Search NASA⌕ Search

SEARCH · Search NASA

Results for “trusted design”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 55 records · Page 3

Demonstration of Probabilistic Sensitivity Analyses Tools on the Structural Response of a Representative Inflatable Space Structure

This work provides an initial step toward demonstrating a probabilistic numerical simulation capability to support trade studies and the development of a certification plan for inflatable space habitats. This study concentrates on interpreting the results from probabilistic analysis and numerical simulation tools to identify parameter sensitivities for a novel inflatable airlock concept, specifically the Non‐Axisymmetric Inflatable Pressure Structure (NAIPS) that was designed and tested under NASA's Minimalistic Advanced Softgoods Hatch (MASH) Program. A brief overview of the finite element model is provided along with the probabilistic sensitivity analysis approach. The sensitivity studies required a model that was numerically stable and efficient enough that hundreds of simulations could be completed in the allotted time. Therefore, the existing full model was simplified by: extracting a quarter symmetry section of the dome; focusing on a single inflation pressure; and replacing the non‐linear material stress‐strain curves with linear, isotropic materials defined by elastic moduli. Responses of interest include the sensitivity of various structural component loads to material properties, cord lengths, inflation pressure and friction. Multiple sensitivity studies were completed and three are reported here. The first study focused on utilizing wide input parameter ranges to provide an opportunity to assess numerical robustness. The next two studies narrowed the parameter ranges to enable focus on understanding uncertainty at a fixed operating condition. The completion of the sensitivity studies improved understanding of the interdependence of multiple inputs on the responses. In addition, numerical stability of the simulations over wide parameter ranges, shows the feasibility of incorporating uncertainty‐based methods in the design and certification of inflatable space habitats. With the experience and trust gained, it is anticipated that these same methods will be applied to nonlinear, orthotropic models in the future.

Lyle, Karen H.↗

Trust in Collaborative Automation in High Stakes Software Engineering Work

The amount of autonomy in software engineering tools is increasing as developers build increasingly complex systems. Research in other domains shows that too much or too little trust in autonomous tools can have negative consequences, but we are not aware of any study that has investigated trust in autonomous tools in the highly interactive context of a software engineering workplace. We present the results of a ten week ethnographic case study of engineers collaborating with autonomous tools to write flight software at a large national space exploration organization to support high stakes missions. We find that trust in an autonomous software engineering tool in this setting was influenced by four main factors: the tool’s transparency, social context, an organization’s associated processes, and its usability. We outline theoretical implications for future research into trust in autonomous software engineering tools, and practical implications for tool designers and organizations conducting high stakes work with autonomous tools.

Davidoff, Scott↗

Reduced Contracting Time To Accelerate Construction: A Streamlined Approach for Speed and Scale

In the fast-paced construction world, efficiency isn't just an advantage - it's a necessity. By implementing the Cooperative Construction Contracting Agreement (CCCA), we are transforming how we approach major projects, replacing traditional multistep contracting with a streamlined, one-step process. This innovative contracting approach saves valuable time and resources, enabling us to accelerate delivery across our portfolio of projects. Under the old model, each construction phase required separate competitive solicitations for design, build, and other services. With the CCCA, we've consolidated these steps, working with a trusted partner from start to finish. This results in significant time savings that translate into faster project execution without compromising quality or safety.

collaborative partnerships↗

TRUST Sensors in Environments: Fiber Optic Displacement (SE-FOD)

The objective of the Delivery Environments (DE) Testbeds to Reduce Uncertainty in Simulations and Tests (TRUST) project is to quantify and help increase confidence in specific areas of computational and experimental capabilities that are applicable to the development, on-target assessment, and qualification of current and future delivery environments. More complete quantification of confidence in experimental and computational capabilities and the sufficient increase of confidence in those capabilities is critical to improving weapons engineering design, qualification, and assessment efforts that are critical to the current and future stockpile. Under the TRUST work package, engineers use and provide feedback on analysis tools and experimental results and create databases for efficient and responsive engineering which are currently under development.

42 ENGINEERING↗

Engineering Trade-off Considerations Regarding Design-for-Security, Design-for-Verification, and Design-for-Test

The United States government has identified that application specific integrated circuit (ASIC) and field programmable gate array (FPGA) hardware are at risk from a variety of adversary attacks. This finding affects system security and trust. Consequently, processes are being developed for system mitigation and countermeasure application. The scope of this tutorial pertains to potential vulnerabilities and countermeasures within the ASIC/FPGA design cycle. The presentation demonstrates how design practices can affect the risk for the adversary to: change circuitry, steal intellectual property, and listen to data operations. An important portion of the design cycle is assuring the design is working as specified or as expected. This is accomplished by exhaustive testing of the target design. Alternatively, it has been shown that well established schemes for test coverage enhancement (design-for-verification (DFV) and design-for-test (DFT)) can create conduits for adversary accessibility. As a result, it is essential to perform a trade between robust test coverage versus reliable design implementation. The goal of this tutorial is to explain the evolution of design practices; review adversary accessibility points due to DFV and DFT circuitry insertion (back door circuitry); and to describe common engineering trade-off considerations for test versus adversary threats.

Design for reliability (DFR)↗

Protecting intellectual property in space; Proceedings of the Aerospace Computer Security Conference, McLean, VA, March 20, 1985

The primary purpose of the Aerospace Computer Security Conference was to bring together people and organizations which have a common interest in protecting intellectual property generated in space. Operational concerns are discussed, taking into account security implications of the space station information system, Space Shuttle security policies and programs, potential uses of probabilistic risk assessment techniques for space station development, key considerations in contingency planning for secure space flight ground control centers, a systematic method for evaluating security requirements compliance, and security engineering of secure ground stations. Subjects related to security technologies are also explored, giving attention to processing requirements of secure C3/I and battle management systems and the development of the Gemini trusted multiple microcomputer base, the Restricted Access Processor system as a security guard designed to protect classified information, and observations on local area network security.

Source record↗

Development and Deployment of Robonaut 2 to the International Space Station

The development of the Robonaut 2 (R2) system was a joint endeavor with NASA and General Motors, producing robots strong enough to do work, yet safe enough to be trusted to work near humans. To date two R2 units have been produced, designated as R2A and R2B. This follows more than a decade of work on the Robonaut 1 units that produced advances in dexterity, tele-presence, remote supervision across time delay, combining mobility with manipulation, human-robot interaction, force control and autonomous grasping. Design challenges for the R2 included higher speed, smaller packaging, more dexterous fingers, more sensitive perception, soft drivetrain design, and the overall implementation of a system software approach for human safety, At the time of this writing the R2B unit was poised for launch to the International Space Station (ISS) aboard STS-133. R2 will be the first humanoid robot in space, and is arguably the most sophisticated robot in the world, bringing NASA into the 21st century as the world's leader in this field. Joining the other robots already on ISS, the station is now an exciting lab for robot experiments and utilization. A particular challenge for this project has been the design and certification of the robot and its software for work near humans. The 3 layer software systems will be described, and the path to ISS certification will be reviewed. R2 will go through a series of ISS checkout tests during 2011. A taskboard was shipped with the robot that will be used to compare R2B's dexterous manipulation in zero gravity with the ground robot s ability to handle similar objects in Earth s gravity. R2's taskboard has panels with increasingly difficult tasks, starting with switches, progressing to connectors and eventually handling softgoods. The taskboard is modular, and new interfaces and experiments will be built up using equipment already on ISS. Since the objective is to test R2 performing tasks with human interfaces, hardware abounds on ISS and the crew will be involved to help select tasks that are dull, dirty or dangerous. Future plans for R2 include a series of upgrades, evolving from static IVA (Intravehicular Activity) operations, to mobile IVA, then EVA (Extravehicular Activity).

Ambrose, Robert O.↗

Integral Nuclear Data and Benchmarking Needs for Fusion Energy Systems

Fusion energy systems are currently being designed and optimized using radiation transport codes. To deal with the unique environment inside a fusion-based system, many of these designs incorporate novel materials able to withstand the high radiation fields, ensure adequate cooling and thermal protection, and produce tritium. Validation plays a vital role in building trust in the predictive power of these models and computational methods. Validation of a code consists of modeling documented real-world experiments and comparing the code-predicted response to the measured response. Adequate validation requires measured responses from real-world experiments, also known as integral data, that mimic the system being designed, including materials, impinging radiation, and temperature, among other variables. The most trusted integral data are experimental responses that have been through a rigorous benchmarking process that develops a recommended computational model and evaluates all experimental uncertainties. Finally, there are a few research groups around the world that have been producing integral data for fusion applications, but a substantial investment is needed to address the unique validation needs of the fusion community.

Fusion↗

Performance Evaluation of an Offshore Wave Measurement Buoy in Monochromatic Waves

The accurate measurement of waves underpins marine energy resource characterization, device design, and project development. Datawell wave buoys are widely deployed and have long served as a trusted standard for wave measurements. We quantify the measurement performance, including wave elevation and energy flux estimation, of a Datawell DWR-MkIII buoy using prescribed monochromatic heave motions on a large-amplitude six-degree-of-freedom motion platform at the National Laboratory of the Rockies, assuming the buoy behaves as an ideal wave follower. Commanded motions were validated with an optical motion tracking system while buoy elevation and raw acceleration were recorded. Wave elevations were propagated to wave energy flux estimation using four methods, including one frequency-domain method and three time-domain methods. The Bayesian optimization was applied for design of experiments, and records from three test sites were also applied and evaluated in the present study. Results show two error regions within the nominal period range of 1.6 s to 30 s. For wave periods between 5 s and 25 s, the buoy provides accurate wave height measurements. For short periods less than 5 s, the 1.28 Hz sampling frequency induces sub-Nyquist artifacts that bias elevation and can drive maximum energy flux estimation errors above 100%. For long periods exceeding 25 s, the buoy reported elevation is underpredicted with error depending on period but relatively independent of wave height, with maximum wave height and wave energy flux errors reaching 64% and 87%, respectively. Furthermore, analysis of three field-derived cases shows that frequency-domain estimates at 1.28 Hz agree within 2% of the corresponding 100 Hz estimates, while larger method-dependent differences are observed for the Hilbert method.

16 TIDAL AND WAVE POWER↗

An explicit solution to the optimal LQG problem for flexible structures with collocated rate sensors

We present a class of compensators in explicit form (not requiring numerical computer calculations) for stabilizing flexible structures with collocated rate sensors. They are based on the explicit solution, valid for both Continuum and FEM Models, of the LQG problem for minimizing mean square rate. They are robust with respect to system stability (will not destabilize modes even with mismatch of parameters), can be instrumented in state space form suitable for digital controllers, and can be specified directly from the structure modes and mode 'signature' (displacement vectors at sensor locations). Some simulation results are presented for the NASA LaRC Phase-Zero Evolutionary Model - a modal Trust model with 86 modes - showing damping ratios attainable as a function of compensator design parameters and complexity.

Balakrishnan, A. V.↗

Lessons Learned from Recent Space Flight Assessments

This paper highlights four space flight assessments, each with an important lesson. The first assessment points to the challenge of material substitution for weight saving. Space Shuttle’s external tank stringers were changed from Al 2024 to Al 2090 without comprehensive analysis. Lack of understanding the low Short-Transverse (S-T) strength associated with Al 2090 led to widespread cracking. The second assessment addresses the failure to understand that time-dependent relationships and loading interactions of multiple disciplines can lead to non-conservative results. An aerodynamic test article of the Orion Multi-Purpose Crew Vehicle (MPCV) Launch Abort System (LAS) was analyzed for worst-case single discipline loads, showing positive structural margins. When disciplines were combined with time dependent loading, the analysis resulted in negative margins. The third assessment highlights the pitfalls of putting blind trust in historical architecture. The MPCV re-entry heat shield adopted the Apollo design approach despite fundamental differences between the two designs (e.g., the underlying substructure design, material differences, scale, and geometry). Manufacturing resulted in cracking along seams of the cured MPCV heat shield and produced lower mechanical properties of the Avcoat witness panels. Subsequently, the design was changed to a block architecture, which introduced unperceived technical, cost, and schedule risk. The fourth assessment shows how the lack of a comprehensive investigation of design modifications and inappropriate Finite Element Analyses (FEA) can lead to trouble. A mass reduction campaign eliminated highly critical internal struts on the ISS Node-1 pressurized module based on inadequate and uncorrelated FEA. High strains were noted and ignored as a modeling aberration. A system level high fidelity FEA discovered large plastic strains in the gussets of all four radial ports. These findings initiated a full-scale test campaign, new test correlated assembly-level FEA, and significant design modifications.

James P Smith↗

Verification of Triple Modular Redundancy Insertion for Reliable and Trusted Systems

If a system is required to be protected using triple modular redundancy (TMR), improper insertion can jeopardize the reliability and security of the system. Due to the complexity of the verification process and the complexity of digital designs, there are currently no available techniques that can provide complete and reliable confirmation of TMR insertion. We propose a method for TMR insertion verification that satisfies the process for reliable and trusted systems.

Verification↗

Cross-Cultural Competencies for the NASA International Internship Project

One of the principles that NASA upholds is to cooperate with other nations to advance science, exploration, and discovery for all. Effective cooperation across cultures, however, requires a certain level of skill. A construct called cross-cultural competency (CCC) emphasizes that individuals are capable of acquiring skills that facilitate positive and cooperative interaction with people of another culture. While some aspects of CCC stem from stable individual traits such as personality (i.e., extraversion, tolerance for ambiguity), most components can be learned and strengthened over time (i.e., empathy, mindfulness, trust). Because CCC is such a vital part of international cooperation, this summer we will design a training program to cultivate these skills between student interns, their mentors, and the Ames community as a whole. First, we will research what specific competencies are valuable for anyone to have when working in an international setting. We will then design a series of activities, events, workshops, and discussions that target and strengthen those skills. Finally, we will use both qualitative and quantitative evaluation methods to measure the success of the pilot program. This summer, the current international student interns will serve as our trial population for the program, while our goal is to launch the full program in Fall 2017. Overall, we hope to contribute to NASAs mission of optimizing international collaboration for everyone involved.

international↗

Report of the 2026 Workshop on Next-Generation Ecosystems for Scientific Computing: Harnessing Community, Software, and AI for Cross-Disciplinary Team Science

Scientific computing is undergoing rapid transformation as advances in artificial intelligence, heterogeneous computing, automation, and data-intensive research reshape not only computational tools but also the institutions, workforce models, and collaborative practices that support scientific discovery. This report synthesizes insights from the 2026 Workshop on Next-Generation Ecosystems for Scientific Computing, the second in a three-year series focused on strengthening scientific computing ecosystems through socio-technical co-design. Workshop discussions identified four interdependent strategic themes: software ecosystems for AI-enabled scientific discovery; trust, validation, and traceability; human-AI teaming and paradigm shifts; and workforce, pedagogy, and governance. The report translates these themes into eight priorities for community action spanning shared research infrastructure, trust and traceability, user experience, human-AI teaming, workforce development, cross-sector coordination, stewardship and sustainability, and evaluation of scientific value. Together, these priorities outline directions for building scientific computing ecosystems that remain trustworthy, sustainable, innovative, and resilient as AI assumes a growing role in scientific work.

AI↗

On the Moral Hazard of Autonomy

This paper describes the concept of moral hazard as applied to technologies that incorporate automation and autonomy. Moral hazard is said to exist when a party to a transaction feels more comfortable taking undue risks because another party will bear the costs if things go badly. As opposed to regular physical hazards, a moral hazard comes from within a person. In this paper, we reveal two categories of moral hazards related to autonomy. The first category of moral hazard occurs when the owner of the autonomy introduces an autonomous system without accepting the full responsibility for improper operation thereby shifting the risks from one party to another party. This category of moral hazard is similar to moral hazards experienced in other industries and can often be addressed through appropriate policy and establishing liability for irresponsible behavior. The issue becomes more complicated in cases where the operator of the autonomy may not have a full understanding of the system behavior. In the second category of moral hazard, risks are shifted from people to autonomy. In this category, the humans in proximity to the autonomous system begin to trust its behavior. Their behavior may change in that they may believe they are more insulated from harm and subsequently exhibit more risky behavior towards increasingly autonomous technologies. Mitigating this type of moral hazard may require the autonomy to possess certain design features to discourage this type of harmful human behavior so that humans do not suffer needlessly in their interactions with autonomous systems by placing inappropriate trust where that trust is neither warranted nor deserved.

Cybernetics↗

Evaluating Behaviorally Oriented Aviation Maintenance Resource Management (MRM) Training and Programs: Methods, Results, and Conclusions

Assessment of the impact of Aviation Resource Management Programs on aviation culture and performance has compelled a considerable body of research (Taylor & Robertson, 1995; Taylor, 1998; Taylor & Patankar, 2001). In recent years new methods have been applied to the problem of maintenance error precipitated by factors such as the need for self-assessment of communication and trust. The present study - 2002 -- is an extension of that past work. This research project was designed as the conclusion of a larger effort to help understand, evaluate and validate the impact of Maintenance Resource Management (MRM) training programs, and other MRM interventions on participant attitudes, opinions, behaviors, and ultimately on enhanced safety performance. It includes research and development of evaluation methodology as well as examination of psychological constructs and correlates of maintainer performance. In particular, during 2002, three issues were addressed. First, the evaluation of two (independent & different) MRM programs for changing behaviors was undertaken. In one case we were able to further apply the approach to measuring written communication developed during 2001 (Taylor, 2002; Taylor & Thomas, 2003). Second, the MRM/TOQ surveys were made available for completion on the internet. The responses from these on-line surveys were automatically linked to a results calculator (like the one developed and described in Taylor, 2002) to aid industry users in analyzing and evaluating their local survey data on the internet. Third, the main trends and themes from our research about MRM programs over the past dozen years were reviewed.

Taylor, James C.↗

Planning, creating and documenting a NASTRAN finite element model of a modern helicopter

Mathematical models based on the finite element method of structural analysis as embodied in the NASTRAN computer code are widely used by the helicopter industry to calculate static internal loads and vibration of airframe structure. The internal loads are routinely used for sizing structural members. The vibration predictions are not yet relied on during design. NASA's Langley Research Center sponsored a program to conduct an application of the finite element method with emphasis on predicting structural vibration. The Army/Boeing CH-47D helicopter was used as the modeling subject. The objective was to engender the needed trust in vibration predictions using these models and establish a body of modeling guides which would enable confident future prediction of airframe vibration as part of the regular design process.

Gabal, R.↗

Dataset 1: A National and City Dataset on Human Factors in Pooled Rideshare, 2021

Dataset 1: A National and City Dataset on Human Factors in Pooled Rideshare, 2021. Dataset Description: Pooled Rideshare Acceptance Survey - Phase 1 (2021, N = 5,385). This dataset captures responses from a nationally representative sample of 5,385 adults across the United States to understand public acceptance, preferences, and behavioral intentions related to pooled rideshare (PR) services. The primary objective of this research is to provide actionable insights to inform the design, deployment, and policy development of sustainable shared mobility systems. Data was collected via an online survey administered through a national panel provider. Participants ranged in age from 18 to 95 years, and representation from all U.S. regions. The survey instrument was designed to explore numerous dimensions related to PR adoption including demographic traits, current travel habits, rideshare familiarity, trust, safety, environmental attitudes, and user experience preferences. Both rideshare users and non-users were included, offering a diverse range of perspectives. - Phase_1_Final - The dataset includes survey items developed from literature reviews, and prior field studies. Each row represents an individual respondent, and each column corresponds to a variable such as willingness to use pooled rideshare, attitudes toward specific service features, and sociodemographic data. The data is available in both .CSV and .SAV formats. - Phase_1_Final_MapFile - The accompanying data dictionary explains all variable labels, response scales, and codes. An .XLSX format of the full survey instrument is also included to support interpretation and reuse of the dataset.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗