrated circuits, and instruments designed to provide science measurements from above and below the Martian surface. All of the electronic components have been designed and fabricated to withstand the severe impact shock environment and to operate correctly at predicted temperatures below -100 C.
Power systems are subjected to a wide range of disturbances during daily operations. Severe disturbances, such as a loss of a large generator, a three-phase bolted fault on a generator bus, or a loss of a transmission line, can lead to the loss of synchronism of a generator or group of generators. The ability of a power system to maintain synchronism during the few seconds after being subjected to a severe disturbance is known as transient stability. Most of the modern methods of controlling transient stability involve special protection schemes or remedial action schemes. These special protection schemes sense predetermined system conditions and take corrective actions, such as generator tripping or generation re-dispatch, in real time to maintain transient stability. Another method is the use of a real-time feedback control system to modulate the output of an actuator in response to a signal. This paper provides a fundamental evaluation of the use of feedback control strategies to improve transient stability in a power system. An optimal feedback control strategy that modulates the real power injected and absorbed by distributed energy-storage devices is proposed. Its performance is evaluated on a four-machine power system and on a 34-machine reduced-order model of the Western North American Power System. The result shows that the feedback control strategy can increase the critical fault clearing time by 60%, thereby improving the transient stability of the power system.
A system with fault tolerant controls is one that can detect, isolate, and estimate failures and perform necessary control reconfiguration based on this new information. Artificial intelligence (AI) is concerned with semantic processing, and it has evolved to include the topics of expert systems and machine learning. This research represents an attempt to apply AI to fault tolerant controls, hence, the name intelligent fault tolerant control (IFTC). A generic solution to the problem is sought, providing a system based on logic in addition to analytical tools, and offering machine learning capabilities. The advantages are that redundant system specific algorithms are no longer needed, that reasonableness is used to quickly choose the correct control strategy, and that the system can adapt to new situations by learning about its effects on system dynamics.
This paper presents the formal verification of a new protocol for online distributed diagnosis for the SPIDER family of architectures. An instance of the Scalable Processor-Independent Design for Electromagnetic Resilience (SPIDER) architecture consists of a collection of processing elements communicating over a Reliable Optical Bus (ROBUS). The ROBUS is a specialized fault-tolerant device that guarantees Interactive Consistency, Distributed Diagnosis (Group Membership), and Synchronization in the presence of a bounded number of physical faults. Formal verification of the original SPIDER diagnosis protocol provided a detailed understanding that led to the discovery of a significantly more efficient protocol. The original protocol was adapted from the formally verified protocol used in the MAFT architecture. It required O(N) message exchanges per defendant to correctly diagnose failures in a system with N nodes. The new protocol achieves the same diagnostic fidelity, but only requires O(1) exchanges per defendant. This paper presents this new diagnosis protocol and a formal proof of its correctness using PVS.
Accurate and low-latency quantum state discrimination is essential for protocols involving mid-circuit measurement (MCM) and conditional feed-forward. In superconducting quantum systems, conventional readout pipelines transfer measurement data to host processors for post-processing, introducing millisecond-scale delays that far exceed qubit coherence times. To overcome this bottleneck, we present an in-situ machine learning (ML) inference engine implemented on an FPGA for real-time quantum state discrimination. Our design performs inference directly on digitized readout signals with 40 ns latency, supports both qubit and qutrit readout, and enables conditional operations without host-side intervention. This capability is critical for MCM and for feedback-driven protocols such as quantum error correction. We validate the system on superconducting transmon hardware, demonstrating robust discrimination fidelity across multiple qubit and qutrit channels. We further demonstrate conditional qutrit logic driven by FPGA-resident classification, highlighting the potential of low-latency ML-on-FPGA control for NISQ applications and scalable fault-tolerant quantum computing.
The research goals are to create a simulation framework that can accept any combination of models written at the gate or behavioral level. The framework provides the ability to fault simulate and create scenarios of experiments using concurrent simulation. In order to meet these goals we have had to fulfill the following requirements. The ability to accept models written in VHDL, Verilog or the C languages. The ability to propagate faults through any model type. The ability to create experiment scenarios efficiently without generating every possible combination of variables. The ability to accept adversity of fault models beyond the single stuck-at model. Major development has been done to develop a parser that can accept models written in various languages. This work has generated considerable attention from other universities and industry for its flexibility and usefulness. The parser uses LEXX and YACC to parse Verilog and C. We have also utilized our industrial partnership with Alternative System's Inc. to import vhdl into our simulator. For multilevel simulation, we needed to modify the simulator architecture to accept models that contained multiple outputs. This enabled us to accept behavioral components. The next major accomplishment was the addition of "functional fault models". Functional fault models change the behavior of a gate or model. For example, a bridging fault can make an OR gate behave like an AND gate. This has applications beyond fault simulation. This modeling flexibility will make the simulator more useful for doing verification and model comparison. For instance, two or more versions of an ALU can be comparatively simulated in a single execution. The results will show where and how the models differed so that the performance and correctness of the models may be evaluated. A considerable amount of time has been dedicated to validating the simulator performance on larger models provided by industry and other universities.
A defining characteristic of deep moonquakes is their tendency to occur with tidal periodicity, prompting previous studies to infer that they are related to the buildup and release of tidal stress within the Moon. In studies of tidal forcing, a key constraint is the focal mechanism: the fault parameters describing the type of failure moonquakes represent. The quality of the lunar seismic data and the limited source/receiver geometries of the Apollo seismic network prohibit the determination of deep moonquake fault parameters using first-motion polarities, as is typically done in terrestrial seismology. Without being able to resolve tidal stress onto a known failure plane, we can examine only gross qualities of the tidal stress tensor with respect to moonquake occurrence, so we cannot fully address the role of tidal stress in moonquake generation. We will examine the extent to which shear (S) and compression (P) wave amplitude ratios can constrain moonquake fault geometry by determining whether, for a given cluster, there exists a focal mechanism that can produce a radiation pattern consistent with the amplitudes measured by the Apollo instruments. Amplitudes are read in the ray coordinate frame, directly from seismograms for which the P and S arrivals are clearly identifiable on all long-period channels of the four Apollo stations. We apply an empirical station correction to account for site effects and the differences between P- and S-wave attenuation. Instead of focusing on the best fitting solution only, we formulate the inverse problem using a falsification criterion: all source orientations that do not reproduce the observed SV/P ratios within an error margin derived from the uncertainty of amplitude readings are rejected. All others are accepted as possible solutions. The inversion is carried out using an exhaustive grid search on a regular grid with predefined step size, encompassing all possible combinations of strike, dip and slip. To assess the sensitivity of the inversion for the uncertainty of the lunar interior structure, we carry out repeated inversions with different velocity structures. Our data set consist of a total of 106 events from 25 deep moonquake clusters. The largest contribution of 37 events originates from the most active cluster, A001, while other clusters are represented by 1 to 9 events. Since the definition of a cluster implies that all events share the same source orientation, a comparison of the inversion results of all events from one cluster will reduce ambiguities of the inversion. Once we obtain a suite of fault parameters for a given source, we can attempt to further constrain the focal mechanism with refined analyses of tidal stresses and predictions based on synthetic seismograms.
SIFT (Software Implemented Fault Tolerance) is an experimental, fault-tolerant computer system designed to meet the extreme reliability requirements for safety-critical functions in advanced aircraft. Errors are masked by performing a majority voting operation over the results of identical computations, and faulty processors are removed from service by reassigning computations to the nonfaulty processors. This scheme has been implemented in a special architecture using a set of standard Bendix BDX930 processors, augmented by a special asynchronous-broadcast communication interface that provides direct, processor to processor communication among all processors. Fault isolation is accomplished in hardware; all other fault-tolerance functions, together with scheduling and synchronization are implemented exclusively by executive system software. The system reliability is predicted by a Markov model. Mathematical consistency of the system software with respect to the reliability model has been partially verified, using recently developed tools for machine-aided proof of program correctness.
In late fiscal year 2020, the Space Nuclear Propulsion (SNP) project began the process of formulating an investment strategy to support development of the technologies required for a high-power (megawatt-class) nuclear electric propulsion (NEP) system capable of performing human-scale missions. This activity was initiated concurrent with several high-level studies and assessments were either under way or had just concluded. Studies of human-scale Mars missions have been performed several times over the past two decades. One of the most recent studies examined opposition-class human Mars missions to occur in the late 2030s timeframe [1,2]. The mission architecture assumed a hybrid NEP/chem-propelled vehicle that used a high specific impulse (Isp) NEP-system and a liquid oxygen (LOx)-liquid methane high thrust chemical stage (two 110 kN (25 klbf) thrust, 365 s Isp engines) for maneuvers performed to enter and exit gravity wells. Trajectory analyses performed in this study showed that such a mission could be performed with 2-4 MWe directed into the electric propulsion system (operating for 20,000+ hours), with the large range representing different opposition-class Mars mission opportunities and permutations on the trajectory design, concept of operations, and technology choices. In 2020, the NASA Engineering and Safety Center (NESC) performed a study to evaluate the maturity of the different technologies required for nuclear propulsion systems [3]. The executive summary of this report provided the following top-level conclusions: • “The majority of critical technologies for… NEP/Chem… systems are relatively immature” • “TRLs [technology readiness levels] in the literature are often overestimated” • “The majority of critical technologies… for NEP/Chem… systems are at a relatively high level of advancement degree of difficulty (AD2 > 4) for maturation, requiring a dual development approach” • “The proper assessment of baseline TRL and AD2 values and the estimation of requirements and resources required for advancement have been consistent issues for NEP,” • “Non-advocate reviews should occur at the start of a technology program and at all key milestones.” In 2021, the National Academies of Science, Engineering, and Medicine (NASEM) issued a separate report [4] identifying the “primary technical and programmatic challenges, merits, and risks for maturing space nuclear propulsion technologies of interest to a future human Mars exploration mission.” That work contained several important findings, including: • “Developing a MWe-class NEP system for the baseline mission would require increasing power by orders of magnitude relative to NEP system flight- or ground-based technology demonstrations completed to date.” • “Subscale in-space flight testing of NEP systems cannot address many of the risks and potential failure modes associated with the baseline mission NEP system. With sufficient M&S [modeling & simulation] and ground testing, including modular subsystem tests at full scale and power, flight qualification requirements can be met by the cargo missions that will precede the first crewed mission to Mars. Fully integrated ground testing may not be required.” • “As a result of low and intermittent investment over the past several decades, it is unclear if even an aggressive program would be able to develop an NEP system capable of executing the baseline mission in 2039.” These efforts motivated the SNP project to investigate the technologies available for a megawatt-class high power nuclear electric propulsion system. That system is illustrated schematically in Figure 1 and is comprised of five separate top-level critical technology elements (CTEs). 1. Nuclear Reactor – Thermal power source for the system, utilizing high-assay low enriched uranium (HALEU) as the nuclear fuel. Reactor radiation shielding is also included in this CTE. 2. Power Conversion – Operates as a thermodynamic cycle, accepting nuclear reactor thermal power as an input and converting it to mechanical power. 3. Power Management and Distribution (PMAD) – Accepts as an input mechanical power from the power conversion system, which is used to generate electrical power. The PMAD system also distributes the generated electrical power to all other parts of the spacecraft, including the high-power EP system. The PMAD system may also perform duties such as isolation, fault detection, and power transformation/rectification for different spacecraft systems, including the thrusters. 4. Electric Propulsion (EP) – Accepts as an input electrical power, which is used to accelerate a propellant to high speeds to produce thrust. This system includes the power processing unit (PPU), which converts the power it receives to the correct current and voltage required by the thrusters, and the propellant storage and feed systems, which contain and meter the flow of propellant to the thrusters. 5. Thermal Management (Radiators/Heat Rejection) – The cold side of the thermodynamic power conversion cycle, accepts thermal power from the power conversion system and radiatively rejects that heat to space. In this paper, we describe the SNP project formulation and investment strategy that aims to accomplish the research and development required to advance the technology readiness for each CTE. The strategy relies heavily upon experimental testing supported by modeling and simulation to yield realistic assessments of the technologies, which in turn will be used to inform future NEP system-level design decisions and any potential technology downselects.