Search NASA⌕ Search

SEARCH · Search NASA

Results for “Probabilistic risk assessment”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 415 records · Page 23

Strategic Analysis Overview

NASA s Constellation Program employs a strategic analysis methodology in providing an integrated analysis capability of Lunar exploration scenarios and to support strategic decision-making regarding those scenarios. The strategic analysis methodology integrates the assessment of the major contributors to strategic objective satisfaction performance, affordability, and risk and captures the linkages and feedbacks between all three components. Strategic analysis supports strategic decision making by senior management through comparable analysis of alternative strategies, provision of a consistent set of high level value metrics, and the enabling of cost-benefit analysis. The tools developed to implement the strategic analysis methodology are not element design and sizing tools. Rather, these models evaluate strategic performance using predefined elements, imported into a library from expert-driven design/sizing tools or expert analysis. Specific components of the strategic analysis tool set include scenario definition, requirements generation, mission manifesting, scenario lifecycle costing, crew time analysis, objective satisfaction benefit, risk analysis, and probabilistic evaluation. Results from all components of strategic analysis are evaluated a set of pre-defined figures of merit (FOMs). These FOMs capture the high-level strategic characteristics of all scenarios and facilitate direct comparison of options. The strategic analysis methodology that is described in this paper has previously been applied to the Space Shuttle and International Space Station Programs and is now being used to support the development of the baseline Constellation Program lunar architecture. This paper will present an overview of the strategic analysis methodology and will present sample results from the application of the strategic analysis methodology to the Constellation Program lunar architecture.

Cirillo, William M.↗

Trades Between Opposition and Conjunction Class Trajectories for Early Human Missions to Mars

Candidate human missions to Mars, including NASA's Design Reference Architecture 5.0, have focused on conjunction-class missions with long crewed durations and minimum energy trajectories to reduce total propellant requirements and total launch mass. However, in order to progressively reduce risk and gain experience in interplanetary mission operations, it may be desirable that initial human missions to Mars, whether to the surface or to Mars orbit, have shorter total crewed durations and minimal stay times at the destination. Opposition-class missions require larger total energy requirements relative to conjunction-class missions but offer the potential for much shorter mission durations, potentially reducing risk and overall systems performance requirements. This paper will present a detailed comparison of conjunction-class and opposition-class human missions to Mars vicinity with a focus on how such missions could be integrated into the initial phases of a Mars exploration campaign. The paper will present the results of a trade study that integrates trajectory/propellant analysis, element design, logistics and sparing analysis, and risk assessment to produce a comprehensive comparison of opposition and conjunction exploration mission constructs. Included in the trade study is an assessment of the risk to the crew and the trade offs between the mission duration and element, logistics, and spares mass. The analysis of the mission trade space was conducted using four simulation and analysis tools developed by NASA. Trajectory analyses for Mars destination missions were conducted using VISITOR (Versatile ImpulSive Interplanetary Trajectory OptimizeR), an in-house tool developed by NASA Langley Research Center. Architecture elements were evaluated using EXploration Architecture Model for IN-space and Earth-to-orbit (EXAMINE), a parametric modeling tool that generates exploration architectures through an integrated systems model. Logistics analysis was conducted using NASA's Human Exploration Logistics Model (HELM), and sparing allocation predictions were generated via the Exploration Maintainability Analysis Tool (EMAT), which is a probabilistic simulation engine that evaluates trades in spacecraft reliability and sparing requirements based on spacecraft system maintainability and reparability.

Mattfeld, Bryan↗

Flood Hazard Assessment from Storm Tides, Rain and Sea Level Rise for a Tidal River Estuary

Cities and towns along the tidal Hudson River are highly vulnerable to flooding through the combination of storm tides and high streamflows, compounded by sea level rise. Here a three-dimensional hydrodynamic model, validated by comparing peak water levels for 76 historical storms, is applied in a probabilistic flood hazard assessment. In simulations, the model merges streamflows and storm tides from tropical cyclones (TCs), offshore extratropical cyclones (ETCs) and inland "wet extratropical" cyclones (WETCs). The climatology of possible ETC and WETC storm events is represented by historical events (1931-2013), and simulations include gauged streamflows and inferred ungauged streamflows (based on watershed area) for the Hudson River and its tributaries. The TC climatology is created using a stochastic statistical model to represent a wider range of storms than is contained in the historical record. TC streamflow hydrographs are simulated for tributaries spaced along the Hudson, modeled as a function of TC attributes (storm track, sea surface temperature, maximum wind speed) using a statistical Bayesian approach. Results show WETCs are important to flood risk in the upper tidal river (e.g., Albany, New York), ETCs are important in the estuary (e.g., New York City) and lower tidal river, and TCs are important at all locations due to their potential for both high surge and extreme rainfall. The raising of floods by sea level rise is shown to be reduced by approximately 30-60 percent at Albany due to the dominance of streamflow for flood risk. This can be explained with simple channel flow dynamics, in which increased depth throughout the river reduces frictional resistance, thereby reducing the water level slope and the upriver water level.

Tidal river↗

Supportability Concepts for Crewed Deep Space Exploration

Supportability—defined as the set of system characteristics that influence the logistics and support required to enable safe and effective operations—will be a much larger driver of mass, risk, and crew time for future human space exploration due to the more challenging mission context. For Mars, systems must operate in a logistically isolated environment for much longer durations than previous missions, which results in a higher probability of system failure and therefore an increased need for maintenance or contingency options. Mars missions also lack access to quick aborts, which increases the consequences of an unrecoverable system failure. Together, this higher likelihood and consequence of failure results in an increase in supportability-related risk. Supportability analysis is an important part of systems development that helps designers better understand the impacts of system and mission decisions on risk, mass, and crew time. The real-world processes that drive maintenance requirements and other supportability-related characteristics are probabilistic, and therefore they require different conceptual approaches and models than are used for more deterministic aspects of space systems. This paper provides an overview of supportability analysis, addresses key concepts, and provides examples of how supportability analysis can be incorporated into system development. Specifically, system supportability involves stochastic processes, and therefore must be evaluated using probabilistic models. These models can be used to perform sensitivity analysis even if system characteristics are not yet fully defined. Failure rates cannot be measured directly, but tests provide valuable data that can help refine those estimates. Human spaceflight architectures are complex, and exhibit coupled behavior that should be examined with integrated systems analysis that includes an assessment of supportability.

Supportability↗

Supportability Concepts for Crewed Deep Space Exploration

Supportability—defined as the set of system characteristics that influence the logistics and support required to enable safe and effective operations—will be a much larger driver of mass, risk, and crew time for future human space exploration due to the more challenging mission context. For Mars, systems must operate in a logistically isolated environment for much longer durations than previous missions, which results in a higher probability of system failure and therefore an increased need for maintenance or contingency options. Mars missions also lack access to quick aborts, which increases the consequences of an unrecoverable system failure. Together, this higher likelihood and consequence of failure results in an increase in supportability-related risk. Supportability analysis is an important part of systems development that helps designers better understand the impacts of system and mission decisions on risk, mass, and crew time. The real-world processes that drive maintenance requirements and other supportability-related characteristics are probabilistic, and therefore they require different conceptual approaches and models than are used for more deterministic aspects of space systems. This paper provides an overview of supportability analysis, addresses key concepts, and provides examples of how supportability analysis can be incorporated into system development. Specifically, system supportability involves stochastic processes, and therefore must be evaluated using probabilistic models. These models can be used to perform sensitivity analysis even if system characteristics are not yet fully defined. Failure rates cannot be measured directly, but tests provide valuable data that can help refine those estimates. Human spaceflight architectures are complex, and exhibit coupled behavior that should be examined with integrated systems analysis that includes an assessment of supportability.

Supportability↗

Fundamental space radiobiology

The unique feature of the space radiation environment is the dominance of high-energy charged particles (HZE or high LET radiation) emitted by the Sun and galactic sources, or trapped in the Van Allen radiation belts. These charged particles present a significant hazard to space flight crews, and accelerator-based experiments are underway to quantify the health risks due to unavoidable radiation exposure. There are three principal properties of charged particles that distinguish them from conventional radiation, i.e. gamma rays and x-rays. First, they have a defined range in matter rather than an exponential absorption profile. Second, they undergo nuclear reactions to produce secondary particles. Third, and most important, they deposit their energy along well-defined linear paths or tracks rather than diffuse fields. The structured energy deposition pattern interacts on multiple scales with the biological structures of DNA, cells and tissues to produce correlated patterns of damage that evade repair systems. Traditional concepts of dose and its associated normalization parameter, RBE (relative biological effectiveness), break down under experimental scrutiny, and probabilistic models of risk based on the number of particle traversals per cell may be more appropriate. Unique patterns of DNA damage, gene expression, mobilization of repair proteins, activation of cytokines and remodeling of cellular microenvironment are observed following exposure to high LET radiation. At low levels of exposure the communication of bioactive substances from irradiated to unirradiated "bystander" cells can amplify the damage and cause a significant deviation from linearity in dose vs. response relations. Under some circumstances, there is even a multigenerational delay in the expression of radiation-induced genetic damage (genomic instability) which is not strictly dose dependent. These issues and the experimental evidence derived from ground based experiments at particle accelerators are presented along with speculation about how modified inertial conditions might perturb homeostatic responses to radiation to further complicate risk assessment for space flight.

NASA Discipline Radiation Health↗

NASA's New Approach for Evaluating Risk Reduction Due to Space Shuttle Upgrades

As part of NASA's intensive effort to incorporate quantitative risk assessment (QRA) tools in the Agency's decision-making process concerning Space Shuttle risk, NASA has developed a powerful risk assessment tool called the Quantitative Risk Assessment System (QRAS). The QRAS is a tool designed to estimate Space Shuttle risk and evaluate Space Shuttle upgrades. This paper presents an overview of the QRAS with focus on its application for evaluating the risk reduction due to proposed Space Shuttle upgrades. The application includes a case study from the Space Shuttle main engine (SSME). The QRAS overview section of the paper includes the QRAS development process, the technical approach to model development, the QRA quantification methods and techniques, and observations concerning the complex modeling involved in QRAS. The application section of the paper describes a practical case study using QRAS models for evaluating critical Space Shuttle Program upgrades, specifically a proposed SSME nozzle upgrade. This paper presents the method for evaluating the proposed upgrade by comparing the current nozzle (old design with well-established probabilistic models) to the channel wall nozzle (new design at the preliminary design level).

Safie, Fayssal M.↗

Medical Optimization Network for Space Telemedicine Resources

INTRODUCTION: Long-duration missions beyond low Earth orbit introduce new constraints to the space medical system. Beyond the traditional limitations in mass, power, and volume, consideration must be given to other factors such as the inability to evacuate to Earth, communication delays, and limitations in clinical skillsets. As NASA develops the medical system for an exploration mission, it must have an ability to evaluate the trade space of what resources will be most important. The Medical Optimization Network for Space Telemedicine Resources (MONSTR) was developed over the past year for this reason, and is now a system for managing data pertaining to medical resources and their relative importance when addressing medical conditions. METHODS: The MONSTR web application with a Microsoft SQL database backend was developed and made accessible to Tableau v9.3 for analysis and visualization. The database was initially populated with a list of medical conditions of concern for an exploration mission taken from the Integrated Medical Model (IMM), a probabilistic model designed to quantify in-flight medical risk. A team of physicians working within the Exploration Medical Capability Element of NASA's Human Research Program compiled a list diagnostic and treatment medical resources required to address best- and worst-case scenarios of each medical condition using a terrestrial standard of care and entered this data into the system. This list included both tangible resources (e.g. medical equipment, medications) and intangible resources (e.g. clinical skills required to perform a procedure). The physician team then assigned criticality values to each instance of a resource, representing the importance of that resource to diagnosing or treating its associated condition(s). Medical condition probabilities of occurrence during a Mars mission were pulled from the IMM and imported into the MONSTR database for use within a resource criticality-weighting algorithm. DISCUSSION: The MONSTR tool is a novel approach to assess the relative value of individual resources needed for the diagnosis and treatment of medical conditions. Future work will add resources for prevention and long term care of these conditions. Once data collection is complete, MONSTR will provide the operational and research communities at NASA with information to support informed decisions regarding areas of research investment, future crew training, and medical supplies manifested as part of any exploration medical system.

Rubin, D.↗

Utilizing Earth Observations to Model Probable Coastal Wetland Extent, Sea-Level Rise Inundation Risk, and Assess Impacts on Historic Hawaiian Lands

Climate induced sea-level rise poses a risk to coastal areas on the Island of Hawai’i, and many of the island’s historic cultural lands are in danger of becoming overtaken by wetlands or inundation. In partnership with the County of Hawai’i, State of Hawai’i Department of Land and Natural Resources, and Arizona State University, NASA DEVELOP mapped wetland extent and short-term sea-level rise inundation risk. We utilized Earth observations over a 10-year span (2013 – 2022) that included the NASA MEaSUREs Gridded Sea Surface Height Anomalies and MEaSUREs Group for High Resolution Sea Surface Temperature datasets, United States Geological Survey (USGS) Hawaii Digital Elevation Models (DEM), and in situ tidal gauge data. Flood risk index values were acquired for 5 known Hawai’i flood events between 2019 – 2021 from the Global Flood Mapper tool on Google Earth Engine. We used a random forest model to predict short-term sea-level rise inundation risk along the entire coast of Hawai’i. Current wetland extents and probabilistic locations of new wetlands were modeled with the most recently available data from PlanetScope Surface Reflectance optical imagery (2022), USGS 3D Elevation Program (3DEP) 10m DEM (2020), temperature and precipitation data from the Hawai’i Climate Atlas, and soils data from the Hawai’i Soil Atlas (2014) using the Wetland Intrinsic Potential tool. Results indicated locations that had the highest probability of wetland creation. The end products aimed to help the partners prioritize efforts to meeting regulation requirements for wetlands protection, evaluate the inundation risk to historical features, and support decision-making for their Shoreline Setback and Climate Adaption plans.

Lisa Tanh↗

A Probabilistic Tool that Aids Logistics Engineers in the Establishment of High Confidence Repair Need-Dates at the NASA Shuttle Logistics Depot

The NASA Shuttle Logistics Depot (NSLD) is tasked with the responsibility for repair and manufacture of Line Replaceable Unit (LRU) hardware and components to support the Space Shuttle Orbiter. Due to shrinking budgets, cost effective repair of LRU's becomes a primary objective. To achieve this objective, is imperative that resources be assigned to those LRU's which have the greatest expectation of being needed as a spare. Forecasting the times at which spares are needed requires consideration of many significant factors including: failure rate, flight rate, spares availability, and desired level of support, among others. This paper summarizes the results of the research and development work that has been accomplished in producing an automated tool that assists in the assignment of effective repair start-times for LRU's at the NSLD. This system, called the Repair Start-time Assessment System (RSAS), uses probabilistic modeling technology to calculate a need date for a repair that considers the current repair pipeline status, as well as, serviceable spares and projections of future demands. The output from the system is a date for beginning the repair that has significantly greater confidence (in the sense that a desired probability of support is ensured) than times produced using other techniques. Since an important output of RSAS is the longest repair turn-around time that will ensure a desired probability of support, RSAS has the potential for being applied to operations at any repair depot where spares are on-hand and repair start-times are of interest. In addition, RSAS incorporates tenants of Just-in-Time (JIT) techniques in that the latest repair start-time (i.e., the latest time at which repair resources must be committed) may be calculated for every failed unit This could reduce the spares inventory for certain items, without significantly increasing the risk of unsatisfied demand.

Bullington, J. V.↗

The Challenger disaster was caused by an Apollo decision

NASA’s view of risk changed between early Apollo and the Space Shuttle. Risk was a known serious problem at the beginning of Apollo and the risk estimates were disturbingly high. To avoid public concern, risk analysis was discontinued. Risk analysis was avoided in Shuttle, leading to an unnecessarily risky design. The immediate cause of the Challenger tragedy was the mistaken decision to launch in cold weather. The fundamental cause was the high risk of the Shuttle design. Before Challenger, management thought and testified that the probability of an accident was 1 in 100,000. After Challenger, Probabilistic Risk Analysis (PRA) found a roughly 1 in 100 chance of a Shuttle failure. The recent Orion design uses the safer Apollo approach, with a hardened capsule, launch abort escape, and the crew placed above the rocket tanks and engines. During Apollo it was estimated that, “assuming all elements from propulsion to rendezvous and life support were done as well or better than ever before, that 30 astronauts would be lost before 3 were returned safely to the Earth.” The chance of astronaut survival was only 10%. After the Apollo 1 tragedy, the awareness of risk led to an intense focus on achieving safety. “The only possible explanation for the astonishing success – no losses in space and on time – was that every participant at every level in every area far exceeded the norm of human capabilities.” During Apollo, a NASA PRA found that the chance of success was “less than 5 percent.” The NASA Administrator felt that “the numbers could do irreparable harm,” and discontinued numerical risk assessment.

Harry W Jones↗

The Challenger tragedy was caused by an Apollo mistake, terminating risk analysis

NASA’s view of risk changed between early Apollo and the Space Shuttle. Risk was a known serious problem at the beginning of Apollo and the risk estimates were disturbingly high. To avoid public concern, risk analysis was discontinued. Risk analysis was avoided in Shuttle, leading to an unnecessarily risky design. The immediate cause of the Challenger tragedy was the mistaken decision to launch in cold weather. The fundamental cause was the high risk of the Shuttle design. Before Challenger, management thought and testified that the probability of an accident was 1 in 100,000. After Challenger, Probabilistic Risk Analysis (PRA) found a roughly 1 in 100 chance of a Shuttle failure. The recent Orion design uses the safer Apollo approach, with a hardened capsule, launch abort escape, and the crew placed above the rocket tanks and engines. During Apollo it was estimated that, “assuming all elements from propulsion to rendezvous and life support were done as well or better than ever before, that 30 astronauts would be lost before 3 were returned safely to the Earth.” The chance of astronaut survival was only 10%. After the Apollo 1 tragedy, the awareness of risk led to an intense focus on achieving safety. “The only possible explanation for the astonishing success – no losses in space and on time – was that every participant at every level in every area far exceeded the norm of human capabilities.” During Apollo, a NASA PRA found that the chance of success was “less than 5 percent.” The NASA Administrator felt that “the numbers could do irreparable harm,” and discontinued numerical risk assessment. This led to decreasing understanding of risk. The head of Apollo reliability and safety decided, “Statistics don’t count for anything,” and that risk is reduced by “attention taken in design.” The great and initially unexpected success of Apollo appeared to validate the neglect of PRA. Continuing to neglect the mathematical estimation of risk led Shuttle into a high risk design that produced tragic results. The initial design of the Shuttle emphasized increasing capability and reducing cost without analysis or even mention of risk. A retired NASA official stated, “some NASA people began to confuse desire with reality. … One result was to assess risk in terms of what was thought acceptable without regard for verifying the assessment. … Note that under such circumstances real risk management is shut out.” Not computing risk led to removing launch abort, removing crew escape, selecting less reliable Solid Rocket Boosters, placing the crew compartment next to the rocket boosters, and accepting more stressed shielding tile designs. Accepting these specific risks directly caused the shuttle disasters. The Challenger tragedy is frequently taught as a case of management failure. The focus is on the Challenger launch decision hours before, which is a dramatic example of bad management. However, the true cause of the Challenger disaster occurred decades earlier in the Apollo era. When the easily predictable failures occurred, failure investigations focused on how they might have been avoided. The Shuttle was cancelled after the space station was completed because of its high risk. The ultimate cause of the Shuttle tragedies was the choice by the Apollo-era NASA administrator to avoid a negative public reaction to realistic risk analysis.

Harry W. Jones↗

The Integrated Medical Model: A Probabilistic Simulation Model Predicting In-Flight Medical Risks

The Integrated Medical Model (IMM) is a probabilistic model that uses simulation to predict mission medical risk. Given a specific mission and crew scenario, medical events are simulated using Monte Carlo methodology to provide estimates of resource utilization, probability of evacuation, probability of loss of crew, and the amount of mission time lost due to illness. Mission and crew scenarios are defined by mission length, extravehicular activity (EVA) schedule, and crew characteristics including: sex, coronary artery calcium score, contacts, dental crowns, history of abdominal surgery, and EVA eligibility. The Integrated Medical Evidence Database (iMED) houses the model inputs for one hundred medical conditions using in-flight, analog, and terrestrial medical data. Inputs include incidence, event durations, resource utilization, and crew functional impairment. Severity of conditions is addressed by defining statistical distributions on the dichotomized best and worst-case scenarios for each condition. The outcome distributions for conditions are bounded by the treatment extremes of the fully treated scenario in which all required resources are available and the untreated scenario in which no required resources are available. Upon occurrence of a simulated medical event, treatment availability is assessed, and outcomes are generated depending on the status of the affected crewmember at the time of onset, including any pre-existing functional impairments or ongoing treatment of concurrent conditions. The main IMM outcomes, including probability of evacuation and loss of crew life, time lost due to medical events, and resource utilization, are useful in informing mission planning decisions. To date, the IMM has been used to assess mission-specific risks with and without certain crewmember characteristics, to determine the impact of eliminating certain resources from the mission medical kit, and to design medical kits that maximally benefit crew health while meeting mass and volume constraints.

Risk Analysis↗

The Integrated Medical Model: A Probabilistic Simulation Model for Predicting In-Flight Medical Risks

The Integrated Medical Model (IMM) is a probabilistic model that uses simulation to predict mission medical risk. Given a specific mission and crew scenario, medical events are simulated using Monte Carlo methodology to provide estimates of resource utilization, probability of evacuation, probability of loss of crew, and the amount of mission time lost due to illness. Mission and crew scenarios are defined by mission length, extravehicular activity (EVA) schedule, and crew characteristics including: sex, coronary artery calcium score, contacts, dental crowns, history of abdominal surgery, and EVA eligibility. The Integrated Medical Evidence Database (iMED) houses the model inputs for one hundred medical conditions using in-flight, analog, and terrestrial medical data. Inputs include incidence, event durations, resource utilization, and crew functional impairment. Severity of conditions is addressed by defining statistical distributions on the dichotomized best and worst-case scenarios for each condition. The outcome distributions for conditions are bounded by the treatment extremes of the fully treated scenario in which all required resources are available and the untreated scenario in which no required resources are available. Upon occurrence of a simulated medical event, treatment availability is assessed, and outcomes are generated depending on the status of the affected crewmember at the time of onset, including any pre-existing functional impairments or ongoing treatment of concurrent conditions. The main IMM outcomes, including probability of evacuation and loss of crew life, time lost due to medical events, and resource utilization, are useful in informing mission planning decisions. To date, the IMM has been used to assess mission-specific risks with and without certain crewmember characteristics, to determine the impact of eliminating certain resources from the mission medical kit, and to design medical kits that maximally benefit crew health while meeting mass and volume constraints.

Risk Analysis↗

The Containment Assurance Risk Framework of the Mars Sample Return Program

The Mars Sample Return campaign aims at bringing rock and atmospheric samples from Mars to Earth through a series of robotic missions. These missions would collect the samples being cached and deposited on Martian soil by the Perseverance rover, place them in a container, and launch them into Martian orbit for subsequent capture by an orbiter that would bring them back. Given there exists a non-zero probability that the samples contain biological material, precautions are being taken to design systems that would break the chain of contact between Mars and Earth. These include techniques such as sterilization of Martian particles, redundant containment vessels, and a robust reentry capsule capable of accurate landings without a parachute. Requirements exist that the probability of containment not assured of Martian-contaminated material into Earth’s biosphere be less than one in a million. To demonstrate compliance with this strict requirement, a statistical framework was developed to assess the likelihood of containment loss during each sample return phase and make a statement about the total combined mission probability of containment not assured. The work presented here describes this framework, which considers failure modes or fault conditions that can initiate failure sequences ultimately leading to containment not assured. Reliability estimates are generated from databases, design heritage, component specifications, or expert opinion in the form of probability density functions or point estimates and provided as inputs to the mathematical models that simulate the different failure sequences. The probabilistic outputs are then combined following the logic of several fault trees to compute the ultimate probability of containment not assured. Given the multidisciplinary nature of the problem and the different types of mathematical models used, the statistical tools needed for analysis are required to be computationally efficient. While standard Monte Carlo approaches are used for fast models, a multi-fidelity approach to rare event probabilities is proposed for expensive models. In this paradigm, inexpensive low-fidelity models are developed for computational acceleration purposes while the expensive high-fidelity model is kept in the loop to retain accuracy in the results. This work presents an example of end-to-end application of this framework highlighting the computational benefits of a multi-fidelity approach.

Giuseppe Cataldo↗

Medical Optimization Network for Space Telemedicine Resources

INTRODUCTION: Long-duration missions beyond low Earth orbit introduce new constraints to the space medical system such as the inability to evacuate to Earth, communication delays, and limitations in clinical skillsets. NASA recognizes the need to improve capabilities for autonomous care on such missions. As the medical system is developed, it is important to have an ability to evaluate the trade space of what resources will be most important. The Medical Optimization Network for Space Telemedicine Resources was developed for this reason, and is now a system to gauge the relative importance of medical resources in addressing medical conditions. METHODS: A list of medical conditions of potential concern for an exploration mission was referenced from the Integrated Medical Model, a probabilistic model designed to quantify in-flight medical risk. The diagnostic and treatment modalities required to address best and worst-case scenarios of each medical condition, at the terrestrial standard of care, were entered into a database. This list included tangible assets (e.g. medications) and intangible assets (e.g. clinical skills to perform a procedure). A team of physicians working within the Exploration Medical Capability Element of NASA's Human Research Program ranked each of the items listed according to its criticality. Data was then obtained from the IMM for the probability of occurrence of the medical conditions, including a breakdown of best case and worst case, during a Mars reference mission. The probability of occurrence information and criticality for each resource were taken into account during analytics performed using Tableau software. RESULTS: A database and weighting system to evaluate all the diagnostic and treatment modalities was created by combining the probability of condition occurrence data with the criticalities assigned by the physician team. DISCUSSION: Exploration Medical Capabilities research at NASA is focused on providing a medical system to support crew medical needs in the context of a Mars mission. MONSTR is a novel approach to performing a quantitative risk analysis that will assess the relative value of individual resources needed for the diagnosis and treatment of various medical conditions. It will provide the operational and research communities at NASA with information to support informed decisions regarding areas of research investment, future crew training, and medical supplies manifested as part of the exploration medical system.

Shah, R. V.↗

High-Fidelity Multi-Rotor Unmanned Aircraft System Simulation Development for Trajectory Prediction Under Off-Nominal Flight Dynamics

The NASA Unmanned Aircraft System (UAS) Traffic Management (UTM) project is conducting research to enable civilian low-altitude airspace and UAS operations. A goal of this project is to develop probabilistic methods to quantify risk during failures and off nominal flight conditions. An important part of this effort is the reliable prediction of feasible trajectories during off-nominal events such as control failure, atmospheric upsets, or navigation anomalies that can cause large deviations from the intended flight path or extreme vehicle upsets beyond the normal flight envelope. Few examples of high-fidelity modeling and prediction of off-nominal behavior for small UAS (sUAS) vehicles exist, and modeling requirements for accurately predicting flight dynamics for out-of-envelope or failure conditions are essentially undefined. In addition, the broad range of sUAS aircraft configurations already being fielded presents a significant modeling challenge, as these vehicles are often very different from one another and are likely to possess dramatically different flight dynamics and resultant trajectories and may require different modeling approaches to capture off-nominal behavior. NASA has undertaken an extensive research effort to define sUAS flight dynamics modeling requirements and develop preliminary high fidelity six degree-of-freedom (6-DOF) simulations capable of more closely predicting off-nominal flight dynamics and trajectories. This research has included a literature review of existing sUAS modeling and simulation work as well as development of experimental testing methods to measure and model key components of propulsion, airframe and control characteristics. The ultimate objective of these efforts is to develop tools to support UTM risk analyses and for the real-time prediction of off-nominal trajectories for use in the UTM Risk Assessment Framework (URAF). This paper focuses on modeling and simulation efforts for a generic quad-rotor configuration typical of many commercial vehicles in use today. An overview of relevant off-nominal multi-rotor behaviors will be presented to define modeling goals and to identify the prediction capability lacking in simplified models of multi-rotor performance. A description of recent NASA wind tunnel testing of multi-rotor propulsion and airframe components will be presented illustrating important experimental and data acquisition methods, and a description of preliminary propulsion and airframe models will be presented. Lastly, examples of predicted off-nominal flight dynamics and trajectories from the simulation will be presented.

Foster, John V.↗

Trends in Human Spaceflight: Failure Tolerance, High Reliability and Correlated Failure History

In a half century of human spaceflight, NASA has continuously refined agency safety and reliability requirements in response to mission demands, critical failures, and technology development. Early spacecraft, including Mercury, Gemini and Apollo vehicles, were highly reliant on dissimilar redundancy and demonstrated test margins. Later programs, such as the reusable Space Transportation System (STS) and International Space Station (ISS), introduced probabilistic studies and isolated two-failure tolerance to improve robustness at the expense of added complexity. More recently, the Orion Multi-Program Crew Vehicle (MPCV) program adopted universal single-failure tolerance with two categorical exceptions; Zero-Failure Tolerant (0FT) and Design for Minimum Risk (DFMR) hardware. Failure tolerance variances are defined and managed in accordance with agency human-rating requirements, and require concurrence from program Technical Authorities (TA) as well as the MPCV Safety and Mission Assurance Safety and Engineering Review Panel (MSERP). To understand and reaffirm standards applied to Apollo, Space Shuttle and Orion vehicles, Orion and Deep Space Gateway Safety and Mission Assurance (S&MA) representatives conducted accelerated research to compare unique safety and reliability criteria against ground and flight anomalies, based on information contained in post-mission reports and the Problem Reporting and Corrective Action (PRACA) database. In some cases, high-profile failures and narrow escapes have reinforced decisions to maintain or adapt safety requirements. In others, empirical trends have highlighted the need for vigilance and innovative safety guidelines. Given the inability to achieve absolute compliance with evolving safety and reliability requirements, the team conducted a targeted review of DFMR and 0FT propulsion elements within the framework of changing system design, inspection, materials and process developments to formulate conclusions on technological maturity, failure density, and net changes in safety risk. Based on the aggregate performance of high-reliability and failure-tolerant systems, the authors have attempted to establish best practices and guidelines to inform future program decisions. On a somewhat cautionary note, this study is not intended to direct a universal set of requirements for future missions based on prior lessons learned. Spacecraft safety is a multi-variable problem, and attempts to mitigate past failures will not guarantee future success. However, this assessment offers a retrospective review of policy changes, implementation and effectiveness. In the future, NASA, European Space Agency (ESA) and industry partners may benefit from a more robust correlation between requirements and performance, as space-faring nations work toward more challenging, complex and long-duration commercial and deep-space ventures.

Green, Carrie↗