Search NASASearch

SEARCH · Search NASA

Results for “fail operational”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 55 records · Page 3

Failure detection and isolation investigation for strapdown skew redundant tetrad laser gyro inertial sensor arrays

The degree to which flight-critical failures in a strapdown laser gyro tetrad sensor assembly can be isolated in short-haul aircraft after a failure occurrence has been detected by the skewed sensor failure-detection voting logic is investigated along with the degree to which a failure in the tetrad computer can be detected and isolated at the computer level, assuming a dual-redundant computer configuration. The tetrad system was mechanized with two two-axis inertial navigation channels (INCs), each containing two gyro/accelerometer axes, computer, control circuitry, and input/output circuitry. Gyro/accelerometer data is crossfed between the two INCs to enable each computer to independently perform the navigation task. Computer calculations are synchronized between the computers so that calculated quantities are identical and may be compared. Fail-safe performance (identification of the first failure) is accomplished with a probability approaching 100 percent of the time, while fail-operational performance (identification and isolation of the first failure) is achieved 93 to 96 percent of the time.

Eberlein, A. J.

Design and test experience with a triply redundant digital fly-by-wire control system

A triplex digital fly-by-wire flight control system was developed and then installed in a NASA F-8C aircraft to provide fail-operative, full authority control. Hardware and software redundancy management techniques were designed to detect and identify failures in the system. Control functions typical of those projected for future actively controlled vehicles were implemented. This paper describes the principal design features of the system, the implementation of computer, sensor, and actuator redundancy management, and the ground test results. An automated test program to verify sensor redundancy management software is also described.

Szalai, K. J.

Flight-control/navigation inertial reference system

The preliminary design of a redundant strapdown navigation system for integrated flight-control/navigation use has been completed. Based on application of tuned-gimbal gyros, a compact configuration (13 in x 13 in x 14 in) has been achieved for fail-operational/fail-operational redundancy. Test data are presented for strapdown system test programs including flight testing of the LN-50 tuned-gimbal gyro system. Testing of a redundant sensor configuration is currently in process. Strapdown gyro development also includes ring laser and nuclear magnetic resonance techniques.

Ebner, R. E.

Integrity in flight control systems

In connection with advances in technology, mainly in the electronic area, aircraft flight control applications have evolved from simple pilot-relief autopilots to flight-critical and redundant fly-by-wire and active control systems. For flight-critical implementations which required accommodation of inflight failures, additional levels of redundancy were incorporated to provide fail-safe and fail-operative performance. The current status of flight control systems reliability is examined and high-reliability approaches are discussed. Attention is given to the design of ring laser gyros and magnetohydrodynamic rate sensors, redundancy configurations for component failure protection, improvements of hydraulic actuators made on the component level, integrated actuators, problems of software reliability, lightning considerations, and failure detection methods for component and system failures.

Kurzhals, P. R.

Developing, mechanizing and testing of a digital active flutter suppression system for a modified B-52 wind-tunnel model

A digital flutter suppression system was developed and mechanized for a significantly modified version of the 1/30-scale B-52E aeroelastic wind tunnel model. A model configuration was identified that produced symmetric and antisymmetric flutter modes that occur at 2873N/sq m (60 psf) dynamic pressure with violent onset. The flutter suppression system, using one trailing edge control surface and the accelerometers on each wing, extended the flutter dynamic pressure of the model beyond the design limit of 4788N/sq m (100 psf). The hardware and software required to implement the flutter suppression system were designed and mechanized using digital computers in a fail-operate configuration. The model equipped with the system was tested in the Transonic Dynamics Tunnel at NASA Langley Research Center and results showed the flutter dynamic pressure of the model was extended beyond 4884N/sq m (102 psf).

Matthew, J. R.

Ground and flight test experience with a triple redundant digital fly by wire control system

A triplex digital fly by wire flight control system was developed and installed in an F-8C aircraft to provide fail operative, full authority control. Hardware and software redundancy management techniques were designed to detect and identify failures in the system. Control functions typical of those projected for future actively controlled vehicles were implemented.

Jarvis, C. R.

Reliability analysis and fault-tolerant system development for a redundant strapdown inertial measurement unit

A methodology is developed and applied for quantitatively analyzing the reliability of a dual, fail-operational redundant strapdown inertial measurement unit (RSDIMU). A Markov evaluation model is defined in terms of the operational states of the RSDIMU to predict system reliability. A 27 state model is defined based upon a candidate redundancy management system which can detect and isolate a spectrum of failure magnitudes. The results of parametric studies are presented which show the effect on reliability of the gyro failure rate, both the gyro and accelerometer failure rates together, false alarms, probability of failure detection, probability of failure isolation, and probability of damage effects and mission time. A technique is developed and evaluated for generating dynamic thresholds for detecting and isolating failures of the dual, separated IMU. Special emphasis is given to the detection of multiple, nonconcurrent failures. Digital simulation time histories are presented which show the thresholds obtained and their effectiveness in detecting and isolating sensor failures.

Motyka, P.

Flight test configuration for verifying inertial sensor redundancy management techniques

The Redundant Strapdown Inertial Measurement Unit presently tested in flight configuration consists of a semioctahedral array of four dynamically tuned, two-degree-of-freedom (TDOF) gyros and four TDOF accelerometers which can provide dual, fail-operational performance for integrated avionics systems. Attention is given to the multilevel algorithm used for the detection and isolation of three ranges of sensor failure in an integrated avionics context. A technique for the generation of accelerometer and gyro error thresholds which is sensitive to dynamic sensor errors and separation effects is presented, together with simulation results. Emphasis is placed on the ensuring of highly reliable data for flight control/navigation functions, while minimizing false or missed alarms.

Bryant, W. H.

Flight test results of a vector-based failure detection and isolation algorithm for a redundant strapdown inertial measurement unit

Flight test results of a vector-based fault-tolerant algorithm for a redundant strapdown inertial measurement unit are presented. Because the inertial sensors provide flight-critical information for flight control and navigation, failure detection and isolation is developed in terms of a multi-level structure. Threshold compensation techniques for gyros and accelerometers, developed to enhance the sensitivity of the failure detection process to low-level failures, are presented. Four flight tests, conducted in a commercial transport type environment, were used to determine the ability of the failure detection and isolation algorithm to detect failure signals, such a hard-over, null, or bias shifts. The algorithm provided timely detection and correct isolation of flight control- and low-level failures. The flight tests of the vector-based algorithm demonstrated its capability to provide false alarm free dual fail-operational performance for the skewed array of inertial sensors.

Morrell, F. R.

Flight demonstration of redundancy management algorithms for a skewed array of inertial sensors

Flight test results for two fault-tolerance algorithms developed for a redundant strapdown inertial measurement unit consisting of four 2-DOF gyros and accelerometers mounted on the faces of a semioctahedron are presented. Although both algorithms provided timely detection and isolation of flight control level failures, the generalized likelihood test algorithm provided more timely detection and isolation of low-level sensor failures than the edge vector test algorithm. The generalized likelihood test produced a false isolation for the case of a dual low-level failure applied to the sensitive axes of an accelerometer. Both of the algorithms were shown to provide dual fail-operational performance for the skewed array of inertial sensors.

Morrell, F. R.

Quadruplex digital flight control system assessment

Described are the development and validation of a double fail-operational digital flight control system architecture for critical pitch axis functions. Architectural tradeoffs are assessed, system simulator modifications are described, and demonstration testing results are critiqued. Assessment tools and their application are also illustrated. Ultimately, the vital role of system simulation, tailored to digital mechanization attributes, is shown to be essential to validating the airworthiness of full-time critical functions such as augmented fly-by-wire systems for relaxed static stability airplanes.

Mulcare, D. B.

Independent Orbiter Assessment (IOA): Analysis of the nose wheel steering subsystem

The results of the Independent Orbiter Assessment (IOA) of the Failure Modes and Effects Analysis (FMEA) and Critical Items List (CIL) are presented. The IOA approach features a top-down analysis of the hardware to determine failure modes, criticality, and potential critical items. To preserve independence, this analysis was accomplished without reliance upon the results contained within the NASA FMEA/CIL documentation. The independent analysis results for the Orbiter Nose Wheel Steering (NWS) hardware are documented. The NWS hardware provides primary directional control for the Orbiter vehicle during landing rollout. Each level of hardware was evaluated and analyzed for possible failure modes and effects. Criticality was assigned based upon the severity of the effect for each failure mode. The original NWS design was envisioned as a backup system to differential braking for directional control of the Orbiter during landing rollout. No real effort was made to design the NWS system as fail operational. The brakes have much redundancy built into their design but the poor brake/tire performance has forced the NSTS to upgrade NWS to the primary mode of directional control during rollout. As a result, a large percentage of the NWS system components have become Potential Critical Items (PCI).

Mediavilla, Anthony Scott

Fault tolerant capabilities of the Cosmic Background Explorer attitude control system

The Cosmic Background Explorer (COBE), which was launched November 18, 1989 from Vandenberg Air Force Base aboard a Delta rocket, has been classified by the scientific community as a major success with regards to the field of cosmology theory. Despite a number of anomalies which have occurred during the mission, the attitude control system (ACS) has performed remarkably well. This is due in large part to the fault tolerant capabilities that were designed into the ACS. A unique triaxial control system orientated in the spacecraft's transverse plane provides the ACS the ability to safely survive various sensor and actuator failures. Features that help to achieve this fail-operational system include component cross-strapping and autonomous control electronics switching. This design philosophy was of utmost importance because of the constraint placed upon the ACS to keep the spinning observatory and its cryogen-cooled science instruments pointing away from the sun. Even though the liquid helium was depleted within the expected twelve months from launch, it is still very much desirable to avoid any thermal disturbances upon the remaining functional instruments.

Placanica, Samuel J.

Analytical Assessment of the Reciprocating Feed System

A preliminary analysis tool has been created in Microsoft Excel to determine deliverable payload mass, total system mass, and performance of spacecraft systems using various types of propellant feed systems. These mass estimates are conducted by inserting into the user interface the basic mission parameters (e.g., thrust, burn time, specific impulse, mixture ratio, etc.), system architecture (e.g., propulsion system type and characteristics, propellants, pressurization system type, etc.), and design properties (e.g., material properties, safety factors, etc.). Different propellant feed and pressurization systems are available for comparison in the program. This gives the user the ability to compare conventional pressure fed, reciprocating feed system (RFS), autogenous pressurization thrust augmentation (APTA RFS), and turbopump systems with the deliverable payload, inert mass, and total system mass being the primary comparison metrics. Analyses of several types of missions and spacecraft were conducted and it was found that the RFS offers a performance improvement, especially in terms of delivered payload, over conventional pressure fed systems. Furthermore, it is competitive with a turbopump system at low to moderate chamber pressures, up to approximately 1,500 psi. Various example cases estimating the system mass and deliverable payload of several types of spacecraft are presented that illustrate the potential system performance advantages of the RFS. In addition, a reliability assessment of the RFS was conducted, comparing it to simplified conventional pressure fed and turbopump systems, based on MIL-STD 756B; these results showed that the RFS offers higher reliability, and thus substantially longer periods between system refurbishment, than turbopump systems, and is competitive with conventional pressure fed systems. This is primarily the result of the intrinsic RFS fail-operational capability with three run tanks, since the system can operate with just two run tanks.

Eddleman, David E.

Blended Wing Body (BWB) Boundary Layer Ingestion (BLI) Inlet Configuration and System Studies

A study was conducted to determine the potential reduction in fuel burned for BLI (boundary layer ingestion) inlets on a BWB (blended wing body) airplane employing AFC (active flow control). The BWB is a revolutionary type airplane configuration with engines on the aft upper surface where thick boundary layer offers the greatest opportunity for ram drag reduction. AFC is an emerging technology for boundary layer control. Several BLI inlet configurations were analyzed in the NASA-developed RANS Overflow CFD code. The study determined that, while large reductions in ram drag result from BLI, lower inlet pressure recovery produces engine performance penalties that largely offset this ram drag reduction. AFC could, however, enable a short BLI inlet that allows surface mounting of the engine which, when coupled with a short diffuser, would significantly reduce drag and weight for a potential 10% reduction in fuel burned. Continuing studies are therefore recommended to achieve this reduction in fuel burned considering the use of more modest amounts of BLI coupled with both AFC and PFC (Passive Flow Control) to produce a fail-operational system.

Kawai, Ronald T.

Impact of Pilot Delay and Non-Responsiveness on the Safety Performance of Airborne Separation

Assessing the safety effects of prediction errors and uncertainty on automationsupported functions in the Next Generation Air Transportation System concept of operations is of foremost importance, particularly safety critical functions such as separation that involve human decision-making. Both ground-based and airborne, the automation of separation functions must be designed to account for, and mitigate the impact of, information uncertainty and varying human response. This paper describes an experiment that addresses the potential impact of operator delay when interacting with separation support systems. In this study, we evaluated an airborne separation capability operated by a simulated pilot. The experimental runs are part of the Safety Performance of Airborne Separation (SPAS) experiment suite that examines the safety implications of prediction errors and system uncertainties on airborne separation assistance systems. Pilot actions required by the airborne separation automation to resolve traffic conflicts were delayed within a wide range, varying from five to 240 seconds while a percentage of randomly selected pilots were programmed to completely miss the conflict alerts and therefore take no action. Results indicate that the strategicAirborne Separation Assistance System (ASAS) functions exercised in the experiment can sustain pilot response delays of up to 90 seconds and more, depending on the traffic density. However, when pilots or operators fail to respond to conflict alerts the safety effects are substantial, particularly at higher traffic densities.

Consiglio, Maria

The Applied Meteorology Unit: Nineteen Years Successfully Transitioning Research Into Operations for America's Space Program

The Applied Meteorology Unit (AMU) provides technology development and transition services to improve operational weather support to America's space program . The AMU was founded in 1991 and operates under a triagency Memorandum of Understanding (MOU) between the National Aeronautics and Space Administration (NASA), the United States Air Force (USAF) and the National Weather Service (NWS) (Ernst and Merceret, 1995). It is colocated with the 45th Weather Squadron (45WS) at Cape Canaveral Air Force Station (CCAFS) and funded by the Space Shuttle Program . Its primary customers are the 45WS, the Spaceflight Meteorology Group (SMG) operated for NASA by the NWS at the Johnson Space Center (JSC) in Houston, TX, and the NWS forecast office in Melbourne, FL (MLB). The gap between research and operations is well known. All too frequently, the process of transitioning research to operations fails for various reasons. The mission of the AMU is in essence to bridge this gap for America's space program.

Madura, John T.