Results for “Display Failure” — Page 3

NASA NTRS1980

Evaluation of a computer-generated perspective tunnel display for flight path following

The display was evaluated by monitoring pilot performance in a fixed base simulator with the vehicle dynamics of a CH-47 tandem rotor helicopter. Superposition of the predicted future vehicle position on the tunnel image was also investigated to determine whether, and to what extent, it contributes to better system performance (the best predicted future vehicle position was sought). Three types of simulator experiments were conducted: following a desired trajectory in the presence of disturbances; entering the trajectory from a random position, outside the trajectory; detecting and correcting failures in automatic flight. The tunnel display with superimposed predictor/director symbols was shown to be a very successful combination, which outperformed the other two displays in all three experiments. A prediction time of 4 to 7 sec. was found to optimize trajectory tracking for the given vehicle dynamics and flight condition. Pilot acceptance of the tunnel plus predictor/director display was found to be favorable and the time the pilot needed for familiarization with the display was found to be relatively short.

Grunwald, A. J.↗

NASA NTRS2021

Methodology to Assess the Changing Risk of Yield Failure Due to Heat and Drought Stress Under Climate Change

While the understanding of average impacts of climate change on crop yields is improving, few assessments have quantified expected impacts on yield distributions and the risk of yield failures. Here we present the relative distribution as a method to assess how the risk of yield failure due to heat and drought stress (measured in terms of return period between yields falling 15% below previous five year Olympic average yield) responds to changes of the underlying yield distributions under climate change. Relative distributions are used to capture differences in the entire yield distribution between baseline and climate change scenarios, and to further decompose them into changes in the location and shape of the distribution. The methodology is applied here for the case of rainfed wheat and grain maize across Europe using an ensemble of crop models under three climate change scenarios with simulations conducted at 25 km resolution. Under climate change, maize generally displayed shorter return periods of yield failures (with changes under RCP 4.5 between −0.3 and 0 years compared to the baseline scenario) associated with a shift of the yield distribution towards lower values and changes in shape of the distribution that further reduced the frequency of high yields. This response was prominent in the areas characterized in the baseline scenario by high yields and relatively long return periods of failure. Conversely, for wheat, yield failures were projected to become less frequent under future scenarios (with changes in the return period of −0.1 to +0.4 years under RCP 4.5) and were associated with a shift of the distribution towards higher values and a change in shape increasing the frequency of extreme yields at both ends. Our study offers an approach to quantify the changes in yield distributions that drive crop yield failures. Actual risk assessments additionally require models that capture the variety of drivers determining crop yield variability and scenario climate input data that samples the range of probable climate variation.

Climate risk assessment↗

NASA NTRS2013

Pilot Preferences on Displayed Aircraft Control Variables

The experiments described here explored how pilots want available maneuver authority information transmitted and how this information affects pilots before and after an aircraft failure. The aircraft dynamic variables relative to flight performance were narrowed to energy management variables. A survey was conducted to determine what these variables should be. Survey results indicated that bank angle, vertical velocity, and airspeed were the preferred variables. Based on this, two displays were designed to inform the pilot of available maneuver envelope expressed as bank angle, vertical velocity, and airspeed. These displays were used in an experiment involving control surface failures. Results indicate the displayed limitations in bank angle, vertical velocity, and airspeed were helpful to the pilots during aircraft surface failures. However, the additional information did lead to a slight increase in workload, a small decrease in perceived aircraft flying qualities, and no effect on aircraft situation awareness.

Trujillo, Anna C.↗

NASA NTRS1990

Flight-testing of the self-repairing flight control system using the F-15 highly integrated digital electronic control flight research facility

Flight tests conducted with the self-repairing flight control system (SRFCS) installed on the NASA F-15 highly integrated digital electronic control aircraft are described. The development leading to the current SRFCS configuration is highlighted. Key objectives of the program are outlined: (1) to flight-evaluate a control reconfiguration strategy with three types of control surface failure; (2) to evaluate a cockpit display that will inform the pilot of the maneuvering capacity of the damage aircraft; and (3) to flight-evaluate the onboard expert system maintenance diagnostics process using representative faults set to occur only under maneuvering conditions. Preliminary flight results addressing the operation of the overall system, as well as the individual technologies, are included.

Stewart, James F.↗

NASA NTRS1990

Flight-testing of the self-repairing flight control system using the F-15 highly integrated digital electronic control flight research facility

Flight tests conducted with the self-repairing flight control system (SRFCS) installed on the NASA F-15 highly integrated digital electronic control aircraft are described. The development leading to the current SRFCS configuration is highlighted. Key objectives of the program are outlined: (1) to flight-evaluate a control reconfiguration strategy with three types of control surface failure; (2) to evaluate a cockpit display that will inform the pilot of the maneuvering capacity of the damaged aircraft; and (3) to flight-evaluate the onboard expert system maintenance diagnostics process using representative faults set to occur only under maneuvering conditions. Preliminary flight results addressing the operation of the overall system, as well as the individual technologies, are included.

Stewart, James F.↗

NASA NTRS1993

Piloting considerations for terminal area operations of civil tiltwing and tiltrotor aircraft

The existing body of research to investigate airworthiness, performance, handling, and operational requirements for STOL and V/STOL aircraft was reviewed for its applicability to the tiltrotor and tiltwing design concepts. The objective of this study was to help determine the needs for developing civil certification criteria for these aircraft concepts. Piloting tasks that were considered included configuration and thrust vector management, glidepath control, deceleration to hover, and engine failure procedures. Flight control and cockpit display systems that have been found necessary to exploit the low-speed operating characteristics of these aircraft are described, and beneficial future developments are proposed.

Hindson, William S.↗

NASA NTRS1990

High-temperature tensile properties of fiber reinforced reaction bonded silicon nitride

Measurements of tensile properties of unidirectional silicon carbide fiber-reinforced reaction-bonded silicon nitride (SiC/RBSN) composite specimens were carried out in air at 25, 1300, and 1500 C, using a new testing technique and a specially designed gripping system that minimizes bending moment and assures that failure always occurred in the gage section. The material was found to display metallike stress-strain behavior at all temperatures tested, and a noncatastrophic failure beyond the matrix fracture. The tensile properties were found to be temperature dependent, with the values of the ultimate tensile strength decreasing with temperature, from 543 MPa at 25 C to 169 at 1500 C.

Jablonski, David A.↗

NASA NTRS2005

Failure Assessment

Three questions to which software developers want accurate, precise answers are "How can the software system fail?", "mat bad things will happen if the software fails?t', and "How many failures will the software experience?". Numerous techniques have been devised to answer these questions; three of the best known are: 1) Software Fault Tree Analysis (SFTA) 2) Software Failure Modes, Effects, and Criticality Analysis (SFMECA 3) Software Fault/Failure Modeling. SFTA and SFMECA have been successfully used to analyze the flight software for a number of robotic planetary exploration missions, including Galileo, Cassini, and Deep Space 1. Given the increasing interest in reusing software components from mission to mission, one of us has developed techniques for reusing the corresponding portions of the SFTA and SFMECA, reducing the effort required to conduct these analyses. SFTA has also been shown to be effective in analyzing the security aspects of software systems; intrusion mechanisms and effects can easily be modeled using these techniques. The Bi- Directional Safety Analysis (BDSA) method combines a forward search (similar to SFMECA) from potential failure modes to their effects, with a backward search (similar to SFTA) from feasible hazards to the contributing causes of each hazard. BDSA offers an efficient way to identify latent failures. Recent work has extended BDSA to product-line applications such as flight-instrumentation displays and developed tool support for the reuse of the failure-analysis artifacts within a product line. BDSA has also been streamlined to support those projects having tight cost and/or schedule constraints for their failure analysis efforts. We discuss lessons learned from practice, describe available tools, and identi@ some future directions for the topic. A substantial amount of research has been devoted to estimating the number of failures that a software system will experience during test and operations, as well as the number of faults that have been inserted into that system during its development. One of us has found that the amount of structural change to a system during its development is strongly related to the number of faults inserted into it. Using techniques requiring no additional effort on the part of the development organization, the required measurements of structural evolution can be easily obtained from a development effort's configuration management system and readily transformed into an estimate of fault content. So far, structure-fault relationships have been identified for source code; current work seeks to examine artifacts available earlier in the lifecycle to determine if similar relationships between structure and fault content can be found. In particular, relationships between requirements change requests and the number of faults inserted into the implemented system would provide a significant improvement in our ability to control software quality during the early development phases.

fault tree↗

NASA NTRS1987

Independent Orbiter Assessment (IOA): Analysis of the displays and controls subsystem

The results of the Independent Orbiter Assessment (IOA) of the Failure Modes and Effects Analysis (FMEA) and Critical Items List (CIL) are presented. The IOA approach features a top-down analysis of the hardware to determine failure modes, criticality, and potential critical items. To preserve independence, this analysis was accomplished without reliance upon the results contained within the NASA FMEA/CIL documentation. This report documents the independent analysis results corresponding to the Orbiter Displays and Controls (D and C) subsystem hardware. The function of the D and C hardware is to provide the crew with the monitor, command, and control capabilities required for management of all normal and contingency mission and flight operations. The D and C hardware for which failure modes analysis was performed consists of the following: Acceleration Indicator (G-METER); Head Up Display (HUD); Display Driver Unit (DDU); Alpha/Mach Indicator (AMI); Horizontal Situation Indicator (HSI); Attitude Director Indicator (ADI); Propellant Quantity Indicator (PQI); Surface Position Indicator (SPI); Altitude/Vertical Velocity Indicator (AVVI); Caution and Warning Assembly (CWA); Annunciator Control Assembly (ACA); Event Timer (ET); Mission Timer (MT); Interior Lighting; and Exterior Lighting. Each hardware item was evaluated and analyzed for possible failure modes and effects. Criticality was assigned based upon the severity of the effect for each failure mode.

Trahan, W. H.↗

NASA NTRS2005

Inductive Learning Approaches for Improving Pilot Awareness of Aircraft Faults

Neural network flight controllers are able to accommodate a variety of aircraft control surface faults without detectable degradation of aircraft handling qualities. Under some faults, however, the effective flight envelope is reduced; this can lead to unexpected behavior if a pilot performs an action that exceeds the remaining control authority of the damaged aircraft. The goal of our work is to increase the pilot s situational awareness by informing him of the type of damage and resulting reduction in flight envelope. Our methodology integrates two inductive learning systems with novel visualization techniques. One learning system, the Inductive Monitoring System (IMS), learns to detect when a simulation includes faulty controls, while two others, Inductive Classification System (INCLASS) and multiple binary decision tree system (utilizing C4.5), determine the type of fault. In off-line training using only non-failure data, IMS constructs a characterization of nominal flight control performance based on control signals issued by the neural net flight controller. This characterization can be used to determine the degree of control augmentation required in the pitch, roll, and yaw command channels to counteract control surface failures. This derived information is typically sufficient to distinguish between the various control surface failures and is used to train both INCLASS and C4.5. Using data from failed control surface flight simulations, INCLASS and C4.5 independently discover and amplify features in IMS results that can be used to differentiate each distinct control surface failure situation. In real-time flight simulations, distinguishing features learned during training are used to classify control surface failures. Knowledge about the type of failure can be used by an additional automated system to alter its approach for planning tactical and strategic maneuvers. The knowledge can also be used directly to increase the pilot s situational awareness and inform manual maneuver decisions. Our multi-modal display of this information provides speech output to issue control surface failure warnings to a lesser-used communication channel and provides graphical displays with pilot-selectable !eve!s of details to issues additional information about the failure. We also describe a potential presentation for flight envelope reduction that can be viewed separately or integrated with an existing attitude indicator instrument. Preliminary results suggest that the inductive approach is capable of detecting that a control surface has failed and determining the type of fault. Furthermore, preliminary evaluations suggest that the interface discloses a concise summary of this information to the pilot.

Spikovska, Lilly↗

NASA NTRS2010

Orion Entry Display Feeder and Interactions with the Entry Monitor System

The Orion spacecraft is designed to return astronauts to a landing within 10 km of the intended landing target from low Earth orbit, lunar direct-entry, and lunar skip-entry trajectories. Al pile the landing is nominally controlled autonomously, the crew can fly precision entries manually in the event of an anomaly. The onboard entry displays will be used by the crew to monitor and manually fly the entry, descent, and landing, while the Entry Monitor System (EMS) will be used to monitor the health and status of the onboard guidance and the trajectory. The entry displays are driven by the entry display feeder, part of the Entry Monitor System (EMS). The entry re-targeting module, also part of the EMS, provides all the data required to generate the capability footprint of the vehicle at any point in the trajectory, which is shown on the Primary Flight Display (PFD). It also provides caution and warning data and recommends the safest possible re-designated landing site when the nominal landing site is no longer within the capability of the vehicle. The PFD and the EMS allow the crew to manually fly an entry trajectory profile from entry interface until parachute deploy having the flexibility to manually steer the vehicle to a selected landing site that best satisfies the priorities of the crew. The entry display feeder provides data from the ENIS and other components of the GNC flight software to the displays at the proper rate and in the proper units. It also performs calculations that are specific to the entry displays and which are not made in any other component of the flight software. In some instances, it performs calculations identical to those performed by the onboard primary guidance algorithm to protect against a guidance system failure. These functions and the interactions between the entry display feeder and the other components of the EMS are described.

Baird, Darren↗

NASA NTRS1992

Takeoff Performance Monitoring System display options

The development of displays for the Takeoff Performance Monitoring System (TPMS) is described with attention given to the three concepts prepared for commercial applications. The TPMS algorithm is described and related to the display requirements for pilots of two-engine airplanes. Head-up and -down displays are considered for displaying the simple advisory data which indicate whether the takeoff is a 'Go' or 'No-go' based on engine failure, acceleration error, and runway length. Six pilots are shown the three display options which include: (1) basic information; (2) basic data with 'Go/No-go' advisory flags; and (3) basic data, advisory flags, and an abort-warning symbol. The pilots tended to select the option with the most advisory data available, but the inconclusive preference study led to the concept of presenting all three configurations as possible display options for the TPMS.

Middleton, David B.↗

NASA NTRS2011

Backup Alignment Devices on Shuttle: Heads-Up Display or Crew Optical Alignment Sight

NASA s Space Shuttle was built to withstand multiple failures while still keeping the crew and vehicle safe. Although the design of the Space Shuttle had a great deal of redundancy built into each system, there were often additional ways to keep systems in the best configuration if a failure were to occur. One such method was to use select pieces of hardware in a way for which they were not primarily intended. The primary function of the Heads-Up Display (HUD) was to provide the crew with a display of flight critical information during the entry phase. The primary function of the Crew Optical Alignment Sight (COAS) was to provide the crew an optical alignment capability for rendezvous and docking phases. An alignment device was required to keep the Inertial Measurement Units (IMUs) well aligned for a safe Entry; nominally this alignment device would be the two on-board Star Trackers. However, in the event of a Star Tracker failure, the HUD or COAS could also be used as a backup alignment device, but only if the device had been calibrated beforehand. Once the HUD or COAS was calibrated and verified then it was considered an adequate backup to the Star Trackers for entry IMU alignment. There were procedures in place and the astronauts were trained on how to accurately calibrate the HUD or COAS and how to use them as an alignment device. The calibration procedure for the HUD and COAS had been performed on many Shuttle missions. Many of the first calibrations performed were for data gathering purposes to determine which device was more accurate as a backup alignment device, HUD or COAS. Once this was determined, the following missions would frequently calibrate the HUD in order to be one step closer to having the device ready in case it was needed as a backup alignment device.

Chavez, Melissa A.↗

NASA NTRS1998

Two-Dimensional Failure Waves and Ignition Fronts in Premixed Combustion

This paper is a continuation of our work on edge-flames in premixed combustion. An edge-flame is a two-dimensional structure constructed from a one-dimensional configuration that has two stable solutions (bistable equilibrium). Edge-flames can display wavelike behavior, advancing as ignition fronts or retreating as failure waves. Here we consider two one-dimensional configurations: twin deflagrations in a straining flow generated by the counterflow of fresh streams of mixture: and a single deflagration subject to radiation losses. The edge-flames constructed from the first configuration have positive or negative speeds, according to the value of the strain rate. But our numerical solutions strongly suggest that only positive speeds (corresponding to ignition fronts) can exist for the second configuration. We show that this phenomenon can also occur in diffusion flames when the Lewis numbers are small. And we discuss the asymptotics of the one-dimensional twin deflagration configuration. an overlooked problem from the 70s.

Vedarajan, T. G.↗

NASA NTRS2003

Reducing the Risk of Human Space Missions with INTEGRITY

The INTEGRITY Program will design and operate a test bed facility to help prepare for future beyond-LEO missions. The purpose of INTEGRITY is to enable future missions by developing, testing, and demonstrating advanced human space systems. INTEGRITY will also implement and validate advanced management techniques including risk analysis and mitigation. One important way INTEGRITY will help enable future missions is by reducing their risk. A risk analysis of human space missions is important in defining the steps that INTEGRITY should take to mitigate risk. This paper describes how a Probabilistic Risk Assessment (PRA) of human space missions will help support the planning and development of INTEGRITY to maximize its benefits to future missions. PRA is a systematic methodology to decompose the system into subsystems and components, to quantify the failure risk as a function of the design elements and their corresponding probability of failure. PRA provides a quantitative estimate of the probability of failure of the system, including an assessment and display of the degree of uncertainty surrounding the probability. PRA provides a basis for understanding the impacts of decisions that affect safety, reliability, performance, and cost. Risks with both high probability and high impact are identified as top priority. The PRA of human missions beyond Earth orbit will help indicate how the risk of future human space missions can be reduced by integrating and testing systems in INTEGRITY.

Jones, Harry W.↗

NASA NTRS1980

Issues in the development of a general design algorithm for reliable failure detection

The design of residual-generation processes is briefly discussed, the goal being to develop a methodology for designing robust processes of this type. It is noted that analytical redundancy forms the basis for residual-generation, representing the relationships between the outputs of sensors and inputs of actuators via the dynamics of the system. It is because of this relationship that sensor outputs (even those of dissimilar sensors and at different times) can, in effect, be compared to ascertain whether they are consistent with normal system behavior. The residuals can be seen as constituting the discrepancy between the output resulting from such comparisons; they should display noise-like characteristics only in the normal mode. Failures in the system would lead to a discrepancy between the observed and expected behavior of the sensor outputs and hence to abnormal characteristics (failure signatures) in the residual.

Chow, E. Y.↗

NASA NTRSDate not supplied

Flight Deck Design of a Hybrid Turbine/Electric Passenger Aircraft

NASA is exploring the development of a 180-passenger subsonic single engine aft turbine aircraft, The aft turbine provides electric power in a hybrid design to wing mounted electric engines, creating a highly efficient, high-bypass-ratio fan equivalent. The SUbsonic Single Aft eNgine (SUSAN) aircraft is being developed as a sustainable subsonic regional aircraft that seeks to reduce emission levels by 50% in the next few decades. Pilot-in-the-loop studies were conducted at the NASA Langley Research Center in Hampton, Virginia, to explore the flight deck design for the hybrid electric aircraft. Following modern trends in commercial aircraft flight decks with full time augmented controls and a quiet and dark philosophy, single throttle and simplified engine displays were developed for the SUSAN aircraft. The aircraft includes a single aft mounted turbine engine and 16 wing mounted electric fans. The final design was developed from feedback received during an earlier pilot-in-the-loop study where one, two, and three throttles were tested in standard airline operations, including various failures of the turbine and electric engines. Current flight deck designs normally provide control inceptors for each propulsion engine and an engine display for all primary aircraft engine parameters. With full time augmentation expected, a single throttle control with autothrottle always engaged, even during failures, is desired. Augmentation of flight controls using distributed thrust also requires full time control of the electric engines using automation. Additionally, electric engine thrust is augmented during climb based on battery state of charge. Thrust augmentation changes faster than human reaction time and therefore requires full-time automation. A pilot-in-the-loop study was conducted at the NASA Langley Research Center in Hampton, Virginia, to test the final design of the single throttle with simplified engine displays. Fourteen airline pilots evaluated the single throttle and engine display concept. Electric engine failures included one, four symmetric, and eight non-symmetric electric engine failures. The turbine engine was evaluated for complete and partial failure during critical phases of flight to include takeoff as well as enroute. Unexpected go-arounds increase workload and require significant throttle manipulation. Go-arounds were included to ensure the single throttle was usable for all phases of flight. Failures during takeoff required a return to the departure field and failures enroute required a diversion except for one and four electric engine failures as these failures did not affect aircraft flyability or range. There are currently no Part 25 aircraft certified with hybrid systems or electric engines with batteries as emergency propulsion. For turbine engine failures in the SUSAN aircraft design, range is limited to 30 minutes at full power. Battery state of charge and battery health displays were developed and tested for usability and to determine how well they supported pilot decisions for alternate airports during emergency diversions. Novel displays using shape and color were developed to provide immediate feedback when state of charge became critical. This paper details the pilot study including pilot feedback supporting the potential for increased automation and a single throttle control. Detailed recommendations are provided for a novel single throttle control and additional pilot controls to support selection of engines during start, shutdown, and engine troubleshooting procedures. This design deviates significantly from current practice of providing throttles for each propulsion engine. Engine display recommendations are provided based on pilot feedback during a guided post-evaluation interview. Battery state of charge and battery health display recommendations were collected from all airline crews. The simplified engine displays design was rated excellent as measured with a usability scale. Quantitative metrics include airspeed tracking, time to complete checklists, time to make diversion decisions and the quality of the diversion decision. Recommendations for future studies are documented with supporting research and current observations about upcoming flight deck certifications.

autothrottle↗

NASA NTRSDate not supplied

Flight Deck Design of a Hybrid Turbine/Electric Passenger Aircraft

NASA is exploring the development of a 180-passenger subsonic single engine aft turbine aircraft, The aft turbine provides electric power in a hybrid design to wing mounted electric engines, creating a highly efficient, high-bypass-ratio fan equivalent. The SUbsonic Single Aft eNgine (SUSAN) aircraft is being developed as a sustainable subsonic regional aircraft that seeks to reduce emission levels by 50% in the next few decades. Pilot-in-the-loop studies were conducted at the NASA Langley Research Center in Hampton, Virginia, to explore the flight deck design for the hybrid electric aircraft. Following modern trends in commercial aircraft flight decks with full time augmented controls and a quiet and dark philosophy, single throttle and simplified engine displays were developed for the SUSAN aircraft. The aircraft includes a single aft mounted turbine engine and 16 wing mounted electric fans. The final design was developed from feedback received during an earlier pilot-in-the-loop study where one, two, and three throttles were tested in standard airline operations, including various failures of the turbine and electric engines. Current flight deck designs normally provide control inceptors for each propulsion engine and an engine display for all primary aircraft engine parameters. With full time augmentation expected, a single throttle control with autothrottle always engaged, even during failures, is desired. Augmentation of flight controls using distributed thrust also requires full time control of the electric engines using automation. Additionally, electric engine thrust is augmented during climb based on battery state of charge. Thrust augmentation changes faster than human reaction time and therefore requires full-time automation. A pilot-in-the-loop study was conducted at the NASA Langley Research Center in Hampton, Virginia, to test the final design of the single throttle with simplified engine displays. Fourteen airline pilots evaluated the single throttle and engine display concept. Electric engine failures included one, four symmetric, and eight non-symmetric electric engine failures. The turbine engine was evaluated for complete and partial failure during critical phases of flight to include takeoff as well as enroute. Unexpected go-arounds increase workload and require significant throttle manipulation. Go-arounds were included to ensure the single throttle was usable for all phases of flight. Failures during takeoff required a return to the departure field and failures enroute required a diversion except for one and four electric engine failures as these failures did not affect aircraft flyability or range. There are currently no Part 25 aircraft certified with hybrid systems or electric engines with batteries as emergency propulsion. For turbine engine failures in the SUSAN aircraft design, range is limited to 30 minutes at full power. Battery state of charge and battery health displays were developed and tested for usability and to determine how well they supported pilot decisions for alternate airports during emergency diversions. Novel displays using shape and color were developed to provide immediate feedback when state of charge became critical. This paper details the pilot study including pilot feedback supporting the potential for increased automation and a single throttle control. Detailed recommendations are provided for a novel single throttle control and additional pilot controls to support selection of engines during start, shutdown, and engine troubleshooting procedures. This design deviates significantly from current practice of providing throttles for each propulsion engine. Engine display recommendations are provided based on pilot feedback during a guided post-evaluation interview. Battery state of charge and battery health display recommendations were collected from all airline crews. The simplified engine displays design was rated excellent as measured with a usability scale. Quantitative metrics include airspeed tracking, time to complete checklists, time to make diversion decisions and the quality of the diversion decision. Recommendations for future studies are documented with supporting research and current observations about upcoming flight deck certifications.

autothrottle↗