Search NASASearch

SEARCH · Search NASA

Results for “protocol validation”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 55 records · Page 3

Fifteen-minute Extravehicular Activity Prebreathe Protocol Using NASA's Exploration Atmosphere (8.2 psia/ 34% 02)

A TBDM DCS probability model based on an existing biophysical model of inert gas bubble growth provides significant prediction and goodness-of-fit with 84 cases of DCS in 668 human altitude exposures. 2. Model predictions suggest that 15-minute O2 prebreathe protocols used in conjunction with suit ports and an 8.2 psi, 34% O2, 66% N2 atmosphere may enable rapid EVA capability for future exploration missions with the risk of DCS ≤ 12%.  EVA could begin immediately at 6.0 psi, with crewmembers decreasing suit pressure to 4.3 psi after completing the 15-minute in-suit prebreathe. 3. Model predictions suggest that intermittent recompression during exploration EVA may reduce decompression stress by 1.8% to 2.3% for 6 hours of total EVA time. Savings in gas consumables and crew time may be accumulated by abbreviating the EVA suit N2 purge to 2 minutes (20% N2) compared with 8 minutes (5% N2) at the expense of an increase in estimated decompression risk of up to 2.4% for an 8-hour EVA.  Increased DCS risk could be offset by IR or by spending additional time at 6 psi at the beginning of the EVA.  Savings of 0.48 lb of gas and 6 minutes per person per EVA corresponds to more than 31 hours of crew time and 1800 lb of gas and tankage under the Constellation lunar architecture. 6. Further research is needed to characterize and optimize breathing mixtures and intermittent recompression across the range of environments and operational conditions in which astronauts will live and work during future exploration missions. 7. Development of exploration prebreathe protocols will begin with definition of acceptable risk, followed by development of protocols based on models such as ours, and, ultimately, validation of protocols through ground trials before operational implementation.

Abercromby, Andrew F. J.

Human Trials of a 2-Hour Prebreathe Protocol

We evaluate 2-hour prebreathe protocols combining simulated microgravity and exercise during prebreathe with the objective of validating a protocol for use on International Space Station (ISS). The protocol was tested with four different exercise doses during prebreathe in a multi-center trial involving three laboratories. Subject selection, Doppler monitoring techniques for venous gas emboli (VGE), test termination criteria, and definitions of decompression sickness (DCS) were standardized in all laboratories. The Phase II protocol met the accept criteria for a prebreathe procedure for use by astronauts during assembly and maintenance of the ISS Dual-cycle ergometry or light exercise individually was not sufficient to protect against DCS at acceptable levels. The combination of both was successful.

Butler, Bruce D.

Enhanced Characterization of Microorganisms in the Spacecraft Environment

Spacecraft such as the International Space Station (ISS) and the space shuttles are enclosed environments where crewmembers may spend long periods of time. Currently, crewmembers spend approximately a period of 6 months in the ISS. It is known that these prolonged stays in space may result in weakening of the immune system. Therefore, exposure to opportunistic pathogens or high concentrations of environmental microorganisms may compromise the health of the crew. The detection of biocontaminants in spacecraft environments utilizes culture-based methodology, omitting greater than 90% of all microorganisms including pathogens such as Legionella and Cryptosporidium. Culturable bacteria and fungi have been the only allergens studied; the more potent allergens, such as those from dust mites, have never been tested for in spacecraft environments. In addition, no attempts have been made to monitor microbial toxins in spacecrafts. The present study utilized quantitative polymerase chain reaction (QPCR) as a novel approach for monitoring microorganisms in the spacecraft environment. QPCR is a molecular biology technique that does not rely on the physiological state of the organisms for identification, thereby enabling detection of both culturable and non-culturable organisms. In this project, specific molecular primers and probes were utilized for the detection and quantitation of two fungi of concern in indoor environments, Aspergillus fumigatus and Stachybotrys chartarum. These organisms were selected because of the availability of PCR primers and probes, and to establish the sample processing and analysis methodology that may be employed with additional organisms. Purification methods and QPCR assays were optimized for the detection of these organisms in air, surface, and water; and sample processing and analysis protocols were developed. Preliminary validation of these protocols was conducted in the laboratory with air, surface, and water samples seeded with known concentrations of the target organisms. Additional studies were conducted with bulk materials (HEPA filter pleats and particulate found on the filter screen) obtained from the ISS.

Cruz, Patricia

Nasa Exploration Atmosphere Tests 3 & 4: Development and Validation of Planetary Extravehicular Activity Prebreathe Protocols for Alternate Atmospheres and Suit Pressures

INTRODUCTION: Space suits operate at low pressures to optimize astronauts’ performance. The drop in pressure from the habitat environment to the suit carries a risk of decompression sickness (DCS), which is mitigated by a 95% O2 prebreathe protocol. Prebreathe protocols for the lunar surface have a significantly higher risk compared to International Space Station microgravity Extravehicular Activities (EVA). In previous studies, we validated a prebreathe protocol from a 56.5 kPa 34% O2 cabin to a 29.6 kPa EVA pressure; however, the enriched oxygen cabin environment poses a flammability risk that requires significant changes to material design and selections. Here, we report outcomes for prebreathe protocols from a sub-30% O2 cabin and associated changes necessary to control DCS risk critical to upcoming lunar missions. METHODS: Fourteen volunteers completed 11-day hypobaric chamber studies with an “alternate exploration atmosphere” of 66.2kPa, 28.5% O2. Subjects acclimated for 48 hrs and then participated in five 6-hour simulated EVAs at 29.6 or 35.6kPa, 95% O2. Prior to EVA, subjects underwent a 20, 90, or 150-minute prebreathe. The EVA simulation was designed to be representative of future planetary EVAs, proportionate to the subject’s VO2max. Decompression stress was monitored by real-time doppler and echocardiograph alternating every 15 min, as well as clinical monitoring for DCS signs/symptoms. Venous gas emboli (VGE) and DCS outcomes were verified against NASA-STD-3001 acceptance criteria. RESULTS AND DISCUSSION: Venous gas emboli (VGE) were identified during all EVAs. A neurological DCS case was identified in the 90-min/29.6kPa prebreathe, terminating further testing of this protocol. No DCS cases were identified in the 150 min/29.6kPa protocol. The 20 min/36.5kPa protocol was rejected due to a Type II DCS case. All DCS symptoms resolved with treatment, with no sequelae post initial treatment of DCS. These various test points highlighted to the significant benefit of elevated suit pressure to shorten prebreathe protocols, but also the difficulty in assessing and managing DCS during sustained EVA operations in remote planetary surfaces.

decompression sickness

Cost-Benefit Analysis for Alternatives to Aliphatic Isocyanate Polyurethanes

NASA and Air Force Space Command (AFSPC) have similar missions and therefore similar facilities and structures in similar environments. The standard practice for protecting metallic substrates in atmospheric environments is the application of an applied coating system. The most common topcoats used in coating systems are polyurethanes that contain isocyanates. Isocyanates are classified as potential human carcinogens and are known to cause cancer in animals. The primary objective of this effort was to demonstrate and validate alternatives to aliphatic isocyanate polyurethanes resulting in one or more isocyanate-free coatings qualified for use at AFSPC and NASA installations participating in this project. This Cost-Benefit Analysis (CBA) quantifies the estimated capital and process costs of coating alternatives and cost savings relative to the current coatings. The estimates in this CBA are to be used for assessing the relative merits of the selected alternatives. The actual economic effects at any specific facility will depend on the alternative material or technology implemented, the number of actual applications converted, future workloads, and other factors . The participants initially considered eighteen (18) alternative coatings as described in the Potential Alternatives Report entitled Potential Alternatives Report for Validation of Alternatives to Aliphatic Isocyanate Polyurethanes, prepared by ITB. Of those, 8 alternatives were selected for testing in accordance with the Joint Test Protocol entitled Joint Test Protocol for Validation of Alternatives to Aliphatic Isocyanate Polyurethanes, and the Field Test Plan entitled Field Evaluations Test Plan for Validation of Alternatives 10 Aliphatic Isocyanate Polyurethanes, both of which were prepared by ITB. A joint Test Report entitled Joint Test Report for Validation of Alternatives to Aliphatic Isocyanate Polyurethanes, prepared by ITB, documents the results of the laboratory and field testing, as well as any test modifications made during the execution of the testing. The coatings selected for evaluation in this CBA are shown in the table below. Only one control coating system is considered in this analysis. These coatings were either downselected for Phase II or performed well enough to be included in the Qualified Products List in the NASA technical standard NASA-STD-5008, Protective Coating of Carbon Steel, Stainless Steel, and Aluminum on Launch Structures, Facilities, and Ground Support Equipment.

Lewis, Pattie

OSI-compatible protocols for mobile-satellite communications: The AMSS experience

The protocol structure of the international aeronautical mobile satellite service (AMSS) is reviewed with emphasis on those aspects of protocol performance, validation, and conformance which are peculiar to mobile services. This is in part an analysis of what can be learned from the AMSS experience with protocols which is relevant to the design of other mobile satellite data networks, e.g., land mobile.

Moher, Michael

Directional and polarimetric effects in the optical domain

Papers focused on land surface, atmospheric, and ocean properties are reported. Specific comments pertaining to polarization, models and inversion, and measurements, are given. Recommendations are: continued research into the application potential of the BRDF (Bidirectional Reflectance Distribution Function) and polarization properties of ground surface and atmospheric targets; three dimensional models, which account for the statistical behavior of remotely sensed data, should be extended and inverted in order to support analysis of data potentially covering rolling terrain such that pixels represent heterogeneous mixtures of surface cover types and project ground footprints with sizes between 10 to 6 km, the ground pixel sizes of planned future sensors; available reflectance models should be further validated by means of multi dimensional (directional, spectral, temporal) field data and existing models should be intercompared in more depth to evaluate their performance and limitations; existing methods for model inversion should be validated in more depth in order to quantify the practical limitations and the expected accuracy of the parameters retrieved and new approaches should be developed based upon apriori knowledge of plant canopy development and spectral BRDF properties; there is a need to establish a protocol of validation and intercomparison of the indices and compositing techniques which have been proposed during these last years.

Vanderbilt, V. C.

Temporal Changes in Astronauts’ Muscle and Cardiorespiratory Physiology Before, During, and After Spaceflight

Background: NASA’s planned space exploration missions will require astronauts to safely perform extravehicular activity (EVA) and to safely egress vehicles in a variety of landing scenarios. Prolonged exposure to spaceflight can diminish tolerance for physical activity, decrease cardiovascular and sensorimotor function, cause loss of bone mineral density, as well as reduced muscle mass and strength. Although exercise can mitigate these spaceflight-induced physiological decrements, little is known regarding the time-course of changes in muscle and aerobic performance during spaceflight. Furthermore, these exercise countermeasures are not fully protective. For example, maximal aerobic capacity (VO2pk), lower body muscle cross-sectional area, and strength decrease by about 10% to 15% after short- (≈14 days) and long-duration (≈6 months) missions on the International Space Station (ISS). Future space missions longer in duration and further from Earth will employ exploration vehicles that will have exercise hardware with less robust and more constrained exercise capabilities than of those available on the ISS. Thus, countermeasures will need to be optimized to protect crew health and performance on exploration-class missions lasting up to 3 years. This requires a more detailed understanding of the dynamic effects of spaceflight on human health and performance, the ability of exercise to protect against this deconditioning, and the interaction of exercise with interrelated factors like nutrition, sleep, and environmental conditions. Methods: We will use standardized research and medical testing protocols previously validated in 1g and microgravity to quantify the time course and the inter-individual variability of changes in physical performance, including cardiorespiratory fitness and muscle strength and endurance, before, during, and after spaceflight missions lasting 2 months, 6 months, and 1 year. Additionally, we will use an extrapolation model to predict changes associated with multi-year exploration missions. Additionally, we will monitor in-flight exercise, nutrition, and sleep using in-flight assessment tools. Significance: Our testing protocols will provide valuable information for determining time course of change and the interindividual variability of spaceflight-induced deconditioning of aerobic capacity and muscle strength and endurance over the course of spaceflight missions up to and beyond 1 year. This information will be vital to assess whether humans can be physically ready for deep space exploration, such as on a mission to Mars, using current technology, or if additional mitigation strategies are necessary.

N Strock

Temporal Changes in Astronauts’ Muscle and Cardiorespiratory Physiology Before, During and After Spaceflight

Background: NASA’s planned space exploration missions will require astronauts to safely perform extravehicular activity (EVA) and to safely egress vehicles in a variety of landing scenarios. Prolonged exposure to spaceflight can diminish tolerance for physical activity, decrease cardiovascular and sensorimotor function, and cause loss of bone mineral density, and reduced muscle mass and strength. Although exercise can mitigate these spaceflight-induced physiological decrements, little is known regarding the time-course of changes in muscle and aerobic performance during spaceflight. Furthermore, these exercise countermeasures are not fully protective. For example, maximal aerobic capacity (VO2pk), lower body muscle cross-sectional area, and strength decrease by about 10% to 15% after short- (~ 14 days) and long-duration (~ 6 months) missions on the International Space Station (ISS). Future space missions that are longer in duration and further from Earth will employ exploration vehicles that will have exercise hardware with less robust and more constrained exercise capabilities than of those available on the ISS. Thus, countermeasures will need to be optimized to protect crew health and performance on exploration-class missions that will last up to 3 years. This will require a more detailed understanding of the dynamic effects of spaceflight on human health and performance, and the ability of exercise to protect against this deconditioning, and the interaction of exercise with interrelated factors like nutrition, sleep, and environmental conditions. Methods: We will use standardized research and medical testing protocols previously validated in 1-G and 0-G to quantify the time course and the inter-individual variability of changes in physical performance, including cardiorespiratory fitness, and muscle strength, and endurance, before, during and after spaceflight missions lasting 2 months, 6 months, and 1 year. Additionally, we will use an extrapolation model to predict changes associated with 2–3-year exploration missions. Additionally, we will monitor in-flight exercise, nutrition, and sleep using in-flight assessment tools. Significance: Our testing protocols will provide valuable information for determining time course of change and the interindividual variability of spaceflight-induced deconditioning of aerobic capacity and muscle strength and endurance over the course of spaceflight missions up to and beyond 1 year. This information will be vital to assess whether humans can be physically ready for deep space exploration, such as on a mission to Mars, using current technology, or if additional mitigation strategies are necessary.

countermeasures

Potential Alternatives Report for Validation of Alternatives to Aliphatic Isocyanate Polyurethanes

Identifying and selecting alternative materials and technologies that have the potential to reduce the identified HazMats and hazardous air pollutants (HAPs), while incorporating sound corrosion prevention and control technologies, is a complicated task due to the fast pace at which new technologies emerge and rules change. The alternatives are identified through literature searches, electronic database and Internet searches, surveys, and/or personal and professional contacts. Available test data was then compiled on the proposed alternatives to determine if the materials meet the test objectives or if further)laboratory or field-testing will be required. After reviewing technical information documented in the PAR, government representatives, technical representatives from the affected facilities, and other stakeholders involved in the process will select the list of viable alternative coatings for consideration and testing under the project's Joint Test Protocol entitled Joint Test Protocol for Validation of Alternatives to Aliphatic Isocyanate Polyurethanes and Field Test Plan entitled Field Evaluations Test Plan for Validation of Alternatives to Aliphatic Isocyanate Polyurethanes, both prepared by ITB. Test results will be reported in a Joint Test Report upon completion oftesting. The selection rationale and conclusions are documented in this PAR. A cost benefit analysis will be prepared to quantify the estimated capital and process costs of coating alternatives and cost savings relative to the current coating processes, however, some initial cost data has been included in this PAR. For this coatings project, isocyanates, as found in aliphatic isocyanate polyurethanes, were identified as the target HazMat to be eliminated. Table 1-1 lists the target HazMats, the related process and application, current specifications, and affected programs.

Lewis, pattie

Joint Test Report for Validation of Alternative Low-Emission Surface Preparation/Depainting Technologies for Structural Steel

Headquarters National Aeronautics and Space Administration (NASA) chartered the NASA Acquisition Pollution Prevention (AP2) Office to coordinate agency activities affecting pollution prevention issues identified during system and component acquisition and sustainment processes. The primary objectives of the AP2 Office are to: (1) Reduce or eliminate the use of hazardous materials or hazardous processes at manufacturing, remanufacturing, and sustainment locations. (2) Avoid duplication of effort in actions required to reduce or eliminate hazardous materials through joint center cooperation and technology sharing. The objective of this project was to qualify candidate alternative Low-Emission Surface Preparation/Depainting Technologies for Structural Steel applications at NASA facilities. This project compares the surface preparation/depainting performance of the proposed alternatives to existing surface preparation/depainting systems or standards. This Joint Test Report (JTR) contains the results of testing as per the outlines of the Joint Test Protocol (JTP), Joint Test Protocol for Validation of Alternative Low-Emission Surface Preparation/Depainting Technologies for Structural Steel, and the Field Test Plan (FTP), Field Evaluations Test Plan for Validation of Alternative Low-Emission Surface Preparation/Depainting Technologies for Structural Steel, for critical requirements and tests necessary to qualify alternatives for coating removal systems. These tests were derived from engineering, performance, and operational impact (supportability) requirements defined by a consensus of government and industry participants. This JTR documents the results of the testing as well as any test modifications made during the execution of the project. This JTR is made available as a reference for future pollution prevention endeavors by other NASA Centers, the Department of Defense and commercial users to minimize duplication of effort. The current coating removal processes identified herein are for polyurethane, epoxy and other paint systems applied by conventional wet-spray processes. A table summarizes the target hazardous materials, processes and materials, applications, affected programs, and candidate substrates.

Lewis, Pattie

Cost-Benefit Analysis For Alternative Low-Emission Surface Preparation/ Depainting Technologies for Structural Steel

Stennis Space Center (SSC), Kennedy Space Center (KSC) and Air Force Space Command (AFSPC) identified particulate emissions and waste generated from the depainting process of steel structures as hazardous materials to be eliminated or reduced. A Potential Alternatives Report, Potential Alternatives Report for Validation of Alternative Low Emission Surface Preparation/Depainting Technologies for Structural Steel, provided a technical analyses of identified alternatives to the current coating removal processes, criteria used to select alternatives for further analysis, and a list of those alternatives recommended for testing. The initial coating removal alternatives list was compiled using literature searches and stakeholder recommendations. The involved project participants initially considered approximately 13 alternatives. In late 2003, core project members selected the following depainting processes to be further evaluated: (1) Plastic Blast Media-Quickstrip(R)-A. (2) Hard Abrasive-Steel-Magic(R). (3) Sponge Blasting-Sponge-Jet(R). (4) Liquid Nitrogen-NItroJet(R). (5) Mechanical Removal with Vacuum Attachment-DESCO and OCM Clean-Air (6) Laser Coating Removal Alternatives were tested in accordance with the Joint Test Protocol for Validation of Alternative Low-Emission Surface Preparation/Depainting Technologies for Structural Steel, and the Field Evaluation Test Plan for Validation of Alternative Low-Emission Surface Preparation/Depainting Technologies for Structural Steel. Results of the testing are documented in the Joint Test Report. This Cost-Benefit Analysis (CBA) focuses on the three alternatives (Quickstrip(R)-A, SteelMagic (R), and Sponge-Jet(R)) that were considered viable alternatives for large area operations based on the results of the field demonstration and lab testing. This CBA was created to help participants determine if implementation of the candidate alternatives is economically justified. Each of the alternatives examined reduced Environmental Activity (EA) Costs-those costs associated with complying with environmental regulations. One alternative, Steel-Magic(R), also showed reduced Direct Costs and reduced total costs.

Lewis, Pattie

Delay and Disruption Tolerant Networking MACHETE Model

To verify satisfaction of communication requirements imposed by unique missions, as early as 2000, the Communications Networking Group at the Jet Propulsion Laboratory (JPL) saw the need for an environment to support interplanetary communication protocol design, validation, and characterization. JPL's Multi-mission Advanced Communications Hybrid Environment for Test and Evaluation (MACHETE), described in Simulator of Space Communication Networks (NPO-41373) NASA Tech Briefs, Vol. 29, No. 8 (August 2005), p. 44, combines various commercial, non-commercial, and in-house custom tools for simulation and performance analysis of space networks. The MACHETE environment supports orbital analysis, link budget analysis, communications network simulations, and hardware-in-the-loop testing. As NASA is expanding its Space Communications and Navigation (SCaN) capabilities to support planned and future missions, building infrastructure to maintain services and developing enabling technologies, an important and broader role is seen for MACHETE in design-phase evaluation of future SCaN architectures. To support evaluation of the developing Delay Tolerant Networking (DTN) field and its applicability for space networks, JPL developed MACHETE models for DTN Bundle Protocol (BP) and Licklider/Long-haul Transmission Protocol (LTP). DTN is an Internet Research Task Force (IRTF) architecture providing communication in and/or through highly stressed networking environments such as space exploration and battlefield networks. Stressed networking environments include those with intermittent (predictable and unknown) connectivity, large and/or variable delays, and high bit error rates. To provide its services over existing domain specific protocols, the DTN protocols reside at the application layer of the TCP/IP stack, forming a store-and-forward overlay network. The key capabilities of the Bundle Protocol include custody-based reliability, the ability to cope with intermittent connectivity, the ability to take advantage of scheduled and opportunistic connectivity, and late binding of names to addresses.

Segui, John S.

An approach to verification and validation of a reliable multicasting protocol: Extended Abstract

This paper describes the process of implementing a complex communications protocol that provides reliable delivery of data in multicast-capable, packet-switching telecommunication networks. The protocol, called the Reliable Multicasting Protocol (RMP), was developed incrementally using a combination of formal and informal techniques in an attempt to ensure the correctness of its implementation. Our development process involved three concurrent activities: (1) the initial construction and incremental enhancement of a formal state model of the protocol machine; (2) the initial coding and incremental enhancement of the implementation; and (3) model-based testing of iterative implementations of the protocol. These activities were carried out by two separate teams: a design team and a V&V team. The design team built the first version of RMP with limited functionality to handle only nominal requirements of data delivery. This initial version did not handle off-nominal cases such as network partitions or site failures. Meanwhile, the V&V team concurrently developed a formal model of the requirements using a variant of SCR-based state tables. Based on these requirements tables, the V&V team developed test cases to exercise the implementation. In a series of iterative steps, the design team added new functionality to the implementation while the V&V team kept the state model in fidelity with the implementation. This was done by generating test cases based on suspected errant or off-nominal behaviors predicted by the current model. If the execution of a test in the model and implementation agreed, then the test either found a potential problem or verified a required behavior. However, if the execution of a test was different in the model and implementation, then the differences helped identify inconsistencies between the model and implementation. In either case, the dialogue between both teams drove the co-evolution of the model and implementation. We have found that this interactive, iterative approach to development allows software designers to focus on delivery of nominal functionality while the V&V team can focus on analysis of off nominal cases. Testing serves as the vehicle for keeping the model and implementation in fidelity with each other. This paper describes (1) our experiences in developing our process model; and (2) three example problems found during the development of RMP. Although RMP has provided our research effort with a rich set of test cases, it also has practical applications within NASA. For example, RMP is being considered for use in the NASA EOSDIS project due to its significant performance benefits in applications that need to replicate large amounts of data to many network sites.

Callahan, John R.

Verification and validation of a reliable multicast protocol

This paper describes the methods used to specify and implement a complex communications protocol that provides reliable delivery of data in multicast-capable, packet-switching telecommunication networks. The protocol, called the Reliable Multicasting Protocol (RMP), was developed incrementally by two complementary teams using a combination of formal and informal techniques in an attempt to ensure the correctness of the protocol implementation. The first team, called the Design team, initially specified protocol requirements using a variant of SCR requirements tables and implemented a prototype solution. The second team, called the V&V team, developed a state model based on the requirements tables and derived test cases from these tables to exercise the implementation. In a series of iterative steps, the Design team added new functionality to the implementation while the V&V team kept the state model in fidelity with the implementation through testing. Test cases derived from state transition paths in the formal model formed the dialogue between teams during development and served as the vehicles for keeping the model and implementation in fidelity with each other. This paper describes our experiences in developing our process model, details of our approach, and some example problems found during the development of RMP.

Callahan, John R.

An approach to verification and validation of a reliable multicasting protocol

This paper describes the process of implementing a complex communications protocol that provides reliable delivery of data in multicast-capable, packet-switching telecommunication networks. The protocol, called the Reliable Multicasting Protocol (RMP), was developed incrementally using a combination of formal and informal techniques in an attempt to ensure the correctness of its implementation. Our development process involved three concurrent activities: (1) the initial construction and incremental enhancement of a formal state model of the protocol machine; (2) the initial coding and incremental enhancement of the implementation; and (3) model-based testing of iterative implementations of the protocol. These activities were carried out by two separate teams: a design team and a V&V team. The design team built the first version of RMP with limited functionality to handle only nominal requirements of data delivery. In a series of iterative steps, the design team added new functionality to the implementation while the V&V team kept the state model in fidelity with the implementation. This was done by generating test cases based on suspected errant or off-nominal behaviors predicted by the current model. If the execution of a test was different between the model and implementation, then the differences helped identify inconsistencies between the model and implementation. The dialogue between both teams drove the co-evolution of the model and implementation. Testing served as the vehicle for keeping the model and implementation in fidelity with each other. This paper describes (1) our experiences in developing our process model; and (2) three example problems found during the development of RMP.

Callahan, John R.

An Approach to Verification and Validation of a Reliable Multicasting Protocol

This paper describes the process of implementing a complex communications protocol that provides reliable delivery of data in multicast-capable, packet-switching telecommunication networks. The protocol, called the Reliable Multicasting Protocol (RMP), was developed incrementally using a combination of formal and informal techniques in an attempt to ensure the correctness of its implementation. Our development process involved three concurrent activities: (1) the initial construction and incremental enhancement of a formal state model of the protocol machine; (2) the initial coding and incremental enhancement of the implementation; and (3) model-based testing of iterative implementations of the protocol. These activities were carried out by two separate teams: a design team and a V&V team. The design team built the first version of RMP with limited functionality to handle only nominal requirements of data delivery. In a series of iterative steps, the design team added new functionality to the implementation while the V&V team kept the state model in fidelity with the implementation. This was done by generating test cases based on suspected errant or offnominal behaviors predicted by the current model. If the execution of a test was different between the model and implementation, then the differences helped identify inconsistencies between the model and implementation. The dialogue between both teams drove the co-evolution of the model and implementation. Testing served as the vehicle for keeping the model and implementation in fidelity with each other. This paper describes (1) our experiences in developing our process model; and (2) three example problems found during the development of RMP.

Callahan, John R.

Regulatory Physiology

As noted elsewhere in this report, a central goal of the Extended Duration Orbiter Medical Project (EDOMP) was to ensure that cardiovascular and muscle function were adequate to perform an emergency egress after 16 days of spaceflight. The goals of the Regulatory Physiology component of the EDOMP were to identify and subsequently ameliorate those biochemical and nutritional factors that deplete physiological reserves or increase risk for disease, and to facilitate the development of effective muscle, exercise, and cardiovascular countermeasures. The component investigations designed to meet these goals focused on biochemical and physiological aspects of nutrition and metabolism, the risk of renal (kidney) stone formation, gastrointestinal function, and sleep in space. Investigations involved both ground-based protocols to validate proposed methods and flight studies to test those methods. Two hardware tests were also completed.

Lane, Helen W.