Search NASA⌕ Search

SEARCH · Search NASA

Results for “certification”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 541 records · Page 30

Nuclear Quality Assurance Certification of the MCNP-ORIGEN Activation Automation tool

The MCNP-ORIGEN Activation Automation (MOAA) tool couples MCNP and ORIGEN-S, allowing to support ATR and TREAT experiments by predicting their composition and activity before their irradiation takes place. MOAA is developed and maintained by the Irradiation Experiment Neutronics Analysis group (C-150) at INL. This poster presents the motivation behind the development of MOAA, its main workflow, as well as the software quality assurance (SQA) efforts required by LWP-13620, "Managing Information Technology Assets."

07 ISOTOPE AND RADIATION SOURCES↗

Overarching Properties as Means of Compliance: An Industrial Case Study

The Overarching Properties (OPs) have been created by an inter-national working group and are being evaluated by the National Aeronautics and Space Administration (NASA), the Federal Aviation Administration (FAA), industry, and other certifying agencies in an effort to streamline certification processes. Their intent is to facilitate the use of alternative approaches and to al-low flexibility to combine the system, software, and complex hardware certification. The hope is that the FAA may eventually establish an Advisory Circular that offers the OPs as a Means of Compliance (MoC) for software approval (and eventually systems and hardware) by showing the product possesses the three OPs: Intent (specification of the intended behavior), Correctness (implementation of the intended behavior) and Innocuity (safety of unintended behavior). In the certification community, there is still a concern about the practicability of using such high level properties in certification. This paper aims to address that concern by showing possession of the OPs in an industrial case study using assurance arguments. The two main contributions of this paper are: a certification process based on OPs as Means of Compliance, and a certification argument for an on-board physical model of an UAV, as industrial example. We pro-pose a hybrid approach for the certification process that combines OPs with existing certification standards. Thus, OPs can be used for parts of a system that uses technologies that are not supported by current standards or for which existing standards require additional effort without commensurate additional safety assurance.

certification↗

Damage Simulation in Composite Materials: Why It Matters and What Is Happening Currently at NASA in This Area

Use of lightweight composite materials in space and aircraft structure designs is often challenging due to high costs associated with structural certification. Of primary concern in the use of composite structures is durability and damage tolerance. This concern is due to the inherent susceptibility of composite materials to both fabrication and service induced flaws. Due to a lack of general industry accepted analysis tools applicable to composites damage simulation, a certification procedure relies almost entirely on testing. It is this reliance on testing, especially compared to structures comprised of legacy metallic materials where damage simulation tools are available, that can drive costs for using composite materials in aerospace structures. The observation that use of composites can be expensive due to testing requirements is not new and as such, research on analysis tools for simulating damage in composite structures has been occurring for several decades. A convenient approach many researchers/model-developers in this area have taken is to select a specific problem relevant to aerospace structural certification and develop a model that is accurate within that scope. Some examples are open hole tension tests, compression after impact tests, low-velocity impact, damage tolerance of an embedded flaw, and fatigue crack growth to name a few. Based on the premise that running analyses is cheaper than running tests, one motivation that many researchers in this area have is that if generally applicable and reliable damage simulation tools were available the dependence on certification testing could be lessened thereby reducing overall design cost. It is generally accepted that simulation tools if applied in this manner would still need to be thoroughly validated and that composite testing will never be completely replaced by analysis. Research and development is currently occurring at NASA to create numerical damage simulation tools applicable to damage in composites. The Advanced Composites Project (ACP) at NASA Langley has supported the development of composites damage simulation tools in a consortium of aerospace companies with a goal of reducing the certification time of a commercial aircraft by 30%. And while the scope of ACP does not include spacecraft, much of the methodology and simulation capabilities can apply to spacecraft certification in the Space Launch System and Orion programs as well. Some specific applications of composite damage simulation models in a certification program are (1) evaluation of damage during service when maintenance may be difficult or impossible, (2) a tool for early design iterations, (3) gaining insight into a particular damage process and applying this insight towards a test coupon or structural design, and (4) analysis of damage scenarios that are difficult or impossible to recreate in a test. As analysis capabilities improve, these applications and more will become realized resulting in a reduction in cost for use of composites in aerospace vehicles. NASA is engaged in this process from both research and application perspectives. In addition to the background information discussed previously, this presentation covers a look at recent research at NASA in this area and some current/potential applications in the Orion program.

McElroy, Mack↗

An MBSE Framework to Identify Regulatory Gaps for Electrified Transport Aircraft

A typical aircraft certification process consists of obtaining a type, production, airworthiness, and continued airworthiness certificates. During this process, a type certification plan is created that includes the intended regulatory operating environment, the proposed certification basis, means of compliance, and a list of documentation to show compliance. Earlier work by the authors demonstrated a model-based framework for the management of these certification artifacts for normal category airplanes. Presently, it is expanded and adapted to consider certification for transport category airplanes regulated under 14 CFR Part 25, providing clear transparency and traceability between the text of the regulations and imposed requirements, contextual information, and specified test activities. In particular, a capability to identify potential gaps in the applicability of regulations for novel architectures such as electrified aircraft is proposed. This capability, based on mismatches between the functional intent and the corresponding prescribed physical implementation, is developed. A sample implementation of the proposed capability is presented for a notional electrified powertrain aircraft architecture.

electrified transport aircraft↗

Structural Analysis for the American Airlines Flight 587 Accident Investigation: Global Analysis

NASA Langley Research Center (LaRC) supported the National Transportation Safety Board (NTSB) in the American Airlines Flight 587 accident investigation due to LaRC's expertise in high-fidelity structural analysis and testing of composite structures and materials. A Global Analysis Team from LaRC reviewed the manufacturer s design and certification procedures, developed finite element models and conducted structural analyses, and participated jointly with the NTSB and Airbus in subcomponent tests conducted at Airbus in Hamburg, Germany. The Global Analysis Team identified no significant or obvious deficiencies in the Airbus certification and design methods. Analysis results from the LaRC team indicated that the most-likely failure scenario was failure initiation at the right rear main attachment fitting (lug), followed by an unstable progression of failure of all fin-to-fuselage attachments and separation of the VTP from the aircraft. Additionally, analysis results indicated that failure initiates at the final observed maximum fin loading condition in the accident, when the VTP was subjected to loads that were at minimum 1.92 times the design limit load condition for certification. For certification, the VTP is only required to support loads of 1.5 times design limit load without catastrophic failure. The maximum loading during the accident was shown to significantly exceed the certification requirement. Thus, the structure appeared to perform in a manner consistent with its design and certification, and failure is attributed to VTP loads greater than expected.

Young, Richard D.↗

SRNL's Lessons Learned from the University of Nevada Reno{sup TM} Nuclear Packaging Internships - 19464

The U.S. Department of Energy's Packaging Certification Program (DOE PCP) and the University of Nevada, Reno (UNR) Mechanical Engineering Department have developed an accredited, graduate level nuclear packaging certificate. The mission is to ensure that the DOE staff and users of PCP services are knowledgeable and competent in packaging and transportation activities. Since 2008, the Savannah River National Laboratory (SRNL) has been teaching two classes for the DOE PCP Packaging University. This paper introduces a recently added third class, where SRNL provided Site Supervisors, targeted toward engineering interns. As part of ensuring a future workforce, the Packaging Technology and Transportation Engineering Group (PT and TE) at Savannah River National Laboratory (SRNL) normally employs two to three summer interns each year. The internships provide SRNL innovative s performing valuable research and support work related to package certification. It also provides SRNL the opportunity to bring in perspective engineers on 'trial-basis.' The interns benefit by learning valuable career skills and gaining exposure to a broad-based career field in the field of packaging. As part of the job specific training, the summer interns are provided an overview of package design, testing, and certification. This includes package operations, containment vessel leak testing, and SARP preparation. Two years ago, SRNL recognized the efficiency of using the SRNL-taught courses for the summer interns working in SRNL PT and TE. SRNL requested that UNR allow the PT and TE two summer interns, who were rising college juniors, to enroll in the SRNL-taught courses for graduate credit. UNR agreed and allowed the interns to enroll under a special admission status. Since that time, UNR developed a new class within the Graduate Certificate in Nuclear Packaging (GCNP), for the summer intern research work. This new class offers a formalized framework for the summer interns to conduct research, while ensuring that the research is performed in a rigor consistent with an accredited college level setting. Last summer, the SRNL PT and TE had three summer interns - all participating in the new course, UNR ME-699 Nuclear Packaging Summer Internship - with each earning three graduate credits from UNR in mechanical engineering. This paper provides a brief overview of the DOE PCP Packaging University/ UNR GCNP, a discussion of SRNL's use of summer interns as a tool to recruit and train the future workforce, and lessons learned from having last year's three SRNL PPT and TE summer interns enroll in the UNR Packaging Internship Class. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

ALERT AATR Final Report: Lawrence Livermore National Laboratory

This report addresses the problem of automatically recognizing objects of interest (OOIs) in x-ray computed tomography (CT) images of baggage (plastic bins in our case). The discussion draws heavily from the material in [1]. The material composition and basic physical features of interest (FOIs, such as mass and thickness) of the OOIs are defined in an object requirement specification (ORS). The ORS may also provide a detection – false alarm probability goal for each material of interest (MOI). Automatic threat recognition (ATR) systems identify CT images of baggage that contain OOIs. ATRs must also identify locations of OOIs within baggage. The current ATR certification process used by DHS requires the ATR hardware and software to be certified on a specific ORS. When the ORS changes, the ATR hardware and software must be recertified. To pass re-certification, the hardware, algorithms and codes may need to be modified. Because ATR-based certification and re-certification are so time-consuming, the current process cannot quickly adapt to changing requirements. Unlike ATRs, adaptive automatic threat recognition (AATR) systems can quickly adapt to an ORS that changes or evolves over time [2]. The proposed AATR-based certification process would require the AATR hardware and software to be certified on a specific baseline ORS. Once certified, the same AATR hardware, algorithms and codes would be applied (by TSA or its delegates) to any ORS supplied in the future as input without going through lengthy recertification. This proposed process would enable the AATR to quickly adapt to changing requirements. This report describes the AATR developed at the Lawrence Livermore National Laboratory (LLNL) for x-ray CT images of baggage. The need and technical requirements for an AATR were developed in collaboration with DHS’s Explosives Division and Northeastern University’s Awareness and Localization of Explosives-Related Threats (ALERT) Center, a DHS Center of Excellence (http://www.northeastern.edu/alert/).

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

Performance Evaluation of Comparative Vacuum Monitoring and Piezoelectric Sensors for Structural Health Monitoring of Rotorcraft Components

The costs associated with the increasing maintenance and surveillance needs of aging structures are rising at an unexpected rate. Multi-site fatigue damage, hidden cracks in hard-to-reach locations, disbonded joints, erosion, impact, and corrosion are among the major flaws encountered in today’s extensive fleet of aging aircraft and space vehicles. Aircraft maintenance and repairs represent about a quarter of a commercial fleet’s operating costs. The application of Structural Health Monitoring (SHM) systems using distributed sensor networks can reduce these costs by facilitating rapid and global assessments of structural integrity. The use of in-situ sensors for real-time health monitoring can overcome inspection impediments stemming from accessibility limitations, complex geometries, and the location and depth of hidden damage. Reliable, structural health monitoring systems can automatically process data, assess structural condition, and signal the need for human intervention. The ease of monitoring an entire on-board network of distributed sensors means that structural health assessments can occur more often, allowing operators to be even more vigilant with respect to flaw onset. SHM systems also allow for condition-based maintenance practices to be substituted for the current time-based or cycle-based maintenance approach thus optimizing maintenance labor. The Federal Aviation Administration has conducted a series of SHM validation and certification programs intended to comprehensively support the evolution and adoption of SHM practices into routine aircraft maintenance practices. This report presents one of those programs involving a Sandia Labs-aviation industry effort to move SHM into routine use for aircraft maintenance. The Airworthiness Assurance NDI Validation Center (AANC) at Sandia Labs, in conjunction with Sikorsky, Structural Monitoring Systems Ltd., Anodyne Electronics Manufacturing Corp., Acellent Technologies Inc., and the Federal Aviation Administration (FAA) carried out a trial validation and certification program to evaluate Comparative Vacuum Monitoring (CVM) and Piezoelectric Transducers (PZT) as a structural health monitoring solution to specific rotorcraft applications. Validation tasks were designed to address the SHM equipment, the health monitoring task, the resolution required, the sensor interrogation procedures, the conditions under which the monitoring will occur, the potential inspector population, adoption of CVM and PZT systems into rotorcraft maintenance programs and the document revisions necessary to allow for their routine use as an alternate means of performing periodic structural inspections. This program addressed formal SHM technology validation and certification issues so that the full spectrum of concerns, including design, deployment, performance and certification were appropriately considered. Sandia Labs designed, implemented, and analyzed the results from a focused and statistically relevant experimental effort to quantify the reliability of a CVM system applied to Sikorsky S-92 fuselage frame application and a PZT system applied to an S-92 main gearbox mount beam application. The applications included both local and global damage detection assessments. All factors that affect SHM sensitivity were included in this program: flaw size, shape, orientation and location relative to the sensors, as well as operational and environmental variables. Statistical methods were applied to performance data to derive Probability of Detection (POD) values for SHM sensors in a manner that agrees with current nondestructive inspection (NDI) validation requirements and is acceptable to both the aviation industry and regulatory bodies. The validation work completed in this program demonstrated the ability of both CVM and PZT SHM systems to detect cracks in rotorcraft components. It proved the ability to use final system response parameters to provide a Green Light/Red Light (“GO” – “NO GO”) decision on the presence of damage. In additional to quantifying the performance of each SHM system for the trial applications on the S-92 platform, this study also identified specific methods that can be used to optimize damage detection, guidance on deployment scenarios that can affect performance and considerations that must be made to properly apply CVM and PZT sensors. These results support the main goal of safely integrating SHM sensors into rotorcraft maintenance programs. Additional benefits from deploying rotorcraft Health and Usage Monitoring Systems (HUMS) may be realized when structural assessment data, collected by an SHM system, is also used to detect structural damage to compliment the operational environment monitoring. The use of in-situ sensors for health monitoring of rotorcraft structures can be a viable option for both flaw detection and maintenance planning activities. This formal SHM validation will allow aircraft manufacturers and airlines to confidently make informed decisions about the proper utilization of CVM and PZT technology. It will also streamline future regulatory actions and formal certification measures needed to assure the safe application of SHM solutions.

42 ENGINEERING↗

Synthesizing Certified Code

Code certification is a lightweight approach to demonstrate software quality on a formal level. Its basic idea is to require producers to provide formal proofs that their code satisfies certain quality properties. These proofs serve as certificates which can be checked independently. Since code certification uses the same underlying technology as program verification, it also requires many detailed annotations (e.g., loop invariants) to make the proofs possible. However, manually adding theses annotations to the code is time-consuming and error-prone. We address this problem by combining code certification with automatic program synthesis. We propose an approach to generate simultaneously, from a high-level specification, code and all annotations required to certify generated code. Here, we describe a certification extension of AUTOBAYES, a synthesis tool which automatically generates complex data analysis programs from compact specifications. AUTOBAYES contains sufficient high-level domain knowledge to generate detailed annotations. This allows us to use a general-purpose verification condition generator to produce a set of proof obligations in first-order logic. The obligations are then discharged using the automated theorem E-SETHEO. We demonstrate our approach by certifying operator safety for a generated iterative data classification program without manual annotation of the code.

Whalen, Michael↗

NASA Structural Analysis Report on the American Airlines Flight 587 Accident - Local Analysis of the Right Rear Lug

A detailed finite element analysis of the right rear lug of the American Airlines Flight 587 - Airbus A300-600R was performed as part of the National Transportation Safety Board s failure investigation of the accident that occurred on November 12, 2001. The loads experienced by the right rear lug are evaluated using global models of the vertical tail, local models near the right rear lug, and a global-local analysis procedure. The right rear lug was analyzed using two modeling approaches. In the first approach, solid-shell type modeling is used, and in the second approach, layered-shell type modeling is used. The solid-shell and the layered-shell modeling approaches were used in progressive failure analyses (PFA) to determine the load, mode, and location of failure in the right rear lug under loading representative of an Airbus certification test conducted in 1985 (the 1985-certification test). Both analyses were in excellent agreement with each other on the predicted failure loads, failure mode, and location of failure. The solid-shell type modeling was then used to analyze both a subcomponent test conducted by Airbus in 2003 (the 2003-subcomponent test) and the accident condition. Excellent agreement was observed between the analyses and the observed failures in both cases. From the analyses conducted and presented in this paper, the following conclusions were drawn. The moment, Mx (moment about the fuselage longitudinal axis), has significant effect on the failure load of the lugs. Higher absolute values of Mx give lower failure loads. The predicted load, mode, and location of the failure of the 1985-certification test, 2003-subcomponent test, and the accident condition are in very good agreement. This agreement suggests that the 1985-certification and 2003- subcomponent tests represent the accident condition accurately. The failure mode of the right rear lug for the 1985-certification test, 2003-subcomponent test, and the accident load case is identified as a cleavage-type failure. For the accident case, the predicted failure load for the right rear lug from the PFA is greater than 1.98 times the limit load of the lugs. I.

Raju, Ivatury S↗