Survey of space flight safety systems
Space flight safety, discussing escape, rescue and survival design approaches for astronauts
Bolger, P. H.↗
SEARCH · Search NASA
Results for “Safety Design Approach”
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
Loads and low frequency dynamics - An ENVIRONET data base
The loads and low frequency dynamics data base, part of Environet, is described with particular attention given to its development and contents. The objective of the data base is to provide the payload designer with design approaches and design data to meet STS safety requirements. Currently the data base consists of the following sections: abstract, scope, glossary, requirements, interaction with other environments, summary of the loads analysis process, design considerations, guidelines for payload design loads, information data base, and references.
Garba, John A.↗
Nuclear electric propulsion operational reliability and crew safety study: NEP systems/modeling report
The objective of this study was to establish the initial quantitative reliability bounds for nuclear electric propulsion systems in a manned Mars mission required to ensure crew safety and mission success. Finding the reliability bounds involves balancing top-down (mission driven) requirements and bottom-up (technology driven) capabilities. In seeking this balance we hope to accomplish the following: (1) provide design insights into the achievability of the baseline design in terms of reliability requirements, given the existing technology base; (2) suggest alternative design approaches which might enhance reliability and crew safety; and (3) indicate what technology areas require significant research and development to achieve the reliability objectives.
Karns, James↗
Galileo and Ulysses missions safety analysis and launch readiness status
The Galileo spacecraft, which will release probes to explore the Jupiter system, was launched in October, 1989 as the payload on STS-34, and the Ulysses spacecraft, which will fly by Jupiter en route to a polar orbit of the sun, is presently entering system-test activity in preparation for an October, 1990 launch. This paper reviews the Galileo and Ulysses mission objectives and design approaches and presents details of the missions' safety analysis. The processes used to develop the safety analysis are described and the results of safety tests are presented.
Cork, M. Joseph↗
Space Station crew safety alternatives study. Volume 5: Space Station safety plan
The Space Station Safety Plan has been prepared as an adjunct to the subject contract final report, suggesting the tasks and implementation procedures to ensure that threats are addressed and resolution strategy options identified and incorporated into the space station program. The safety program's approach is to realize minimum risk exposure without levying undue design and operational constraints. Safety objectives and risk acceptances are discussed.
Mead, G. H.↗
Architecting Safer Autonomous Aviation Systems
The aviation literature gives relatively little guidance to practitioners about the specifics of architecting systems for safety, particularly the impact of architecture on allocating safety requirements, or the relative ease of system assurance resulting from system or subsystem level architectural choices. As an exemplar, this paper considers common architectural patterns used within traditional aviation systems and explores their safety and safety assurance implications when applied in the context of integrating artificial intelligence (AI) and machine learning (ML) based functionality. Considering safety as an architectural property, we discuss both the allocation of safety requirements and the architectural trade-offs involved early in the design lifecycle. This approach could be extended to other assured properties, similar to safety, such as security. We conclude with a discussion of the safety considerations that emerge in the context of candidate architectural patterns that have been proposed in the recent literature for enabling autonomy capabilities by integrating AI and ML. A recommendation is made for the generation of a property-driven architectural pattern catalogue.
Architecture patterns↗
Architecting Safer Autonomous Aviation Systems
The aviation literature gives relatively little guidance to practitioners about the specifics of architecting systems for safety, particularly the impact of architecture on allocating safety requirements, or the relative ease of system assurance resulting from system or subsystem level architectural choices. As an exemplar, this paper considers common architectural patterns used within traditional aviation systems and explores their safety and safety assurance implications when applied in the context of integrating artificial intelligence (AI) and machine learning (ML) based functionality. Considering safety as an architectural property, we discuss both the allocation of safety requirements and the architectural trade-offs involved early in the design lifecycle. This approach could be extended to other assured properties, similar to safety, such as security. We conclude with a discussion of the safety considerations that emerge in the context of candidate architectural patterns that have been proposed in the recent literature for enabling autonomy capabilities by integrating AI and ML. A recommendation is made for the generation of a property-driven architectural pattern catalogue.
Architecture patterns↗
Achieving Space Shuttle ATO Using the Five-Segment Booster (FSB)
As part of the continuing effort to identify approaches to improve the safety and reliability of the Space Shuttle system, a Five-Segment Booster (FSB) design was conceptualized as a replacement for the current Space Shuttle boosters. The FSB offers a simple, unique approach to improve astronaut safety and increase performance margin. To determine the feasibility of the FSB, a Phase A study effort was sponsored by NASA and directed by the Marshall Space Flight Center. This study was initiated in March of 1999 and completed in December of 2000. The basic objective of this study was to assess the feasibility of the FSB design concept and also estimate the cost and scope of a full-scale development program for the FSB. In order to ensure an effective and thorough evaluation of the FSB concept, four team members were put on contract to support various areas of importance in assessing the overall feasibility of the design approach.
Sauvageau, Donald R.↗
Design Tool Developed for Probabilistic Modeling of Ceramic Matrix Composite Strength
Ceramic matrix composites are being evaluated as candidate materials for many high temperature applications such as engine combustor liners for the High-Speed Civil Transport (HSCT). They are required to have an assured life of several thousand hours. Estimating the reliability of these components is quite a complex process and requires knowledge of the uncertainties that occur at various scales. The properties of ceramic matrix composites (CMC) are known to display a considerable amount of scatter due to variations in fiber/matrix properties, interphase/coating properties, bonding, amount of matrix voids, and many geometry- and fabrication-related parameters such as ply thickness and ply orientations. The objective of this research effort is to account for these uncertainties in a formal way by probabilistically analyzing both the stiffness- and strength related properties of CMC's. In current deterministic approaches, uncertainties are usually accounted for by safety factors. This approach often yields overly conservative designs, thereby reducing the potential of many advanced composite materials.
Murthy, Pappu L. N.↗
Challenges in Vehicle Safety and Occupant Protection for Autonomous Electric Vertical Take-Off and Landing (eVTOL) Vehicles
The burgeoning electric Vertical Take-off and Landing (eVTOL) vehicle industry has generated a significant level of enthusiasm amongst aviation designers, manufacturers and researchers. This industry is determined to change the urban transportation paradigm from traditional ground-based vehicles (cars, taxis, buses) to air-based eVTOL vehicles which can be summoned, much like how conventional taxi services work currently. These new eVTOL vehicles are designed to be small and lightweight and operate autonomously without user intervention. There are many unknowns as to how the industry will mature. The logistics of creating a completely new category of vehicle along with its own set of rules are complex, and there are many known - and unknown - barriers to overcome. Some (of many) known barriers include airspace management, ground logistics, physical space, and, the vehicle design itself. There are many eVTOL vehicle manufacturers and organizations working these problems presently. This report will focus on one major barrier: the level of safety as it pertains to the framework of eVTOL vehicles. A high level of safety is necessary for the vehicles to gain acceptance as the public adapts to these autonomous ride-sharing services. An overview of current levels of transportation safety and some extrapolation into how eVTOL vehicles might compare is first presented. Next, a discussion categorizing the major differences between Crash Prevention and Crash Mitigation as it pertains to eVTOL vehicle safety is included with identification of current deficiencies. The report then expands into a framework for specific ideas that could use Crash Mitigation to improve vehicle safety through a crashworthy systems level approach with several designs highlighted. Finally, a brief discussion into the regulatory approach and potential guidelines as they pertain to new eVTOL vehicles is presented. Accordingly, much of the supplemental data will be taken from sources pertaining to either General Aviation (GA) aircraft, rotorcraft, or transport category aircraft, due to the lack of overarching data from eVTOL vehicles. As of this writing, the European Aviation Safety Agency has released a draft version of a VTOL Special Condition, with a comment period closing in late 2018. It is assumed that eventual expected operations and anticipated future regulations for VTOL vehicles will consist of some combination of these (and other) sources.
Littell, Justin D.↗
An Approach for Defining IASMS Services, Functions, and Capabilities
Assuring safety in the NAS with the inclusion of new entrants, such as Advanced Air Mobility (AAM), will require overcoming unique safety challenges that result from combining innovative technologies with novel airspace concepts for moving people and cargo using autonomous vehicles. The focus of the In-time Aviation Safety Management System (IASMS) is to overcome AAM’s safety assurance challenges. The IASMS Concept of Operations (ConOps) describes an interconnected set of services, functions, and capabilities (SFCs) designed to manage operational risks, identify unknown risks, and inform system designs. This paper describes an approach for defining SFCs based on technology trends in research, assessment of known and unknown risks in voluntary safety reports, and causal and contributing factors in aviation accidents and incidents. This approach would identify potential SFCs that further expand the Monitor, Assess, and Mitigate (M-A-M) functionality that represents the enabling framework of the IASMS. Safety implications that will result from integration of AAM in the transformation of the National Airspace System (NAS) were addressed in National Academies committees reports on AAM and IASMS. Development of a ConOps for IASMS was a top recommendation and can be represented as a reframing of safety assurance that builds on real-time alerting such as the Traffic Alert and Collision Avoidance System, and adds the more encompassing in-time temporal parameter in recognition of the different timelines for collecting and assessing safety data for risk mitigations. For example, mining for safety trends from data sources such as the Aviation Safety Information Analysis and Sharing system occurs over a longer time period. Research on AAM operations poses that SFCs can be designed to monitor the safety margin appropriate for AAM including with regards to the distance between current flight parameters and nominal ideal conditions. These in-time comparisons will become more complex as the density of operations increases at least in certain areas and can include planned and actual 4D trajectory, and in-time comparisons having implications on conflict modeling and prediction including expected and actual departure time, fix/waypoint crossing times, and arrival time. These comparisons would be integrated as part of SFCs that redefine and inform new safety margin. An increased safety margin improves management of operational risks while reducing the potential for anomalies. An increased safety margin also has implications for operator confidence in the certainty of its operations and trust in automation. Technology trends in research could be used to refine existing SFCs and define needs for additional SFCs that provide safety improvements to the design and operation of vehicles, airspace design, and operator performance requirements. NASA is developing innovative approaches to safeguard against major accidents and incidents that have occurred in the NAS and those anticipated with the inclusion of envisioned AAM operations. The innovations use operational performance data to monitor, detect, and predict flight variations exceeding safe nominal patterns, such as would be caused by navigational error, severe weather complications, or hijacking of UAS controls. These innovative approaches have high potential to prevent accidents and incidents in the new AAM era. It is anticipated that elements of the innovations will evolve into SFCs for the IASMS. Voluntary safety reports can be monitored to identify anomalies related to design or operational performance risks. Reports could be periodically monitored and assessed for specific topics. Reports might serve as weak signals or precursors indicative of emergent risk such as when combined with other safety information. The architecture could include SFCs that are based on voluntary safety reports recognizing the periodic temporal nature of data analysis. As previously mentioned, aviation accidents with their causal and contributing precursors can inform the need for SFCs in the IASMS. Accidents and incidents at San Francisco International Airport such as Asiana 214 and Air Canada 759 illustrate how combinations of different factors lead to increased risk. These types of precursors and different factors have implications on the types of SFCs that could be needed to monitor and manage different sources and types of design and operational risk. Continuing to assure the safety of AAM as designs and operations gain in complexity can be accompanied by defining SFCs that also increase in complexity. These SFCs can leverage information from findings and recommendations synthesized across on-going research, voluntary safety reports, and accident and incident reports. These SFCs can serve to refine accuracy of algorithms and resolve limitations with current practices. The IASMS architecture represents the framework for the SFCs and their critical role in safety assurance.
In-Time Aviation Safety Management System↗
A Safety-Driven Approach to Exploring and Comparing Air Traffic Management Concepts for Enabling Urban Air Mobility
There is broad recognition that the high tempo and density of Urban Air Mobility (UAM) operations will require identifying new Air Traffic Management (ATM) concepts to safely integrate UAM air traffic into the airspace alongside existing air traffic. However, the simulation models used to compare ATM concepts today are difficult to apply during the early stages of concept development and do not offer enough support in identifying potential new concepts. In addition, they have limited ability to evaluate ATM concepts in terms of safety, security, and other key emergent properties. Instead of using simulation to evaluate ATM concepts, this paper demonstrates how a safety-driven systems engineering approach based on Systems-Theoretic Accident Model and Processes (STAMP) can be used to design properties such as safety into an ATM system from the earliest stages of development. Using a hazard analysis technique called Systems-Theoretic Process Analysis (STPA), system requirements and the desired ATM behavior are derived. As an example, two possible ATM concepts to implement that behavior are compared to identify their safety-related benefits and tradeoffs. This new approach enables (1) systematic exploration of alternative ATM concepts and (2) identification of the safety-related tradeoffs between concepts as early as possible in the development process.
system safety↗
Space shuttle external tank performance improvements: The challenge
The external tank (ET) has been actively involved in performance improvements since the inception of the space shuttle program, primarily by weight savings. Weight savings were realized on the first block of flight articles (standard weight tank). With a need for further performance improvements, the ET Program Office was requested to develop a program to reduce tank weight an additional 6000 lb and schedule delivery of the first lightweight ET (LWT) for June 1982. The weight savings program was accomplished by: (1) a unique approach to use of factors of safety; (2) design optimization; and (3) redesign of structures with large margins of safety which resulted in an actual weight savings of 7294 lb. Additional studies have identified further weight savings which are to be implemented at appropriate times in production flow. Examples are an improved thermal protection system for the LH2 tank aft dome and reduction of slosh baffles in the LO2 tank based on flight data. All performance improvements were compared and selected based on non-recurring and recurring cost and technical risk.
Coldwater, H. R.↗
Development and Testing of a High Stability Engine Control (HISTEC) System
Flight tests were recently completed to demonstrate an inlet-distortion-tolerant engine control system. These flight tests were part of NASA's High Stability Engine Control (HISTEC) program. The objective of the HISTEC program was to design, develop, and flight demonstrate an advanced integrated engine control system that uses measurement-based, real-time estimates of inlet airflow distortion to enhance engine stability. With improved stability and tolerance of inlet airflow distortion, future engine designs may benefit from a reduction in design stall-margin requirements and enhanced reliability, with a corresponding increase in performance and decrease in fuel consumption. This paper describes the HISTEC methodology, presents an aircraft test bed description (including HISTEC-specific modifications) and verification and validation ground tests. Additionally, flight test safety considerations, test plan and technique design and approach, and flight operations are addressed. Some illustrative results are presented to demonstrate the type of analysis and results produced from the flight test program.
Orme, John S.↗
Impact Behavior of Composite Fan Blade Leading Edge Subcomponent with Thermoplastic Polyurethane Interleave
Impact damage tolerance and damage resistance is a critical metric for application of polymer matrix composites where failure caused by impact damage could compromise structural performance and safety. As a result, several materials and/or design approaches to improve impact damage tolerance have been investigated over the past several decades. Many composite toughening methodologies impart a trade-off between increased fracture toughness and compromised in-plane strength and modulus. In large part, mechanical tests to evaluate composite damage tolerance include static methods such as Mode I, Mode II, and mixed mode failures. However, ballistic impact damage resistance does not always correlate with static properties. The intent of this paper is to evaluate the influence of a thermoplastic polyurethane veil interleave on the static and dynamic performance of composite test articles. Static coupon tests included tension, compression, double cantilever beam, and end notch flexure. Measurement of the resistance to ballistic impact damage were made to evaluate the composites response to high speed impact. The interlayer material showed a decrease of in-plane performance with only a moderate improvement to Mode I and Mode II fracture toughness. However, significant benefit to impact damage tolerance was observed through ballistic tests.
Damage Tolerance↗
Airborne Trajectory Management for Urban Air Mobility
Urban Air Mobility (UAM) has captured the imagination of the public and the aviation industry for someday soon moving people and goods through and around metropolitan areas using Unmanned Aircraft Systems (UAS) that are electrically powered, environmentally friendly, and autonomously operated. Significant investment and rapid development of vehicles for this activity is taking place, with package delivery services already beginning in some areas. However, the ability to manage thousands of these vehicles safely in a congested urban area presents a challenge unprecedented in air traffic management. Initial studies of this problem led by NASA under the UAS Traffic Management (UTM) initiative have primarily focused on geo-fencing and centralized reservation of airspace for individual flights. This paper proposes an extension of UTM using a de-centralized approach employing airborne surveillance, self-separation, and a minimized “design separation” approach to permit the optimization and safety of each flight in very high traffic densities and close proximities. The concept employs Airborne Trajectory Management (ABTM) principles and a novel new concept for variable separation criteria to manage the angular velocity of a passing vehicle, thus eliminating the "startle factor" and perceived hazard of very close operations. ABTM also accomplishes most of the services required for safe planning and execution of normal flights and recovery from abnormal or emergency operations while accommodating conventional piloted flights using the current air traffic control paradigm. The environment for UAM operations is described along with the proposed means for autonomous, tactical separation of the vehicles. Sample geometries of traffic conflicts and resolutions are shown and the airspace definitions, rules for flight within them, and additions and exemptions to the rules for these flights are listed and explained.
Cotton, William↗
Full Lunar Surface Visualization and Simulation Platform
This project created a visualization and simulation software platform for the entire lunar surface. Given the polar Artemis landing targets, the challenging terrain, lighting, and associated integrated crew / vehicle risk assessment, a more integrated approach to mission safety certification, potentially impacting equipment design and crew activity is required. This integrated capability will enable Safety and Mission Assurance (SMA), Flight Operations (FOD), and EVA to effectively collaborate to reduce human lunar exploration operational risk utilizing the identical tools to perform mission planning, rehearsal simulations, and providing the Safety Review Panel with integrated risk analysis capability.
information fusion↗
Space Station Freedom Program preliminary design review process
To conduct the Program Requirements Review of the Space Station Freedom, a Preliminary Design Review Board (PDR) has been established. The PDR will assess the preliminary design of the assembled manned base including the assembly process, the launch, and on-orbit stage configuration, the design approach, the on-orbit verification plans, supportability, reliability, safety, interfaces with the NASA infrastructure (the NSTS, TDRSS, and Ground operations) and international partners. Issues such as the coordination of a common interpretation of design requirements, coordination of interfaces, and convergence of design perspectives vs. proper allocation of resources are discussed. The impact of the resolution of the secondary ripple effect of design decisions which may cause programmatic difficulties is also addressed.
Carlise, R. F.↗