SEARCH · Search NASA

Results for “APPROPRIATION”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 523 records · Page 29

All sources NASA NTRS DOE OSTI

NASA NTRS2004

Extraterrestrial Hemorrhage Control: Terrestrial Developments in Technique, Technology, and Philosophy with Applicability to Traumatic Hemorrhage in Space

Managing injury and illness during long duration space flight limits efforts to explore beyond low earths orbit. Traumatic injury may be expected to occur in space and is a frequent cause of preventable deaths, often related to uncontrolled or ongoing hemorrhage (H). Such bleeding causes 40% of terrestrial injury mortality. Current guidelines emphasize early control of H compared to intravenous infusions. Recent advances in surgical and critical care may be applicable to trauma care in space, with appropriate considerations of the extreme logistical and personnel limitations. Methods: Recent developments in technique, resuscitation fluids, hemoglobin (Hb) substitutes, hemostatic agents, interventional angiography, damage control principles, and concepts related to suspended animation were reviewed. Results: H associated with instability frequently requires definitive intervention. Direct pressure should be applied to all compressible bleeding, but novel approaches are required for intracavitary noncompressible bleeding. Intravenous hemostatic agents such as recombinant Factor VII may facilitate hemostasis especially when combined with a controlled hypotension approach. Both open and laparoscopic techniques could be used in weightlessness, but require technical expertise not likely to be available. Specific rehearsed invasive techniques such as laparotomy with packing, or arterial catherterization with with robotic intravascular embolization might be considered . Hemodynamic support, thermal manipulation, or pharmacologic induction of a state of metabolic down regulation for whole body preservation may be appropriate. Hypertonic saline, with or without dextran, may temporize vascular support and decrease reperfusion injury, with less mass than other solutions. Hb substitutes have other theoretical advantages. Conclusions: Terrestrial developments suggest potential novel strategies to control H in space, but will required a coordinated program of evaluation and training to evaluate.

Kirkpatrick, Andrew↗

NASA NTRS2011

Concept for Sustained Plant Production on ISS Using VEGGIE Capillary Mat Rooting System

Plant growth in microgravity presents unique challenges associated with maintaining appropriate conditions for seed germination, seedling establishment, maturation and harvest. They include maintaining appropriate soil moisture content, nutrient balance, atmospheric mixing and containment. Sustained production imposes additional challenges of harvesting, replanting, and safety. The VEGGIE is a deployable (collapsible) plant growth chamber developed as part of a NASA SBIR Phase II by Orbitec, Madison, WI. The intent of VEGGIE is to provide a low-resource system to produce fresh vegetables for the crew on long duration missions. The VEGGIE uses and LED array for lighting, an expandable bellows for containment, and a capillary matting system for nutrient and water delivery. The project evaluated a number of approaches to achieve sustained production, and repeated plantings, using the capillary rooting system. A number of different root media, seed containment, and nutrient delivery systems were evaluated and effects on seed germination and growth were evaluated. A number of issues limiting sustained production, such as accumulation of nutrients, uniform water, elevated vapor pressure deficit, and media containment were identified. A concept using pre-planted rooting packs shown to effectively address a number of those issues and is a promising approach for future development as a planting system for microgravity conditions.

Stutte, Gary W.↗

NASA NTRS2011

Single-Event Gate Rupture in Power MOSFETs: A New Radiation Hardness Assurance Approach

Almost every space mission uses vertical power metal-semiconductor-oxide field-effect transistors (MOSFETs) in its power-supply circuitry. These devices can fail catastrophically due to single-event gate rupture (SEGR) when exposed to energetic heavy ions. To reduce SEGR failure risk, the off-state operating voltages of the devices are derated based upon radiation tests at heavy-ion accelerator facilities. Testing is very expensive. Even so, data from these tests provide only a limited guide to on-orbit performance. In this work, a device simulation-based method is developed to measure the response to strikes from heavy ions unavailable at accelerator facilities but posing potential risk on orbit. This work is the first to show that the present derating factor, which was established from non-radiation reliability concerns, is appropriate to reduce on-orbit SEGR failure risk when applied to data acquired from ions with appropriate penetration range. A second important outcome of this study is the demonstration of the capability and usefulness of this simulation technique for augmenting SEGR data from accelerator beam facilities. The mechanisms of SEGR are two-fold: the gate oxide is weakened by the passage of the ion through it, and the charge ionized along the ion track in the silicon transiently increases the oxide electric field. Most hardness assurance methodologies consider the latter mechanism only. This work demonstrates through experiment and simulation that the gate oxide response should not be neglected. In addition, the premise that the temporary weakening of the oxide due to the ion interaction with it, as opposed to due to the transient oxide field generated from within the silicon, is validated. Based upon these findings, a new approach to radiation hardness assurance for SEGR in power MOSFETs is defined to reduce SEGR risk in space flight projects. Finally, the potential impact of accumulated dose over the course of a space mission on SEGR susceptibility is explored. SEGR evaluation of gamma-irradiated power MOSFETs suggests a non-significant SEGR susceptibility enhancement due to accumulated dose from gamma rays. During SEGR testing, an unexpected enhanced dose effect from heavy-ion irradiation was detected. We demonstrate that this effect could be due to direct ionization by two or more ions at the same channel location. The probability on-orbit for such an occurrence is near-zero given the low heavy-ion fluence over a typical mission lifetime, and did not affect SEGR susceptibility. The results of this work can be used to bound the risk of SEGR in power MOSFETs considered for insertion into spacecraft and instruments.

Lauenstein, Jean-Marie↗

NASA NTRS2011

X-Band Acquisition Aid Software

The X-band Acquisition Aid (AAP) software is a low-cost acquisition aid for the Deep Space Network (DSN) antennas, and is used while acquiring a spacecraft shortly after it has launched. When enabled, the acquisition aid provides corrections to the antenna-predicted trajectory of the spacecraft to compensate for the variations that occur during the actual launch. The AAP software also provides the corrections to the antenna-predicted trajectory to the navigation team that uses the corrections to refine their model of the spacecraft in order to produce improved antenna-predicted trajectories for each spacecraft that passes over each complex. The software provides an automated Acquisition Aid receiver calibration, and provides graphical displays to the operator and remote viewers via an Ethernet connection. It has a Web server, and the remote workstations use the Firefox browser to view the displays. At any given time, only one operator can control any particular display in order to avoid conflicting commands from more than one control point. The configuration and control is accomplished solely via the graphical displays. The operator does not have to remember any commands. Only a few configuration parameters need to be changed, and can be saved to the appropriate spacecraft-dependent configuration file on the AAP s hard disk. AAP automates the calibration sequence by first commanding the antenna to the correct position, starting the receiver calibration sequence, and then providing the operator with the option of accepting or rejecting the new calibration parameters. If accepted, the new parameters are stored in the appropriate spacecraft-dependent configuration file. The calibration can be performed on the Sun, greatly expanding the window of opportunity for calibration. The spacecraft traditionally used for calibration is in view typically twice per day, and only for about ten minutes each pass.

Britcliffe, Michael J.↗

NASA NTRS2011

Microbiological Lessons Learned from the Space Shuttle

After 30 years of being the centerpiece of NASA s human spacecraft, the Space Shuttle will retire. This highly successful program provided many valuable lessons for the International Space Station (ISS) and future spacecraft. Major microbiological risks to crewmembers include food, water, air, surfaces, payloads, animals, other crewmembers, and ground support personnel. Adverse effects of microorganisms are varied and can jeopardize crew health and safety, spacecraft systems, and mission objectives. Engineering practices and operational procedures can minimize the negative effects of microorganisms. To minimize problems associated with microorganisms, appropriate steps must begin in the design phase of new spacecraft or space habitats. Spacecraft design must include requirements to control accumulation of water including humidity, leaks, and condensate on surfaces. Materials used in habitable volumes must not contribute to microbial growth. Use of appropriate materials and the implementation of robust housekeeping that utilizes periodic cleaning and disinfection will prevent high levels of microbial growth on surfaces. Air filtration can ensure low levels of bioaerosols and particulates in the breathing air. The use of physical and chemical steps to disinfect drinking water coupled with filtration can provide safe drinking water. Thorough preflight examination of flight crews, consumables, and the environment can greatly reduce pathogens in spacecraft. The advances in knowledge of living and working onboard the Space Shuttle formed the foundation for environmental microbiology requirements and operations for the International Space Station (ISS) and future spacecraft. Research conducted during the Space Shuttle Program resulted in an improved understanding of the effects of spaceflight on human physiology, microbial properties, and specifically the host-microbe interactions. Host-microbe interactions are substantially affected by spaceflight. Astronaut immune functions were found to be altered. Selected microorganisms were found to become more virulent during spaceflight. The increased knowledge gained on the Space Shuttle resulted in further studies of the host-microbe interactions on the ISS to determine if countermeasures were necessary. Lessons learned from the Space Shuttle Program were integrated into the ISS resulting in the safest space habitat to date.

Pierson, Duane L.↗

NASA NTRS2011

Use of Virtual Reality for Space Flight

Virtual environments offer unique training opportunities, particularly for training astronauts and preadapting them to the novel sensory conditions of microgravity. Two unresolved human factors issues in virtual reality (VR) systems are: 1) potential "cybersickness", and 2) maladaptive sensorimotor performance following exposure to VR systems. Interestingly, these aftereffects are often quite similar to adaptive sensorimotor responses observed in astronauts during and/or following space flight. Active exploratory behavior in a new environment, with resulting feedback and the formation of new associations between sensory inputs and response outputs, promotes appropriate perception and motor control in the new environment. Thus, people adapt to consistent, sustained alterations of sensory input such as those produced by microgravity. Our research examining the effects of repeated exposures to a full field of view dome VR system showed that motion sickness and initial decrements in eye movement and postural control were greatly diminished following three exposures. These results suggest that repeated transitions between VR and the normal environment preflight might be a useful countermeasure for neurosensory and sensorimotor effects of space flight. The range of VR applications is enormous, extending from ground-based VR training for extravehicular activities at NASA, to medical and educational uses. It seems reasonable to suggest that other space related uses of VR should be investigated. For example, 1) use of head-mounted VR on orbit to rehearse/practice upcoming operational activities, and 2) ground-based VR training for emergency egress procedures. We propose that by combining VR designed for operational activities preflight, along with an appropriate schedule to facilitate sensorimotor adaptation and improve spatial orientation would potentially accomplish two important goals for astronauts and cosmonauts, preflight sensorimotor adaption and enhanced operational training at the same time. Such efforts could support both improved health and performance on orbit and improved operational training in the most efficient manner.

Harm, Deborah↗

NASA NTRS2006

3D X-Ray Luggage-Screening System

A three-dimensional (3D) x-ray luggage- screening system has been proposed to reduce the fatigue experienced by human inspectors and increase their ability to detect weapons and other contraband. The system and variants thereof could supplant thousands of xray scanners now in use at hundreds of airports in the United States and other countries. The device would be applicable to any security checkpoint application where current two-dimensional scanners are in use. A conventional x-ray luggage scanner generates a single two-dimensional (2D) image that conveys no depth information. Therefore, a human inspector must scrutinize the image in an effort to understand ambiguous-appearing objects as they pass by at high speed on a conveyor belt. Such a high level of concentration can induce fatigue, causing the inspector to reduce concentration and vigilance. In addition, because of the lack of depth information, contraband objects could be made more difficult to detect by positioning them near other objects so as to create x-ray images that confuse inspectors. The proposed system would make it unnecessary for a human inspector to interpret 2D images, which show objects at different depths as superimposed. Instead, the system would take advantage of the natural human ability to infer 3D information from stereographic or stereoscopic images. The inspector would be able to perceive two objects at different depths, in a more nearly natural manner, as distinct 3D objects lying at different depths. Hence, the inspector could recognize objects with greater accuracy and less effort. The major components of the proposed system would be similar to those of x-ray luggage scanners now in use. As in a conventional x-ray scanner, there would be an x-ray source. Unlike in a conventional scanner, there would be two x-ray image sensors, denoted the left and right sensors, located at positions along the conveyor that are upstream and downstream, respectively (see figure). X-ray illumination may be provided by a single source or by two sources. The position of the conveyor would be detected to provide a means of matching the appropriate left- and right-eye images of an item under inspection. The appropriate right- and left-eye images of an item would be displayed simultaneously to the right and left eyes, respectively, of the human inspector, using commercially available stereo display screens. The human operator could adjust viewing parameters for maximum viewing comfort. The stereographic images thus generated would differ from true stereoscopic images by small distortions that are characteristic of radiographic images in general, but these distortions would not diminish the value of the images for identifying distinct objects at different depths.

Fernandez, Kenneth↗

NASA NTRS2011

Implementation of Enhanced Propulsion Control Modes for Emergency Flight Operation

Aircraft engines can be effective actuators to help pilots avert or recover from emergency situations. Emergency control modes are being developed to enhance the engines performance to increase the probability of recovery under these circumstances. This paper discusses a proposed implementation of an architecture that requests emergency propulsion control modes, allowing the engines to deliver additional performance in emergency situations while still ensuring a specified safety level. In order to determine the appropriate level of engine performance enhancement, information regarding the current emergency scenario (including severity) and current engine health must be known. This enables the engine to operate beyond its nominal range while minimizing overall risk to the aircraft. In this architecture, the flight controller is responsible for determining the severity of the event and the level of engine risk that is acceptable, while the engine controller is responsible for delivering the desired performance within the specified risk range. A control mode selector specifies an appropriate situation-specific enhanced mode, which the engine controller then implements. The enhanced control modes described in this paper provide additional engine thrust or response capabilities through the modification of gains, limits, and the control algorithm, but increase the risk of engine failure. The modifications made to the engine controller to enable the use of the enhanced control modes are described, as are the interaction between the various subsystems and importantly, the interaction between the flight controller/pilot and the propulsion control system. Simulation results demonstrate how the system responds to requests for enhanced operation and the corresponding increase in performance.

Csank, Jeffrey T.↗

NASA NTRS2011

Towards a Standard for Provenance and Context for Preservation of Data for Earth System Science

Long-term data sets with data from many missions are needed to study trends and validate model results that are typical in Earth System Science research. Data and derived products originate from multiple missions (spaceborne, airborne and/or in situ) and from multiple organizations. During the missions as well as well past their termination, it is essential to preserve the data and products to support future studies. Key aspects of preservation are: preserving bits and ensuring data are uncorrupted, preserving understandability with appropriate documentation, and preserving reproducibility of science with appropriate documentation and other artifacts. Computer technology provides adequate standards to ensure that, with proper engineering, bits are preserved as hardware evolves. However, to ensure understandability and reproducibility, it is essential to plan ahead to preserve all the relevant data and information. There are currently no standards to identify the content that needs to be preserved, leading to non-uniformity in content and users not being sure of whether preserved content is comprehensive. Each project, program or agency can specify the items to be preserved as a part of its data management requirements. However, broader community consensus that cuts across organizational or national boundaries would be needed to ensure comprehensiveness, uniformity and long-term utility of archived data. The Federation of Earth Science Information Partners (ESIP), a diverse network of scientists, data stewards and technology developers, has a forum for ESIP members to collaborate on data preservation issues. During early 2011, members discussed the importance of developing a Provenance and Context Content Standard (PCCS) and developed an initial list of content items. This list is based on the outcome of a NASA and NOAA meeting held in 1998 under the auspices of the USGCRP, documentation requirements from NOAA and our experience with some of the NASA Earth science missions. The items are categorized into the following 8 high level categories: Preflight/Pre-Operations, Products (Data), Product Documentation, Mission Calibration, Product Software, Algorithm Input, Validation, Software Tools.

Ramaprian, Hampapuram K.↗

NASA NTRS2011

Thermal Protection System Imagery Inspection Management System -TIIMS

TIIMS is used during the inspection phases of every mission to provide quick visual feedback, detailed inspection data, and determination to the mission management team. This system consists of a visual Web page interface, an SQL database, and a graphical image generator. These combine to allow a user to ascertain quickly the status of the inspection process, and current determination of any problem zones. The TIIMS system allows inspection engineers to enter their determinations into a database and to link pertinent images and video to those database entries. The database then assigns criteria to each zone and tile, and via query, sends the information to a graphical image generation program. Using the official TIPS database tile positions and sizes, the graphical image generation program creates images of the current status of the orbiter, coloring zones, and tiles based on a predefined key code. These images are then displayed on a Web page using customized JAVA scripts to display the appropriate zone of the orbiter based on the location of the user's cursor. The close-up graphic and database entry for that particular zone can then be seen by selecting the zone. This page contains links into the database to access the images used by the inspection engineer when they make the determination entered into the database. Status for the inspection zones changes as determinations are refined and shown by the appropriate color code.

Goza, Sharon↗

NASA NTRS2011

Digital Interface Board to Control Phase and Amplitude of Four Channels

An increasing number of parts are designed with digital control interfaces, including phase shifters and variable attenuators. When designing an antenna array in which each antenna has independent amplitude and phase control, the number of digital control lines that must be set simultaneously can grow very large. Use of a parallel interface would require separate line drivers, more parts, and thus additional failure points. A convenient form of control where single-phase shifters or attenuators could be set or the whole set could be programmed with an update rate of 100 Hz is needed to solve this problem. A digital interface board with a field-programmable gate array (FPGA) can simultaneously control an essentially arbitrary number of digital control lines with a serial command interface requiring only three wires. A small set of short, high-level commands provides a simple programming interface for an external controller. Parity bits are used to validate the control commands. Output timing is controlled within the FPGA to allow for rapid update rates of the phase shifters and attenuators. This technology has been used to set and monitor eight 5-bit control signals via a serial UART (universal asynchronous receiver/transmitter) interface. The digital interface board controls the phase and amplitude of the signals for each element in the array. A host computer running Agilent VEE sends commands via serial UART connection to a Xilinx VirtexII FPGA. The commands are decoded, and either outputs are set or telemetry data is sent back to the host computer describing the status and the current phase and amplitude settings. This technology is an integral part of a closed-loop system in which the angle of arrival of an X-band uplink signal is detected and the appropriate phase shifts are applied to the Ka-band downlink signal to electronically steer the array back in the direction of the uplink signal. It will also be used in the non-beam-steering case to compensate for phase shift variations through power amplifiers. The digital interface board can be used to set four 5-bit phase shifters and four 5-bit attenuators and monitor their current settings. Additionally, it is useful outside of the closed-loop system for beamsteering alone. When the VEE program is started, it prompts the user to initialize variables (to zero) or skip initialization. After that, the program enters into a continuous loop waiting for the telemetry period to elapse or a button to be pushed. A telemetry request is sent when the telemetry period is elapsed (every five seconds). Pushing one of the set or reset buttons will send the appropriate command. When a command is sent, the interface status is returned, and the user will be notified by a pop-up window if any error has occurred. The program runs until the End Program button is depressed.

Smith, Amy E.↗

NASA NTRS2011

Lightning Initiation Forecasting: An Operational Dual-Polarimetric Radar Technique

The objective of this NASA MSFC and NOAA CSTAR funded study is to develop and test operational forecast algorithms for the prediction of lightning initiation utilizing the C-band dual-polarimetric radar, UAHuntsville's Advanced Radar for Meteorological and Operational Research (ARMOR). Although there is a rich research history of radar signatures associated with lightning initiation, few studies have utilized dual-polarimetric radar signatures (e.g., Z(sub dr) columns) and capabilities (e.g., fuzzy-logic particle identification [PID] of precipitation ice) in an operational algorithm for first flash forecasting. The specific goal of this study is to develop and test polarimetric techniques that enhance the performance of current operational radar reflectivity based first flash algorithms. Improving lightning watch and warning performance will positively impact personnel safety in both work and leisure environments. Advanced warnings can provide space shuttle launch managers time to respond appropriately to secure equipment and personnel, while they can also provide appropriate warnings for spectators and players of leisure sporting events to seek safe shelter. Through the analysis of eight case dates, consisting of 35 pulse-type thunderstorms and 20 non-thunderstorm case studies, lightning initiation forecast techniques were developed and tested. The hypothesis is that the additional dual-polarimetric information could potentially reduce false alarms while maintaining high probability of detection and increasing lead-time for the prediction of the first lightning flash relative to reflectivity-only based techniques. To test the hypothesis, various physically-based techniques using polarimetric variables and/or PID categories, which are strongly correlated to initial storm electrification (e.g., large precipitation ice production via drop freezing), were benchmarked against the operational reflectivity-only based approaches to find the best compromise between forecast skill and lead-time. Forecast skill is determined by statistical analysis of probability of detection (POD), false alarm ratio (FAR), Operational Utility Index (OUI), and critical success index (CSI).

Woodard, Crystal J.↗

NASA NTRS2011

Application of the Life Safety Code to a Historic Test Stand

NASA has conducted a study to assess alternatives to refurbishing existing launch vehicle modal test facilities as opposed to developing new test facilities to meet the demands of a very fiscally constrained test and evaluation environment. The results of this study showed that Marshall Space Flight Center (MSFC) Test Stand (TS) 4550 could be made compliant, within reasonable cost and schedule impacts, if safety processes and operational limitations were put in place to meet the safety codes and concerns of the Fire Marshall. Trades were performed with key selection criteria to ensure that appropriate levels of occupant safety are incorporated into test facility design modifications. In preparation for the ground vibration tests that were to be performed on the Ares I launch vehicle, the Ares Flight and Integrated Test Office (FITO) organization evaluated the available test facility options, which included the existing mothballed structural dynamic TS4550 used by Apollo and Shuttle, alternative ground vibration test facilities at other locations, and construction of a new dynamic test stand. After an exhaustive assessment of the alternatives, the results favored modifying the TS4550 because it was the lowest cost option and presented the least schedule risk to the NASA Constellation Program for Ares Integrated Vehicle Ground Vibration Test (IVGVT). As the renovation design plans and drawings were being developed for TS4550, a safety concern was discovered the original design for the construction of the test stand, originally built for the Apollo Program and renovated for the Shuttle Program, was completed before NASA s adoption of the currently imposed safety and building codes per National Fire Protection Association Life Safety Code [NFPA 101] and International Building Codes. The initial FITO assessment of the design changes, required to make TS4550 compliant with current safety and building standards, identified a significant cost increase and schedule impact. An effort was launched to thoroughly evaluate the applicable life safety requirements, examine the context in which they were derived, and determine a means by which the TS4550 modifications could be made within budget and on schedule, while still providing the occupants with appropriate levels of safety.

Askins, Bruce↗

NASA NTRS2011

NASA System Safety Handbook: System Safety Framework and Concepts for Implementation - Volume 1

System safety assessment is defined in NPR 8715.3C, NASA General Safety Program Requirements as a disciplined, systematic approach to the analysis of risks resulting from hazards that can affect humans, the environment, and mission assets. Achievement of the highest practicable degree of system safety is one of NASA's highest priorities. Traditionally, system safety assessment at NASA and elsewhere has focused on the application of a set of safety analysis tools to identify safety risks and formulate effective controls.1 Familiar tools used for this purpose include various forms of hazard analyses, failure modes and effects analyses, and probabilistic safety assessment (commonly also referred to as probabilistic risk assessment (PRA)). In the past, it has been assumed that to show that a system is safe, it is sufficient to provide assurance that the process for identifying the hazards has been as comprehensive as possible and that each identified hazard has one or more associated controls. The NASA Aerospace Safety Advisory Panel (ASAP) has made several statements in its annual reports supporting a more holistic approach. In 2006, it recommended that "... a comprehensive risk assessment, communication and acceptance process be implemented to ensure that overall launch risk is considered in an integrated and consistent manner." In 2009, it advocated for "... a process for using a risk-informed design approach to produce a design that is optimally and sufficiently safe." As a rationale for the latter advocacy, it stated that "... the ASAP applauds switching to a performance-based approach because it emphasizes early risk identification to guide designs, thus enabling creative design approaches that might be more efficient, safer, or both." For purposes of this preface, it is worth mentioning three areas where the handbook emphasizes a more holistic type of thinking. First, the handbook takes the position that it is important to not just focus on risk on an individual basis but to consider measures of aggregate safety risk and to ensure wherever possible that there be quantitative measures for evaluating how effective the controls are in reducing these aggregate risks. The term aggregate risk, when used in this handbook, refers to the accumulation of risks from individual scenarios that lead to a shortfall in safety performance at a high level: e.g., an excessively high probability of loss of crew, loss of mission, planetary contamination, etc. Without aggregated quantitative measures such as these, it is not reasonable to expect that safety has been optimized with respect to other technical and programmatic objectives. At the same time, it is fully recognized that not all sources of risk are amenable to precise quantitative analysis and that the use of qualitative approaches and bounding estimates may be appropriate for those risk sources. Second, the handbook stresses the necessity of developing confidence that the controls derived for the purpose of achieving system safety not only handle risks that have been identified and properly characterized but also provide a general, more holistic means for protecting against unidentified or uncharacterized risks. For example, while it is not possible to be assured that all credible causes of risk have been identified, there are defenses that can provide protection against broad categories of risks and thereby increase the chances that individual causes are contained. Third, the handbook strives at all times to treat uncertainties as an integral aspect of risk and as a part of making decisions. The term "uncertainty" here does not refer to an actuarial type of data analysis, but rather to a characterization of our state of knowledge regarding results from logical and physical models that approximate reality. Uncertainty analysis finds how the output parameters of the models are related to plausible variations in the input parameters and in the modeling assumptions. The evaluation of unrtainties represents a method of probabilistic thinking wherein the analyst and decision makers recognize possible outcomes other than the outcome perceived to be "most likely." Without this type of analysis, it is not possible to determine the worth of an analysis product as a basis for making decisions related to safety and mission success. In line with these considerations the handbook does not take a hazard-analysis-centric approach to system safety. Hazard analysis remains a useful tool to facilitate brainstorming but does not substitute for a more holistic approach geared to a comprehensive identification and understanding of individual risk issues and their contributions to aggregate safety risks. The handbook strives to emphasize the importance of identifying the most critical scenarios that contribute to the risk of not meeting the agreed-upon safety objectives and requirements using all appropriate tools (including but not limited to hazard analysis). Thereafter, emphasis shifts to identifying the risk drivers that cause these scenarios to be critical and ensuring that there are controls directed toward preventing or mitigating the risk drivers. To address these and other areas, the handbook advocates a proactive, analytic-deliberative, risk-informed approach to system safety, enabling the integration of system safety activities with systems engineering and risk management processes. It emphasizes how one can systematically provide the necessary evidence to substantiate the claim that a system is safe to within an acceptable risk tolerance, and that safety has been achieved in a cost-effective manner. The methodology discussed in this handbook is part of a systems engineering process and is intended to be integral to the system safety practices being conducted by the NASA safety and mission assurance and systems engineering organizations. The handbook posits that to conclude that a system is adequately safe, it is necessary to consider a set of safety claims that derive from the safety objectives of the organization. The safety claims are developed from a hierarchy of safety objectives and are therefore hierarchical themselves. Assurance that all the claims are true within acceptable risk tolerance limits implies that all of the safety objectives have been satisfied, and therefore that the system is safe. The acceptable risk tolerance limits are provided by the authority who must make the decision whether or not to proceed to the next step in the life cycle. These tolerances are therefore referred to as the decision maker's risk tolerances. In general, the safety claims address two fundamental facets of safety: 1) whether required safety thresholds or goals have been achieved, and 2) whether the safety risk is as low as possible within reasonable impacts on cost, schedule, and performance. The latter facet includes consideration of controls that are collective in nature (i.e., apply generically to broad categories of risks) and thereby provide protection against unidentified or uncharacterized risks.

Dezfuli, Homayoon↗

NASA NTRS2011

Tracking Object Existence From an Autonomous Patrol Vehicle

An autonomous vehicle patrols a large region, during which an algorithm receives measurements of detected potential objects within its sensor range. The goal of the algorithm is to track all objects in the region over time. This problem differs from traditional multi-target tracking scenarios because the region of interest is much larger than the sensor range and relies on the movement of the sensor through this region for coverage. The goal is to know whether anything has changed between visits to the same location. In particular, two kinds of alert conditions must be detected: (1) a previously detected object has disappeared and (2) a new object has appeared in a location already checked. For the time an object is within sensor range, the object can be assumed to remain stationary, changing position only between visits. The problem is difficult because the upstream object detection processing is likely to make many errors, resulting in heavy clutter (false positives) and missed detections (false negatives), and because only noisy, bearings-only measurements are available. This work has three main goals: (1) Associate incoming measurements with known objects or mark them as new objects or false positives, as appropriate. For this, a multiple hypothesis tracker was adapted to this scenario. (2) Localize the objects using multiple bearings-only measurements to provide estimates of global position (e.g., latitude and longitude). A nonlinear Kalman filter extension provides these 2D position estimates using the 1D measurements. (3) Calculate the probability that a suspected object truly exists (in the estimated position), and determine whether alert conditions have been triggered (for new objects or disappeared objects). The concept of a probability of existence was created, and a new Bayesian method for updating this probability at each time step was developed. A probabilistic multiple hypothesis approach is chosen because of its superiority in handling the uncertainty arising from errors in sensors and upstream processes. However, traditional target tracking methods typically assume a stationary detection volume of interest, whereas in this case, one must make adjustments for being able to see only a small portion of the region of interest and understand when an alert situation has occurred. To track object existence inside and outside the vehicle's sensor range, a probability of existence was defined for each hypothesized object, and this value was updated at every time step in a Bayesian manner based on expected characteristics of the sensor and object and whether that object has been detected in the most recent time step. Then, this value feeds into a sequential probability ratio test (SPRT) to determine the status of the object (suspected, confirmed, or deleted). Alerts are sent upon selected status transitions. Additionally, in order to track objects that move in and out of sensor range and update the probability of existence appropriately a variable probability detection has been defined and the hypothesis probability equations have been re-derived to accommodate this change. Unsupervised object tracking is a pervasive issue in automated perception systems. This work could apply to any mobile platform (ground vehicle, sea vessel, air vehicle, or orbiter) that intermittently revisits regions of interest and needs to determine whether anything interesting has changed.

Wolf, Michael↗

NASA NTRS2011

EOS MLS Level 2 Data Processing Software Version 3

This software accepts the EOS MLS calibrated measurements of microwave radiances products and operational meteorological data, and produces a set of estimates of atmospheric temperature and composition. This version has been designed to be as flexible as possible. The software is controlled by a Level 2 Configuration File that controls all aspects of the software: defining the contents of state and measurement vectors, defining the configurations of the various forward models available, reading appropriate a priori spectroscopic and calibration data, performing retrievals, post-processing results, computing diagnostics, and outputting results in appropriate files. In production mode, the software operates in a parallel form, with one instance of the program acting as a master, coordinating the work of multiple slave instances on a cluster of computers, each computing the results for individual chunks of data. In addition, to do conventional retrieval calculations and producing geophysical products, the Level 2 Configuration File can instruct the software to produce files of simulated radiances based on a state vector formed from a set of geophysical product files taken as input. Combining both the retrieval and simulation tasks in a single piece of software makes it far easier to ensure that identical forward model algorithms and parameters are used in both tasks. This also dramatically reduces the complexity of the code maintenance effort.

Livesey, Nathaniel J.↗

NASA NTRS2012

NASA Occupant Protection Standards Development

Historically, spacecraft landing systems have been tested with human volunteers, because analytical methods for estimating injury risk were insufficient. These tests were conducted with flight-like suits and seats to verify the safety of the landing systems. Currently, NASA uses the Brinkley Dynamic Response Index to estimate injury risk, although applying it to the NASA environment has drawbacks: (1) Does not indicate severity or anatomical location of injury (2) Unclear if model applies to NASA applications. Because of these limitations, a new validated, analytical approach was desired. Leveraging off of the current state of the art in automotive safety and racing, a new approach was developed. The approach has several aspects: (1) Define the acceptable level of injury risk by injury severity (2) Determine the appropriate human surrogate for testing and modeling (3) Mine existing human injury data to determine appropriate Injury Assessment Reference Values (IARV). (4) Rigorously Validate the IARVs with sub-injurious human testing (5) Use validated IARVs to update standards and vehicle requirement

Somers, Jeffrey↗

NASA NTRS2012

Evaluation of Analysis Techniques for Fluted-Core Sandwich Cylinders

Buckling-critical launch-vehicle structures require structural concepts that have high bending stiffness and low mass. Fluted-core, also known as truss-core, sandwich construction is one such concept. In an effort to identify an analysis method appropriate for the preliminary design of fluted-core cylinders, the current paper presents and compares results from several analysis techniques applied to a specific composite fluted-core test article. The analysis techniques are evaluated in terms of their ease of use and for their appropriateness at certain stages throughout a design analysis cycle (DAC). Current analysis techniques that provide accurate determination of the global buckling load are not readily applicable early in the DAC, such as during preliminary design, because they are too costly to run. An analytical approach that neglects transverse-shear deformation is easily applied during preliminary design, but the lack of transverse-shear deformation results in global buckling load predictions that are significantly higher than those from more detailed analysis methods. The current state of the art is either too complex to be applied for preliminary design, or is incapable of the accuracy required to determine global buckling loads for fluted-core cylinders. Therefore, it is necessary to develop an analytical method for calculating global buckling loads of fluted-core cylinders that includes transverse-shear deformations, and that can be easily incorporated in preliminary design.

Lovejoy, Andrew E.↗