Search NASA⌕ Search

SEARCH · Search NASA

Results for “Adapter Safety”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 505 records · Page 28

Real-Time Early Warning Techniques

Contemporary approaches to aerospace vehicle system monitoring rely heavily on thresholds that represent a compromise between providing warning early enough to avert a mishap while simultaneously minimizing false alarms. While this reliance on thresholds has been in place for decades and has permeated both cockpits and control rooms, we often find it insufficient when retrospectively analyzing data from an accident. To modernize and enhance flight test safety, we introduce new methods of monitoring for anomalous patterns of interaction rather than for thresholds exceedance. For systems with a well characterized baseline we show how the Inductive Monitoring System (IMS), utilized by NASA in the aftermath of the Columbia accident, might be implemented in real-time to provide earlier warning than currently employed techniques. For systems without such a baseline, we introduce new developments in statistical methods relating to critical slowing down, first applied in medicine and physics, which show promise for adaptation to flight test. Finally, the familiar resource constrained environment leads to a reliance on increased instrumentation that is challenging the limits of the current one-sensor, one-indicator threshold paradigm. Existing methods thus fail to accurately reflect the true complexity of a vehicle rich with interdependent interacting systems. We highlight these concepts in a brief summary of the 2001 Air Transat Flight 236 deadstick landing in the Azores. We then suggest control room and cockpit modifications to better display the information gleaned using these novel monitoring methods.

Javorsek, Dan↗

Enhancing Flight Test Safety with Real-Time Early Warning Techniques

Contemporary approaches to aerospace vehicle system monitoring rely heavily on thresholds that represent a compromise between providing warning early enough to avert a mishap while simultaneously minimizing false alarms. While this reliance on thresholds has been in place for decades and has permeated both cockpits and control rooms, we often find it insufficient when retrospectively analyzing data from an accident. To modernize and enhance flight test safety, we introduce new methods of monitoring for anomalous patterns of interaction rather than for thresholds exceedance. For systems with a well characterized baseline we show how the Inductive Monitoring System (IMS), utilized by NASA in the aftermath of the Columbia accident, might be implemented in real-time to provide earlier warning than currently employed techniques. For systems without such a baseline, we introduce new developments in statistical methods relating to critical slowing down, first applied in medicine and physics, which show promise for adaptation to flight test. Finally, the familiar resource constrained environment leads to a reliance on increased instrumentation that is challenging the limits of the current "one-sensor, one-indicator" threshold paradigm. Existing methods thus fail to accurately reflect the true complexity of a vehicle rich with interdependent interacting systems. We highlight these concepts in a brief summary of the 2001 Air Transat Flight 236 deadstick landing in the Azores. We then suggest control room and cockpit modifications to better display the information gleaned using these novel monitoring methods.

Javorsek, Daniel, II↗

ISRU-Based Robotic Construction Technologies For Lunar And Martian Infrastructures

Economically viable and reliable building systems and tool sets are being sought, examined and tested for extraterrestrial infrastructure buildup. This project utilizes a unique architecture weaving the robotic building construction technology with designs for assisting rapid buildup of initial operational capability Lunar and Martian bases. The project intends to develop and test methodologies to construct certain crucial infrastructure elements in order to evaluate the merits, limitations and feasibility of adapting and using such technologies for extraterrestrial application. High priority infrastructure elements suggested by our NASA advisors to be considered include landing pads and aprons, roads, blast walls and shade walls, thermal and micrometeorite protection shields and dust-free platforms utilizing the well-known insitu resource utilization (ISRU) strategy. Current extraterrestrial settlement buildup philosophy holds that in order to minimize the materials needed to be flown in, at great transportation costs, strategies that maximize the use of locally available resources must be adopted. Tools and heavy equipment flown as cargo from Earth are proposed to build required infrastructure to support future missions and settlements on the Moon and Mars. Several unique systems including the Lunar Electric Rover, the unpressurized Chariot rover, the versatile light-weight crane and Tri-Athlete cargo transporter as well as the habitat module mockups and a new generation of spacesuits are undergoing coordinated tests at NASAs D-RATS. This project intends to draw up a detailed synergetic plan to utilize these maturing systems coupled with modern robotic fabrication technologies based primarily on 3D Printing, tailored for swift and reliable Lunar and Martian infrastructure development. This project also intends to increase astronaut safety, improve buildup performance, ameliorate dust interference and concerns, and reduce time-to-commission, all in an economic manner. The goal stated in our Phase I proposal was a high fidelity demonstration at D-RATS to be conducted at the conclusion of the Phase II study. In the course of the Phase I study, however, it became clear that such demonstration was neither possible (due to the maximum Phase II budget limitation and the cost of NASA assets and related overhead expenses to support such demonstrations), nor necessary (due to NASA's low TRL expectation of Phase II results). These important facts were revealed to us only after interacting with the NIAC administrators and meetings with potential future partners at JPL and KSC. Accordingly, it was decided by the team that in order to make best use of resources we should investigate novel directions in the adaptation of our fabrication technologies by using in-house laboratories and to produce truly useful technologies and data, and then proceed with high fidelity demonstration at a later opportunity when sufficient resources become available. Furthermore, we have recognized that in addition to our building scale 3D printing technology called Contour Crafting, variations of some of our other fabrication technologies under development are suitable for construction of infrastructure elements such as regolith based ceramic tiles and hence we have decided to include some related preliminary research in this Phase II proposal.

Extraterrestrial↗

Newton trust-region methods with primary variable switching for simulating high temperature multiphase porous media flow

Coupling multiphase flow with energy transport due to high temperature heat sources introduces significant new challenges since boiling and condensation processes can lead to dry-out conditions with subsequent re-wetting. The transition between two-phase and single-phase behavior can require changes to the primary dependent variables adding discontinuities as well as extending constitutive nonlinear relations to extreme physical conditions. Practical simulations of large-scale engineered domains lead to Jacobian systems with a very large number of unknowns that must be solved efficiently using iterative methods in parallel on high-performance computers. Performance assessment of potential nuclear repositories, carbon sequestration sites and geothermal reservoirs can require numerous Monte-Carlo simulations to explore uncertainty in material properties, boundary conditions, and failure scenarios. Due to the numerical challenges, standard NR iteration may not converge over the range of required simulations and require more sophisticated optimization method like trust-region. In this study, we use the open-source simulator PFLOTRAN for the important practical problem of the safety assessment of future nuclear waste repositories in the U.S. DOE geologic disposal safety assessment Framework. The simulator applies the PETSc parallel framework and a backward Euler, finite volume discretization. We demonstrate failure of the conventional NR method and the success of trust-region modifications to Newton’s method for a series of test problems of increasing complexity. Trust-region methods essentially modify the Newton step size and direction under some circumstances where the standard NR iteration can cause the solution to diverge or oscillate. Furthermore, we show how the Newton Trust-Region method can be adapted for Primary Variable Switching (PVS) when the multiphase state changes due to boiling or condensation. The simulations with high-temperature heat sources which led to extreme nonlinear processes with many state changes in the domain did not converge with NR, but they do complete successfully with the trust-region methods modified for PVS. This implementation effectively decreased weeks of simulation time needing manual adjustments to complete a simulation down to a day. Finally, we show the strong scalability of the methods on a single node and multiple nodes in an HPC cluster.

54 ENVIRONMENTAL SCIENCES↗

Radio Frequency Field Programable Gate Array Implementation of Reflectometry Cable Monitoring

This document describes the development of a field programable gate array (FPGA) radio frequency system on a chip (RF SoC) adaptation and evaluation of the single-board device to perform both Frequency Domain Reflectometry (FDR) and Spread Spectrum Time Domain Reflectometry (SSTDR) for offline and online cable testing. The work builds on and leverages the work of Pacific Northwest National Laboratory (PNNL) in airport millimeter wave technology by using the same development hardware employed in that program. The work is performed under sponsorship from the U.S. Department of Energy (DOE) Light Water Reactor Sustainability (LWRS) program and the task objective is to confirm and demonstrate feasibility to adapt FPGA technology for a cost-effective multiplexed single-board electronic module to perform cable tests that are equivalent to commercial and laboratory test instruments for FDR and SSTDR cable tests. The developed 2-channel (extendable to 7 channels) system was compared to dedicated and proven test instruments and shown to produce equivalent results on a range of cables and with a range of damage types. The FPGA reflectometry test board is one of several technologies that could facilitate implementation of online monitoring of safety critical cable systems.

42 ENGINEERING↗

Dynamic Structural Fault Detection and Identification

Aircraft structures are designed to guarantee safety of flight in some required operational envelope. When the aircraft becomes structurally impaired, safety of flight may not be guaranteed within that previously safe operational envelope. In this case the safe operational envelope must be redefined in-flight and a means to prevent excursion from this new envelope must be implemented. A specific structural failure mode that may result in a reduced safe operating envelope, the exceedance of which could lead to catastrophic structural failure of the aircraft, will be addressed. The goal of the DFEAP program is the detection of this failure mode coupled with flight controls adaptation to limit critical loads in the damaged aircraft structure. The DFEAP program is working with an F/A-18 aircraft model. The composite wing skins are bonded to metallic spars in the wing substructure. Over time, it is possible that this bonding can deteriorate due to fatigue. In this case, the ability of the wing spar to transfer loading between the wing skins is reduced. This failure mode can translate to a reduced allowable compressive strain on the wing skin and could lead to catastrophic wing buckling if load limiting of the wing structure is not applied. The DFEAP program will make use of a simplified wing strain model for the healthy aircraft. The outputs of this model will be compared in real-time to onboard strain measurements at several locations on the aircraft wing. A damage condition is declared at a given location when the strain measurements differ sufficiently from the strain model. Parameter identification of the damaged structure wing strain parameters will be employed to provide load limiting control adaptation for the aircraft. This paper will discuss the simplified strain models used in the implementation and their interaction with the strain sensor measurements. Also discussed will be the damage detection and identification schemes employed and the means by which the damaged aircraft parameters will be used to provide load limiting that keeps the aircraft within the safe operational envelope.

Smith, Timothy↗

Wipes, Coatings, and Patches for Detecting Hydrazines

Three color-indicating devices have been conceived as simple, rapid, inexpensive means of detecting hazardous liquid and gaseous substances in settings in which safety is of paramount concern and it would be too time-consuming or otherwise impractical to perform detection by use of such instruments as mass spectrometers. More specifically, these devices are designed for detecting hypergolic fuels (in particular, hydrazines) and hypergolic oxidizers in spacecraft settings, where occasional leakage of these substances in liquid or vapor form occurs and it is imperative to take early corrective action to minimize adverse health effects. With suitable redesign, including reformulation of their color indicator chemicals, these devices could be adapted to detection of other hazardous substances in terrestrial settings (e.g., industrial and military ones). One of the devices is a pad of a commercially available absorbent material doped with a color indicator. The absorbent material is made from 70 percent polyester and 30 percent nylon and can absorb about eight times its own weight of liquid. The color indicator is a mixture of conventional pH color indicator chemicals. Hydrazine and monomethyl hydrazine, which are basic, cause the color indicator to turn green. In the original intended application, the pad is wiped on a space suit that is suspected of having been exposed to leaking monomethyl hydrazine during a space walk, before the wearer returns to the interior of the spacecraft. If the wiped surface is contaminated with hydrazine, the pad turns green. In addition, the pad absorbs hydrazine from the wiped surface, thereby reducing or eliminating the hazard. Used pads, including ones that show contamination by hydrazine, can be stored in a sealed plastic bag for subsequent disposal. The second device, which has been proposed but not yet developed, would comprise a color indicator material in the form of either a coating on a space suit (or other protective garment) or a coating on a sheet that could be easily attached to and detached from the protective garment. The coating material would be a hydrogel doped with a suitable pH indicator. The hydrogel would also serve to maintain a level of moisture needed to support the chemical reaction mentioned in the next sentence. In addition to changing color to indicate the presence of any hypergolic fuel (which is basic) or hypergolic oxidizer (which is acidic) that might splash on the space suit, the pH indicator would also react with the hypergolic fuel or oxidizer and thereby bind it. The third device is a color dosimeter for detecting hydrazine liquid or vapor coming from microscopic leaks. This device is designed to satisfy several requirements specific to its original intended use in the auxiliary power unit of the space shuttle. These requirements include stability under vacuum, stability at moderate temperature, fast and irreversible change in color upon exposure to hydrazine, and visibility of the color change through polyimide tape.

Young, Rebecca↗

A High-Performance Computing GNSS-aware Path Planning Algorithm for Safe Urban Flight Operations

The emergence and development of advanced technologies and vehicle types have created a growing demand for new forms of flight operations. These new and increasingly complex operational paradigms, such as Advanced and Urban Air Mobility (AAM/UAM), present regulatory authorities and the aviation community with several design-and-implementation challenges – particularly for highly autonomous vehicles. An overarching and daunting task is to develop protocols that can integrate these operations without compromising safety or disrupting traditional airspace operations. A shift toward a more predictive, autonomous, risk mitigation capability becomes critical to meet this challenge. This paper proposes and evaluates a computationally-efficient path planning approach to perform pre-flight planning and autonomous in-flight re-routing to minimize exposures to selected hazards. In our evaluation, hazards associated with degraded and missing critical GPS navigation data are considered. In this paper, we first present a high-performance computing path planning approach based on an adapted Bellman-Ford algorithm, developed in the CUDA programming language. Using the adapted path planning algorithm, we test this algorithm when encountering issues with GPS quality, and deliver an implementation that can produce flight paths that minimize exposure to risks, while maintaining a low computational burden. In our evaluation, the computation of periodic and aperiodic path updates are evaluated, prioritizing specific events as triggers for updates, based on changes to satellite availability. These critical events can lead to significant exposure to navigational hazards if not dealt with correctly.

GNSS↗

A High-Performance Computing GNSS-aware Path Planning Algorithm for Safe Urban Flight Operations

The emergence and development of advanced technologies and vehicle types have created a growing demand for new forms of flight operations. These new and increasingly complex operational paradigms, such as Advanced and Urban Air Mobility (AAM/UAM), present regulatory authorities and the aviation community with several design-and-implementation challenges – particularly for highly autonomous vehicles. An overarching and daunting task is to develop protocols that can integrate these operations without compromising safety or disrupting traditional airspace operations. A shift toward a more predictive, autonomous, risk mitigation capability becomes critical to meet this challenge. This paper proposes and evaluates a computationally-efficient path planning approach to perform pre-flight planning and autonomous in-flight re-routing to minimize exposures to selected hazards. In our evaluation, hazards associated with degraded and missing critical GPS navigation data are considered. In this paper, we first present a high-performance computing path planning approach based on an adapted Bellman-Ford algorithm, developed in the CUDA programming language. Using the adapted path planning algorithm, we test this algorithm when encountering issues with GPS quality, and deliver an implementation that can produce flight paths that minimize exposure to risks, while maintaining a low computational burden. In our evaluation, the computation of periodic and aperiodic path updates are evaluated, prioritizing specific events as triggers for updates, based on changes to satellite availability. These critical events can lead to significant exposure to navigational hazards if not dealt with correctly.

GNSS↗

Room-Temperature Pseudo-Solid-State Iron Fluoride Conversion Battery with High Ionic Conductivity

Li-metal batteries (LMBs) employing conversion cathode materials (e.g., FeF 3 ) are a promising way to prepare inexpensive, environmentally friendly batteries with high energy density. Pseudo-solid-state ionogel separators harness the energy density and safety advantages of solid-state LMBs, while alleviating key drawbacks (e.g., poor ionic conductivity and high interfacial resistance). In this work, a pseudo-solid-state conversion battery (Li-FeF 3 ) is presented that achieves stable, high rate (1.0 mA cm –2 ) cycling at room temperature. The batteries described herein contain gel-infiltrated FeF 3 cathodes prepared by exchanging the ionic liquid in a polymer ionogel with a localized high-concentration electrolyte (LHCE). The LHCE gel merges the benefits of a flexible separator (e.g., adaptation to conversion-related volume changes) with the excellent chemical stability and high ionic conductivity (~2 mS cm –1 at 25 °C) of an LHCE. The latter property is in contrast to previous solid-state iron fluoride batteries, where poor ionic conductivities necessitated elevated temperatures to realize practical power levels. Importantly, the stable, room-temperature Li-FeF 3 cycling performance obtained with the LHCE gel at high current densities paves the way for exploring a range of architectures including flexible, three-dimensional, and custom shape batteries.

25 ENERGY STORAGE↗

Application of Cyber-Informed Engineering for Protecting BESS

This white paper synthesizes an array of crucial grid services provided by BESS technology, assesses its architecture and communications, and presents a case study for analysis against the principles introduced by Cyber-Informed Engineering (CIE). Furthermore, in walking through the analysis, this paper presents a framework to evaluate risks and solutions when considering BESS components. Asset owners and buyers could perform this analysis to assess their BESS product implementations, alternative inverter-based resources (IBR), and energy management systems (EMS). Battery systems fulfill various roles contingent on the unique market demands and the specific challenges presented by regional grid infrastructures. These roles also vary due to the differing utility models for ownership and operation, which are adapted to meet regional and local capabilities and requirements. Concerns have been raised regarding the potential for adversaries to exploit knowledge of battery operational patterns to orchestrate decisive attacks. However, the security of operational data for these systems may not be the primary vulnerability, as much of this information is already well-understood within the community. Applying a modest degree of subject matter expertise can often yield valuable predictions regarding how a battery will respond under certain conditions, such as grid emergencies, high or low-temperature days, Public Safety Power Shutoff (PSPS) events, and outages. The operational characteristics of batteries are well-documented, and their capabilities, including the risks associated with misoperation and the resulting consequences, are published and understood within the industry. CIE practices represent the next step in gaining functional assurance and providing an acceptable level of risk, regardless of whether a battery vendor can support a trusted and validated supply chain. While this issue has exacerbated supply chain challenges, it is not an isolated condition. This foreign supply route is the primary source of BESS for the U.S. market. Significant efforts are underway through the Bipartisan Infrastructure Law (BIL) to change that. Still, strategic short-term operational mitigations are needed to ensure the security of our operational technology (OT) systems, which are enhanced by instilling trust and are separate from vendors implementing CIE principles.

25 ENERGY STORAGE↗

ANTS: Applying A New Paradigm for Lunar and Planetary Exploration

ANTS (Autonomous Nano- Technology Swarm), a mission architecture consisting of a large (1000 member) swarm of picoclass (1 kg) totally autonomous spacecraft with both adaptable and evolvable heuristic systems, is being developed as a NASA advanced mission concept, and is here examined as a paradigm for lunar surface exploration. As the capacity and complexity of hardware and software, demands for bandwidth, and the sophistication of goals for lunar and planetary exploration have increased, greater cost constraints have led to fewer resources and thus, the need to operate spacecraft with less frequent human contact. At present, autonomous operation of spacecraft systems allows great capability of spacecraft to 'safe' themselves and survive when conditions threaten spacecraft safety. To further develop spacecraft capability, NASA is at the forefront of development of new mission architectures which involve the use of Intelligent Software Agents (ISAs), performing experiments in space and on the ground to advance deliberative and collaborative autonomous control techniques. Selected missions in current planning stages require small groups of spacecraft weighing tens, instead of hundreds, of kilograms to cooperate at a tactical level to select and schedule measurements to be made by appropriate instruments onboard. Such missions will be characterizing rapidly unfolding real-time events on a routine basis. The next level of development, which we are considering here, is in the use of autonomous systems at the strategic level, to explore the remote terranes, potentially involving large surveys or detailed reconnaissance.

Clark, P. E.↗

Image Analysis via Fuzzy-Reasoning Approach: Prototype Applications at NASA

A set of imaging techniques based on Fuzzy Reasoning (FR) approach was built for NASA at Kennedy Space Center (KSC) to perform complex real-time visual-related safety prototype tasks, such as detection and tracking of moving Foreign Objects Debris (FOD) during the NASA Space Shuttle liftoff and visual anomaly detection on slidewires used in the emergency egress system for Space Shuttle at the launch pad. The system has also proved its prospective in enhancing X-ray images used to screen hard-covered items leading to a better visualization. The system capability was used as well during the imaging analysis of the Space Shuttle Columbia accident. These FR-based imaging techniques include novel proprietary adaptive image segmentation, image edge extraction, and image enhancement. Probabilistic Neural Network (PNN) scheme available from NeuroShell(TM) Classifier and optimized via Genetic Algorithm (GA) was also used along with this set of novel imaging techniques to add powerful learning and image classification capabilities. Prototype applications built using these techniques have received NASA Space Awards, including a Board Action Award, and are currently being filed for patents by NASA; they are being offered for commercialization through the Research Triangle Institute (RTI), an internationally recognized corporation in scientific research and technology development. Companies from different fields, including security, medical, text digitalization, and aerospace, are currently in the process of licensing these technologies from NASA.

Dominguez, Jesus A.↗

The Rapid Response Radiation Survey (R3S) Mission Using the HISat Conformal Satellite Architecture

The Rapid Response Radiation Survey (R3S) experiment, designed as a quick turnaround mission to make radiation measurements in LEO, will fly as a hosted payload in partnership with NovaWurks using their Hyper-integrated Satlet (HiSat) architecture. The need for the mission arises as the Nowcast of Atmospheric Ionization Radiation for Aviation Safety (NAIRAS) model moves from a research effort into an operational radiation assessment tool. The data collected by R3S, in addition to the complementary data from a NASA Langley Research Center (LaRC) atmospheric balloon mission entitled Radiation Dosimetry Experiment (RaDX), will validate exposure prediction capabilities of NAIRAS. This paper discusses the development of the R3S experiment as made possible by use of the HiSat architecture. The system design and operational modes of the experiment are described, as well as the experiment interfaces to the HiSat satellite via the user defined adapter (UDA) provided by NovaWurks. This paper outlines the steps taken by the project to execute the R3S mission in the 4 months of design, build, and test. Finally, description of the engineering process is provided, including the use of facilitated rapid/concurrent engineering sessions, the associated documentation, and the review process employed.

Miller, Nathanael↗

Business Intelligence Modeling in Launch Operations

This technology project is to advance an integrated Planning and Management Simulation Model for evaluation of risks, costs, and reliability of launch systems from Earth to Orbit for Space Exploration. The approach builds on research done in the NASA ARC/KSC developed Virtual Test Bed (VTB) to integrate architectural, operations process, and mission simulations for the purpose of evaluating enterprise level strategies to reduce cost, improve systems operability, and reduce mission risks. The objectives are to understand the interdependency of architecture and process on recurring launch cost of operations, provide management a tool for assessing systems safety and dependability versus cost, and leverage lessons learned and empirical models from Shuttle and International Space Station to validate models applied to Exploration. The systems-of-systems concept is built to balance the conflicting objectives of safety, reliability, and process strategy in order to achieve long term sustainability. A planning and analysis test bed is needed for evaluation of enterprise level options and strategies for transit and launch systems as well as surface and orbital systems. This environment can also support agency simulation .based acquisition process objectives. The technology development approach is based on the collaborative effort set forth in the VTB's integrating operations. process models, systems and environment models, and cost models as a comprehensive disciplined enterprise analysis environment. Significant emphasis is being placed on adapting root cause from existing Shuttle operations to exploration. Technical challenges include cost model validation, integration of parametric models with discrete event process and systems simulations. and large-scale simulation integration. The enterprise architecture is required for coherent integration of systems models. It will also require a plan for evolution over the life of the program. The proposed technology will produce long-term benefits in support of the NASA objectives for simulation based acquisition, will improve the ability to assess architectural options verses safety/risk for future exploration systems, and will facilitate incorporation of operability as a systems design consideration, reducing overall life cycle cost for future systems. The future of business intelligence of space exploration will focus on the intelligent system-of-systems real-time enterprise. In present business intelligence, a number of technologies that are most relevant to space exploration are experiencing the greatest change. Emerging patterns of set of processes rather than organizational units leading to end-to-end automation is becoming a major objective of enterprise information technology. The cost element is a leading factor of future exploration systems.

Bardina, Jorge E.↗

Integrated Vehicle Health Management (IVHM) for Aerospace Systems

To achieve NASA's ambitious Integrated Space Transportation Program objectives, aerospace systems will implement a variety of new concept in health management. System level integration of IVHM technologies for real-time control and system maintenance will have significant impact on system safety and lifecycle costs. IVHM technologies will enhance the safety and success of complex missions despite component failures, degraded performance, operator errors, and environment uncertainty. IVHM also has the potential to reduce, or even eliminate many of the costly inspections and operations activities required by current and future aerospace systems. This presentation will describe the array of NASA programs participating in the development of IVHM technologies for NASA missions. Future vehicle systems will use models of the system, its environment, and other intelligent agents with which they may interact. IVHM will be incorporated into future mission planners, reasoning engines, and adaptive control systems that can recommend or execute commands enabling the system to respond intelligently in real time. In the past, software errors and/or faulty sensors have been identified as significant contributors to mission failures. This presentation will also address the development and utilization of highly dependable sohare and sensor technologies, which are key components to ensure the reliability of IVHM systems.

Baroth, Edmund C.↗

Going Beyond Reliability to Robustness and Resilience in Space Life Support Systems

The words reliability, robustness, and resilience are often used interchangeably to describe tough and dependable systems but the distinctions between them suggest how to design more serviceable space systems. Reliability is simply the quality of consistently performing well. A system that dependably meets its design requirements in the specified environment is reliable. The designers may not consider themselves responsible for failures under unanticipated conditions. Robustness is the capability of performing without failure under a wide range of conditions, which can go beyond the expected range to include possible off-nominal conditions. Resilience is the ability to recover from or adapt to unanticipated damaging events, such as failures, accidents, external disruptions, and repurposing. Such changes can invalidate the usual operating assumptions and cause system failure. Reliability, robustness, and resilience describe dependable performance under increasingly difficult conditions, first the specified environment, then a wider possible environment, and finally unanticipated damaging conditions. These three qualities are increasingly desirable and increasingly difficult to achieve. Engineering for resilience would design systems that can ignore or repair failures, survive accidents, and recover from unanticipated disruptions. Increasing the resilience of space systems would greatly increase space crew safety. Improving reliability and robustness requires dealing with known problems, but improving resilience requires implementing a general approach to reducing the impact of unknown future events. The need for robustness and resilience has been stated for decades but little has been done. Systems designers often assume that they understand everything they need to know. The potential failures caused by changes, failures, accidents, unknown environments, and unknown unknowns can be ignored. Such overconfidence can lead to neglect of reliability, robustness, and resilience.

Harry W. Jones↗

Going Beyond Reliability to Robustness and Resilience in Space Life Support Systems

The words reliability, robustness, and resilience are often used interchangeably to describe tough and dependable systems but the distinctions between them suggest how to design more serviceable space systems. Reliability is simply the quality of consistently performing well. A system that dependably meets its design requirements in the specified environment is reliable. The designers may not consider themselves responsible for failures under unanticipated conditions. Robustness is the capability of performing without failure under a wide range of conditions, which can go beyond the expected range to include possible off-nominal conditions. Resilience is the ability to recover from or adapt to unanticipated damaging events, such as failures, accidents, external disruptions, and repurposing. Such changes can invalidate the usual operating assumptions and cause system failure. Reliability, robustness, and resilience describe dependable performance under increasingly difficult conditions, first the specified environment, then a wider possible environment, and finally unanticipated damaging conditions. These three qualities are increasingly desirable and increasingly difficult to achieve. Engineering for resilience would design systems that can ignore or repair failures, survive accidents, and recover from unanticipated disruptions. Increasing the resilience of space systems would greatly increase space crew safety. Improving reliability and robustness requires dealing with known problems, but improving resilience requires implementing a general approach to reducing the impact of unknown future events. The need for robustness and resilience has been stated for decades but little has been done. Systems designers often assume that they understand everything they need to know. The potential failures caused by changes, failures, accidents, unknown environments, and unknown unknowns can be ignored. Such overconfidence can lead to neglect of reliability, robustness, and resilience.

Harry W. Jones↗