Search NASA⌕ Search

SEARCH · Search NASA

Results for “safety certification”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 55 records · Page 3
All sourcesNASA NTRSDOE OSTI
NASA NTRS2004

An Empirical Evaluation of Automated Theorem Provers in Software Certification

We describe a system for the automated certification of safety properties of NASA software. The system uses Hoare-style program verification technology to generate proof obligations which are then processed by an automated first-order theorem prover (ATP). We discuss the unique requirements this application places on the ATPs, focusing on automation, proof checking, and usability. For full automation, however, the obligations must be aggressively preprocessed and simplified, and we demonstrate how the individual simplification stages, which are implemented by rewriting, influence the ability of the ATPs to solve the proof tasks. Our results are based on 13 certification experiments that lead to more than 25,000 proof tasks which have each been attempted by Vampire, Spass, e-setheo, and Otter. The proofs found by Otter have been proof-checked by IVY.

Denney, Ewen↗
NASA NTRS1998

Structural Similitude and Scaling Laws

Aircraft and spacecraft comprise the class of aerospace structures that require efficiency and wisdom in design, sophistication and accuracy in analysis and numerous and careful experimental evaluations of components and prototype, in order to achieve the necessary system reliability, performance and safety. Preliminary and/or concept design entails the assemblage of system mission requirements, system expected performance and identification of components and their connections as well as of manufacturing and system assembly techniques. This is accomplished through experience based on previous similar designs, and through the possible use of models to simulate the entire system characteristics. Detail design is heavily dependent on information and concepts derived from the previous steps. This information identifies critical design areas which need sophisticated analyses, and design and redesign procedures to achieve the expected component performance. This step may require several independent analysis models, which, in many instances, require component testing. The last step in the design process, before going to production, is the verification of the design. This step necessitates the production of large components and prototypes in order to test component and system analytical predictions and verify strength and performance requirements under the worst loading conditions that the system is expected to encounter in service. Clearly then, full-scale testing is in many cases necessary and always very expensive. In the aircraft industry, in addition to full-scale tests, certification and safety necessitate large component static and dynamic testing. Such tests are extremely difficult, time consuming and definitely absolutely necessary. Clearly, one should not expect that prototype testing will be totally eliminated in the aircraft industry. It is hoped, though, that we can reduce full-scale testing to a minimum. Full-scale large component testing is necessary in other industries as well, Ship building, automobile and railway car construction all rely heavily on testing. Regardless of the application, a scaled-down (by a large factor) model (scale model) which closely represents the structural behavior of the full-scale system (prototype) can prove to be an extremely beneficial tool. This possible development must be based on the existence of certain structural parameters that control the behavior of a structural system when acted upon by static and/or dynamic loads. If such structural parameters exist, a scaled-down replica can be built, which will duplicate the response of the full-scale system. The two systems are then said to be structurally similar. The term, then, that best describes this similarity is structural similitude. Similarity of systems requires that the relevant system parameters be identical and these systems be governed by a unique set of characteristic equations. Thus, if a relation or equation of variables is written for a system, it is valid for all systems which are similar to it. Each variable in a model is proportional to the corresponding variable of the prototype. This ratio, which plays an essential role in predicting the relationship between the model and its prototype, is called the scale factor.

Simitses, George J.↗
NASA NTRSDate not supplied

Scoping, Tailoring, and Abstraction Refinement in the Hazard Assessment Process

Hazard assessment is an engineering activity that produces insight into which states of thing being engineered might be hazardous. In aviation contexts, it is often performed for certification credit at both the aircraft and system levels during the early design phase of the system’s lifecycle. However, novel aircraft paradigms such as urban air mobility (UAM) operations might either violate assumptions on which traditional aviation hazard assessment is based or simply possess attributes that would make other approaches more effective. In this paper, we define the key concepts underpinning hazard assessment and identify the limitations and assumptions inherent in hazard analysis. We analyze popular techniques to show how they embody these key concepts. We identify ways in which hazard assessment may be scoped and tailored to an application. And, using worked examples, we discuss how, where, and why such tailoring might be needed, especially in novel contexts.

Aviation Safety↗
NASA NTRS1987

Wind tunnel results of the low-speed NLF(1)-0414F airfoil

The large performance gains predicted for the Natural Laminar Flow (NLF)(1)-0414F airfoil were demonstrated in two-dimensional airfoil tests and in wind tunnel tests conducted with a full scale modified Cessna 210. The performance gains result from maintaining extensive areas of natural laminar flow, and were verified by flight tests conducted with the modified Cessna. The lift, stability, and control characteristics of the Cessna were found to be essentially unchanged when boundary layer transition was fixed near the wing leading edge. These characteristics are very desirable from a safety and certification view where premature boundary layer transition (due to insect contamination, etc.) must be considered. The leading edge modifications were found to enhance the roll damping of the Cessna at the stall, and were therefore considered effective in improving the stall/departure resistance. Also, the modifications were found to be responsible for only minor performance penalties.

Murri, Daniel G.↗
NASA NTRS1992

NSTS Orbiter auxiliary power unit turbine wheel cracking risk assessment

The present investigation of turbine-wheel cracking problems in the hydrazine-fueled APU turbine wheel of the Space Shuttle Orbiter's Main Engines has indicated the efficacy of systematic probabilistic risk assessment in flight certification and safety resolution. Nevertheless, real crack-initiation and propagation problems do not lend themselves to purely analytical studies. The high-cycle fatigue problem is noted to generally be unsuited to probabilistic modeling, due to its extremely high degree of intrinsic scatter. In the case treated, the cracks appear to trend toward crack arrest in a low cycle fatigue mode, due to a detuning of the resonance model.

Cruse, T. A.↗
NASA NTRS2001

Mitigation the APC Threat: A Work in Progress

This presentation discuss the research, design and development, flight test, certification, airline safety, and accident investigation as they relate to mitigating the APC threat.

AHarrah, Ralph↗
NASA NTRS2003

Considering Object Oriented Technology in Aviation Applications

Few developers of commercial aviation software products are using object-oriented technology (OOT), despite its popularity in some other industries. Safety concerns about using OOT in critical applications, uncertainty about how to comply with regulatory requirements, and basic conservatism within the aviation community have been factors behind this caution. The Federal Aviation Administration (FAA) and the National Aeronautics and Space Administration (NASA) have sponsored research to investigate and workshops to discuss safety and certification concerns about OOT and to develop recommendations for safe use. Two Object Oriented Technology in Aviation (OOTiA) workshops have been held and numerous issues and comments about the effect of OOT features and languages have been collected. This paper gives a high level overview of the OOTiA project, and discusses selected specific results from the March 2003 workshop. In particular, results in the form of questions to consider before making the decision to use OOT are presented.

Hayhurst, Kelly J.↗
NASA NTRS2004

Using Automated Theorem Provers to Certify Auto-Generated Aerospace Software

We describe a system for the automated certification of safety properties of NASA software. The system uses Hoare-style program verification technology to generate proof obligations which are then processed by an automated first-order theorem prover (ATP). For full automation, however, the obligations must be aggressively preprocessed and simplified We describe the unique requirements this places on the ATP and demonstrate how the individual simplification stages, which are implemented by rewriting, influence the ability of the ATP to solve the proof tasks. Experiments on more than 25,000 tasks were carried out using Vampire, Spass, and e-setheo.

Denney, Ewen↗
NASA NTRSDate not supplied

Automated Probabilistic Finite Element Model Calibration Tool Based on Uncertainty Quantification and Machine Learning

Qualification and certification of safety critical parts is a hurdle to the adoption of metallic additively manufactured components for aerospace vehicle applications. Challenges include variability in part properties due to inconsistent defect distribution and microstructure. Understanding of the process through finite element modeling (FEM), and process control through in-situ monitoring, may result in significant improvements; however, solutions useful to manufacturers will require large volumes of data and automated data utilization. Toward this end, a generalizable automated FEM calibration paradigm is developed. This paradigm leverages existing and novel tools from machine learning and uncertainty quantification to enable the automatic calibration of FEMs without requiring prior knowledge of the model performance across input parameter space, including meshing and solver settings, which can require time consuming manual model probing or cause noisy and inconsistent predictions. The result is a probabilistic distribution of calibrated and validated FEM input parameters targeting measured data.

Additive manufacturing model calibration finite el↗
NASA NTRSDate not supplied

NASA Glenn Electric Propulsion Work

NASA Glenn Electrified Aircraft Propulsion (EAP) Presentation Outline: High-Voltage, High-Power EAP - Standards and Regulations - Safety and Certification - High Power Density, High-Efficiency Electric Machines and Drives - Thermal Management - Fault Management - Superconducting Electric Machines - Materials Research - Modeling Tools - Advanced Controls

Electric Propulsion↗
NASA NTRSDate not supplied

Additional Large-Drop Ice Accretion Test Results for a Large Scale Swept Wing Section from January 2022

In-flight icing is an important consideration that affects aircraft design, performance, certification and safety. Newer regulations combined with increasing demand to reduce fuel burn, emissions and noise are driving a need for improvements in icing simulation capability. To that end, this paper presents the results of additional ice accretion testing conducted in the NASA Icing Research Tunnel in January 2022 with a large swept wing section typical of a modern commercial transport. The model was based upon a section of the Common Research Model wing at the 64% semispan station with a streamwise chord length of 136 in. The test conditions were developed with an icing scaling analysis to generate similar conditions for a small median volumetric diameter (MVD) = 25 μm cloud and a large MVD = 110 μm cloud. A series of tests were conducted over a range of total temperature from -23.8 ˚C to -1.4 ˚C with all other conditions held constant. Another series of tests explored cloud MVD variations from 50 μm to 230 μm while holding constant certain scaling parameters. The variation in ice mass and scanned ice volume across repeat conditions was approximately 50% lower than the uncertainty in the cloud MVD and liquid water content. The measured ice mass and volume calculated from the 3D scans were used to compute the mass to volume ratio that is sometimes referred to as ice density or void fraction. When the ice volume based on the ice shape maximum combined cross section was used to determine this ratio, the resulting values were in the range of 240 to 455 kg/m 3 . This is consistent with analogous values previously reported in the literature. The ice shape mass and volume increased with MVD from 50 to 230 μm at fixed values of the scaling parameters. The ice mass to volume ratio was approximately constant for all of the cases which showed that the accreted mass and volume increased at approximately the same rate. These results demonstrate the significance of cloud MVD on ice shape mass and volume.

Ice accretion, Large drops, Wind tunnel↗
NASA NTRSDate not supplied

Additional Large-Drop Ice Accretion Test Results for a Large Scale Swept Wing Section from January 2022

In-flight icing is an important consideration that affects aircraft design, performance, certification and safety. Newer regulations combined with increasing demand to reduce fuel burn, emissions and noise are driving a need for improvements in icing simulation capability. To that end, this paper presents the results of additional ice accretion testing conducted in the NASA Icing Research Tunnel in January 2022 with a large swept wing section typical of a modern commercial transport. The model was based upon a section of the Common Research Model wing at the 64% semispan station with a streamwise chord length of 136 in. The test conditions were developed with an icing scaling analysis to generate similar conditions for a small median volumetric diameter (MVD) = 25 μm cloud and a large MVD = 110 μm cloud. A series of tests were conducted over a range of total temperature from -23.8 ˚C to -1.4 ˚C with all other conditions held constant. Another series of tests explored cloud MVD variations from 50 μm to 230 μm while holding constant certain scaling parameters. The variation in ice mass and scanned ice volume across repeat conditions was approximately 50% lower than the uncertainty in the cloud MVD and liquid water content. The measured ice mass and volume calculated from the 3D scans were used to compute the mass to volume ratio that is sometimes referred to as ice density or void fraction. When the ice volume based on the ice shape maximum combined cross section was used to determine this ratio, the resulting values were in the range of 240 to 455 kg/m3. This is consistent with analogous values previously reported in the literature. The ice shape mass and volume increased with MVD from 50 to 230 μm at fixed values of the scaling parameters. The ice mass to volume ratio was approximately constant for all of the cases which showed that the accreted mass and volume increased at approximately the same rate. These results demonstrate the significance of cloud MVD on ice shape mass and volume.

Ice accretion↗
NASA NTRS2020

Understanding Risk in Urban Air Mobility: Moving Towards Safe Operating Standards

Urban Air Mobility (UAM), i.e. on-demand urban passenger (and cargo) transportation services, represents a new technology and potentially an emerging industry. It is not simply an extension of commercial aviation as we know it—it is a different domain. A first priority for UAM is that it be safe and secure (Booz, Allen, Hamilton, 2018; Crown, Consulting, Inc., 2018). A workshop held in Arlington, Virginia, brought together experts from the on-demand world (including UAM) to assess and prioritize the challenges and barriers to be addressed in successfully introducing On Demand Mobility (ODM) vehicles and services (ODM and Emerging Technology Workshop, 2016). Of the nine challenges assessed, the highest priority was assigned to certification, followed by affordability, and then safety. Considering the confluence of certification and safety, it is clear that risk and its assessment were judged to be of high relevance to workshop participants.

UAM↗
NASA NTRS2007

2006 NASA Range Safety Annual Report

Throughout 2006, Range Safety was involved in a number of exciting and challenging activities and events, from developing, implementing, and supporting Range Safety policies and procedures-such as the Space Shuttle Launch and Landing Plans, the Range Safety Variance Process, and the Expendable Launch Vehicle Safety Program procedures-to evaluating new technologies. Range Safety training development is almost complete with the last course scheduled to go on line in mid-2007. Range Safety representatives took part in a number of panels and councils, including the newly formed Launch Constellation Range Safety Panel, the Range Commanders Council and its subgroups, the Space Shuttle Range Safety Panel, and the unmanned aircraft systems working group. Space based range safety demonstration and certification (formerly STARS) and the autonomous flight safety system were successfully tested. The enhanced flight termination system will be tested in early 2007 and the joint advanced range safety system mission analysis software tool is nearing operational status. New technologies being evaluated included a processor for real-time compensation in long range imaging, automated range surveillance using radio interferometry, and a space based range command and telemetry processor. Next year holds great promise as we continue ensuring safety while pursuing our quest beyond the Moon to Mars.

TenHaken, Ron↗
NASA NTRS2004

A Generic Software Safety Document Generator

Formal certification is based on the idea that a mathematical proof of some property of a piece of software can be regarded as a certificate of correctness which, in principle, can be subjected to external scrutiny. In practice, however, proofs themselves are unlikely to be of much interest to engineers. Nevertheless, it is possible to use the information obtained from a mathematical analysis of software to produce a detailed textual justification of correctness. In this paper, we describe an approach to generating textual explanations from automatically generated proofs of program safety, where the proofs are of compliance with an explicit safety policy that can be varied. Key to this is tracing proof obligations back to the program, and we describe a tool which implements this to certify code auto-generated by AutoBayes and AutoFilter, program synthesis systems under development at the NASA Ames Research Center. Our approach is a step towards combining formal certification with traditional certification methods.

Denney, Ewen↗
NASA NTRS2016

An Investigation of Proposed Techniques for Quantifying Confidence in Assurance Arguments

The use of safety cases in certification raises the question of assurance argument sufficiency and the issue of confidence (or uncertainty) in the argument's claims. Some researchers propose to model confidence quantitatively and to calculate confidence in argument conclusions. We know of little evidence to suggest that any proposed technique would deliver trustworthy results when implemented by system safety practitioners. Proponents do not usually assess the efficacy of their techniques through controlled experiment or historical study. Instead, they present an illustrative example where the calculation delivers a plausible result. In this paper, we review current proposals, claims made about them, and evidence advanced in favor of them. We then show that proposed techniques can deliver implausible results in some cases. We conclude that quantitative confidence techniques require further validation before they should be recommended as part of the basis for deciding whether an assurance argument justifies fielding a critical system.

Graydon, Patrick J.↗
NASA NTRS2006

ESAS Deliverable PS 1.1.2.3: Customer Survey on Code Generations in Safety-Critical Applications

Automated code generators (ACG) are tools that convert a (higher-level) model of a software (sub-)system into executable code without the necessity for a developer to actually implement the code. Although both commercially supported and in-house tools have been used in many industrial applications, little data exists on how these tools are used in safety-critical domains (e.g., spacecraft, aircraft, automotive, nuclear). The aims of the survey, therefore, were threefold: 1) to determine if code generation is primarily used as a tool for prototyping, including design exploration and simulation, or for fiight/production code; 2) to determine the verification issues with code generators relating, in particular, to qualification and certification in safety-critical domains; and 3) to determine perceived gaps in functionality of existing tools.

Schumann, Johann↗
NASA NTRSDate not supplied

ATTRACTOR: Toward Trustworthy and Trusted Autonomous Systems

The question of what it means and what it takes for an autonomous system to consider another autonomous system justifiably trustworthy must be addressed by all who seek to integrate intelligent machine agents into real-world operations. A satisfactory answer to this question is an essential component in accepting autonomous machine decision-making in safety-critical and time-critical environments, such as aviation. Historically, simulation platforms for test and evaluation of complex systems have proven to be effective in assessing performance and contributing to decisions on the fitness of systems to operate in current general and commercial aviation airspace. Moreover, simulations have informed the definition of safety-critical constraints. However, as machine systems progressively take on responsibilities for decision-making traditionally supplied by humans, simulations require enhancement. Mixed reality simulation that integrates real-world platforms and data or high-fidelity simulation data in a sim-to-flight paradigm provides insight into agent interaction and the rationale behind autonomous agent decision-making as well as the capacity for seamless integrated implementation, testing, and operation of systems. Strong simulation capabilities are especially important in the presence of algorithms that hold great promise in decision-making yet increase the uncertainty in the system. Autonomy Teaming and TRAjectories for Complex Trusted Operational Reliability (ATTRACTOR) is a subproject of NASA’s Convergent Aeronautics Solutions (CAS) Project. ATTRACTOR’s objective is to build a basis for understanding trust and trustworthiness in multi-agent autonomous teams, and thus to inform future certification of safety-critical and time-critical autonomous systems in aviation. Because the concepts of trust and trustworthiness must be addressed in a context, ATTRACTOR has chosen Search and Rescue (SAR) in dynamic and unstructured environments, with emphasis on search, as its design reference mission (DRM). During dynamic planning and execution of trajectory-based operations, autonomous agents determine their trajectories given an assigned mission or missions and call for assistance from an appropriate teammate when needed. This experience along with the attendant human-machine and machine-machine interactions, serve as a platform for developing approaches to identifying and measuring trustworthiness and increasing trust. In this paper, we give an overview of some of ATTRACTOR’s research and development activities, findings, and ongoing work.

ATTRACTOR↗