Search NASA⌕ Search

SEARCH · Search NASA

Results for “Safety Design Approach”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 559 records · Page 31

Overview of the X-33 Extended Flight Test Range

On July 1, 1996, the National Aeronautics and Space Administration signed a Cooperative Agreement No. NCC8-115 with Lockheed Martin Skunk Works to develop and flight test the X-33, a scaled version of a reusable launch vehicle. The development of an Extended Test Range, with range instrumentation providing continuous vehicle communications from Edwards Air Force Base Ca. to landing at Malmstrom Air Force Base Montana, was required to flight test the mach 15 vehicle over 950 nautical miles. The cooperative agreement approach makes Lockheed Martin Skunk Works responsible for the X-33 program. When additional Government help was required, Lockheed "subcontracted" to NASA Field Centers for certain work. It was through this mechanism that Dryden Flight Research Center became responsible for the Extended Test Range. The Extended Test Range Requirements come from two main sources: 1) Range Safety and 2) Lockheed Martin Skunk Works. The range safety requirements were the most challenging to define and meet. The X-33 represents a vehicle that launches like a rocket, reenters the atmosphere and lands autonomously like an aircraft. Historically, rockets have been launched over the oceans to allow failed rockets to be destroyed using explosive devices. Such approaches had to be reconsidered for the X-33 flying over land. Numerous range requirements come from Lockheed Martin Skunk Works for interface definitions with the vehicle communication subsystems and the primary ground operations center, defined the Operations Control Center. Another area of considerable interest was the reentry plasma shield that causes "blackout" of the radio frequency signals, such as the range safety commands. Significant work was spent to analyze and model the blackout problem using a cooperative team of experts from across the country. The paper describes the Extended Test Range a, an unique Government/industry team of personnel and range assets was established to resolve design issues and accomplish the X-33 requirements. The paper will also provide an overview of the technical approaches used to meet program requirements. The advances used to develop the extended test range will be discussed to show how other hypersonic and Access to Space programs can benefit from the development of the extended test range. Acknowledgment: The work described in this paper was NASA supported through cooperative agreement NCC8-115 with Lockheed Martin Skunk Works.

Mackall, D.↗

Ignition and Flame Spread Above Liquid Fuel Pools

Phenomena of ignition and flame spread above liquid fuel pools are studied and factors that can improve fire safety are determined. Dominant mechanisms for convective heat transfer and impact on ignition and flame spread above liquid fuel pools will be determined from these efforts. The approach is: (1) analytical and computational studies to evaluate scaling factors; (2) experimental design, development, and operation in laboratory at Earth's gravity; (3) experimental design for drop towers at NASA Lewis Research Center; (4) development and operation of drop tower experiments together with NASA Lewis Research personnel and; (5) develop recommendations for Lear Jet and/or Space Shuttle experiments. Through this research, a mathematical model of two-phase systems is formulated and is being coded for the computer.

Sirignano, W. A.↗

Pegasus (trademark) launch operations and the PegaStar integrated spacecraft bus

The Pegasus air launched space booster, which successfully flew its maiden flight on 5 Apr. 1990, provides the international satellite community with a flexible cost effective means for delivering small payloads into low Earth orbit. The vehicle's simple, robust design and horizontal integration methods ensure maximum reliability and significantly reduce launch base infrastructure requirements. The vehicle's air launched approach and ability to launch over open ocean regions provide unmatched flexibility in launch location and approach used to ensure range safety. The PegaStar integrated spacecraft bus, which complements the Pegasus launch system, can provide a turnkey means for delivering instrument and sensor packages into low Earth orbit and providing extended (5 to 10 year) on orbit operational support. Pegasus and PegaStar are described, including payload interfaces, delivery capability; integration methods, facility and ground support equipment requirements; and typical launch operations.

Mosier, Marty↗

The Systems Engineering Process for Human Support Technology Development

Systems engineering is designing and optimizing systems. This paper reviews the systems engineering process and indicates how it can be applied in the development of advanced human support systems. Systems engineering develops the performance requirements, subsystem specifications, and detailed designs needed to construct a desired system. Systems design is difficult, requiring both art and science and balancing human and technical considerations. The essential systems engineering activity is trading off and compromising between competing objectives such as performance and cost, schedule and risk. Systems engineering is not a complete independent process. It usually supports a system development project. This review emphasizes the NASA project management process as described in NASA Procedural Requirement (NPR) 7120.5B. The process is a top down phased approach that includes the most fundamental activities of systems engineering - requirements definition, systems analysis, and design. NPR 7120.5B also requires projects to perform the engineering analyses needed to ensure that the system will operate correctly with regard to reliability, safety, risk, cost, and human factors. We review the system development project process, the standard systems engineering design methodology, and some of the specialized systems analysis techniques. We will discuss how they could apply to advanced human support systems development. The purpose of advanced systems development is not directly to supply human space flight hardware, but rather to provide superior candidate systems that will be selected for implementation by future missions. The most direct application of systems engineering is in guiding the development of prototype and flight experiment hardware. However, anticipatory systems engineering of possible future flight systems would be useful in identifying the most promising development projects.

Jones, Harry↗

Flat H Redundant Frangible Joint Development

Orion and Commercial Crew Program (CCP) Partners have chosen to use frangible joints for certain separation events. The joints currently available are zero failure tolerant and will be used in mission safety applications. The goal is to further develop a NASA designed redundant frangible joint that will lower flight risk and increase reliability. FY16 testing revealed a successful design in subscale straight test specimens that gained efficiency and supports Orion load requirements. Approach / Innovation A design constraint is that the redundant joint must fit within the current Orion architecture, without the need for additional vehicle modification. This limitation required a design that changed the orientation of the expanding tube assemblies (XTAs), by rotating them 90deg from the standard joint configuration. The change is not trivial and affects the fracture mechanism and structural load paths. To address these changes, the design incorporates cantilevered arms on the break plate. The shock transmission and expansion of the XTA applies force to these arms and creates a prying motion to push the plate walls outward to the point of structural failure at the notched section. The 2014 test design revealed that parts could slip during functioning wasting valuable energy needed to separate the structure with only a single XTA functioning. Dual XTA functioning fully separated the assembly showing a discrepancy can be backed up with redundancy. Work on other fully redundant systems outside NASA is limited to a few patents that have not been subjected to functionality testing Design changes to prevent unwanted slippage (with ICA funding in 2015) showed success with a single XTA. The main goal for FY 2016 was to send the new Flat H RFJ to WSTF where single XTA test failures occurred back in 2014. The plan was to gain efficiency in this design by separating the Flat H RFJ with thicker ligaments with dimensions baselined in 2014. Other modifications included geometry changes to better disperse loads paths and to minimize air gaps. The design additionally added more structural strength to enhance the structural limits in static loads testing. The design also implemented a smoother load line through the assembly. Results / Knowledge Gained The new Flat H RFJ successfully fractured at WSTF with thicker ligaments and lower cord size. Where failure to separate occurred earlier, there is now excessive energy available for structural separation. The new challenge to provide some structural support to prevent secondary fracturing of the break plate remains to be completed. This future work is being funded by the JSC Engineering Directorate in 2017 to elevate the TRL on curved Flat H RFJs that configure with the Orion Service Panel Separation. Additional funding from JSC Engineering will provide new design testing to avoid secondary fracturing.

Brown, Chris↗

SUV Rollover Test

The National Highway Traffic Safety Administration (NHTSA) approached NASA to evaluate vehicle rollover resistance using the High Capacity Centrifuge Facility. Testing was planned for six different sport utility vehicles. Previous methods for simulating the rollover conditions were considered to be not indicative of the true driving conditions. A more realistic gradual application of side loading could be achieved by using a centrifuge facility. A unique load measuring lower support system was designed to measure tire loading on the inboard tires and to indicate tire liftoff. This lower support system was designed to more closely emulate the actual rollover conditions. Additional design features were provided to mitigate potential safety hazards.

Chambers, William V.↗

Optimizing pressurized-water reactor equilibrium cycle using a novel loading pattern encoding and rule-based genetic crossover operators

This work presents an extended multi-batch approach applied in shuffling scheme optimization for equilibrium cycle for pressurized water reactors using Genetic Algorithms (GAs). A new ruled based GA crossover operator called Inherited Location and Batch (ILB) was introduced to enhance offsprings reproduction efficiency specialized for equilibrium cycle optimization problem. This approach was implemented within the Plant ReLoad Optimization (PRLO) framework and validated using a generic reactor model based on the AP1000 design, with core parameters calculated via the CASMO/SIMULATE software package. The ILB approach is then applied for both single and multi-objective problems in maximizing cycle length and core average exposure while minimizing the average enrichment of the 57 fresh fuel assemblies (FAs) per cycle. The optimal solutions are selected based on their dominance to the objectives from all feasible solutions. This research identified three optimal solutions satisfied safety constraints: The first solution minimizes feed enrichment costs with a cycle length of 338.8 days and core exposure of 25.39 MWd/MT; the second solution extends cycle length to 361.2 days, with the highest core exposure of 26.84 MWd/MT, using 3.75 wt% average fuel enrichment; the third solution balances both objectives with a cycle length of 349.6 days, core exposure of 25.82 MWd/MT with a slight enrichment increase compared to the first solution. Collectively, these findings underscore the efficiency and effectiveness of the proposed approach in achieving practical multi-objective optimal equilibrium cycle designs using GAs optimizer.

11 - NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

Facilitating Data Collection of Maintenance Events to Populate the Hydrogen Component Reliability Database (HyCReD)

The Hydrogen Component Reliability Database (HyCReD) is a collaborative project between the National Renewable Energy Laboratory, the University of Maryland, and hydrogen stakeholders to improve safety and reliability for hydrogen facilities by implementing component reliability data taxonomies that support hydrogen infrastructure failure rate analysis. The project aims to quantify failure rates of hydrogen components through high-quality data collection and analysis on root causes and maintenance needed. HyCReD provides a common database for cataloging hydrogen component failures which exists for reliability research in many other mature industries [2]. The database fills a gap for the hydrogen community by providing a scientifically rigorous approach to quantitative risk assessment (QRA), prognostic health management (PHM), and reliability-centered maintenance (RCM) analysis. High level results will be aggregated and anonymized to protect company sensitive information; detailed results will be used to help address issues of hydrogen components. These advanced analytics will support accelerated deployment of hydrogen infrastructure by enabling better: design and safety of projects (safety codes and standards development), infrastructure reliability and cost (component failure rates, maintenance protocols), and component R&D needs (robust supply chain). A key to a successful HyCReD implementation is facilitating the ease of reporting and data quality in the database that can be used for analysis. Maintenance data was a previously identified gap in initial efforts to populate and validate the database taxonomies [3]. Collection of maintenance data will be instrumental in identifying failure modes and rates, identifying incipient component failures or reduced performance, cataloging best practices for maintenance routines and methods for prognostic health management, and quantifying the risk and effect of different failure modes. Several key priorities are identified for streamlined data collection to achieve quality and detailed failure data: Applicability, Ease of Use, Accessibility, and Information Security. The HyCReD team has now begun deployment of the database to several companies and groups that have signed non-disclosure agreements to facilitate the data collection of failures in industry hydrogen refueling station infrastructure. This paper will provide an update into the process of HyCReD deployment including the development of a coding guide for facility personnel to reference and ensure data quality and consistency from one station to another as well as implementation of contextually dependent data fields of system taxonomy and formatted entries to provide ease of use. The goal is to communicate the lessons learned from the roll-out to technicians and engineers in the field, and the addition of need for high level of security to protect all stakeholders.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

DETAILED DESIGN OF AN EPITHERMAL/INTERMEDIATE CRITICAL EXPERIMENT USING THE SANDIA NATIONAL LABORATORIES CRITICAL FACILITY

Nuclear criticality safety evaluations commonly take credit for neutron-absorbing materials. The normal practice for validating the calculational process to develop safety limits and margins of safety is to compare the safety case models with calculations of various critical experiments of a similar composition. Because there is a lack of critical experiments with various relevant neutron-absorbing materials mixed with fissile material, a new approach is being developed. This new approach uses small amounts of these credited materials in a critical assembly and assesses their worth and neutron energy spectral characteristics using absorption reaction rates. This approach is proposed as a new method for nuclear data validation. The assessment will involve measured central reactivity worth in a critical or near-critical assembly and subsequent comparison with calculated values from Monte Carlo computer analyses. Additionally, four configurations are proposed which replace fuel rods in the driver region with absorber rods. These configurations will allow for examination of the effects of the material in a more thermalized spectrum experiment selection in these scenarios. This paper presents some case studies examining the impact of these changes on some hypothetical safety analysis systems.This paper documents the detailed design portion of the critical experiment design process, focusing on development of a capability to test epithermal/ intermediate energy cross sections for materials using the 7uPCX critical experiment facility. Tantalum is specified as the test material to be examined.

Clarity, Justin↗

Supporting Hazard Analysis for Wildfire Response Using fmdtools and MIKA

The System Wide Safety (SWS) Safety Demonstrator (SD) Series drives development of an increasingly capable In-Time Aviation Safety Management System (IASMS) focusing on humanitarian applications, starting with wildfire response (SD-1). The goals of this report are to (1) provide an early hazard analysis and mitigation evaluation of wildfire response to support these efforts and (2) provide a demonstration of capabilities of the Fault Model Design Tools (fmdtools) and Manager for Intelligent Knowledge Access (MIKA) tools. fmdtools provides a modeling, simulation, and resiliency analysis framework in which a wildfire response model, the System Modeling and Analysis of Resiliency in Scalable Traffic Management for Emergency Response Operations (SMARt-STEReO), is built. MIKA is an intelligent knowledge manager with several capabilities, including assisting in hazard analysis by extracting and analyzing hazards from historical incident reports. The following topics are covered in the report: Understanding Wildfire Hazard Dynamics. We provide a description and simulated examples of how hazards occur in the SMARt-STEReO model of wildfire response and their effect on its outcome. This provides a common mental model and focuses the analysis presented in the remainder of the report. Wildfire Hazard Identification. MIKA identifies wildfire hazards from three relevant datasets: the ICS-209-PLUS, SAFECOM, and SAFENET. Hazards are manually organized into a taxonomy and MIKA analyzes each hazard’s effects, likelihood, severity, and risk. Evaluating Mitigation Strategies. The SMARt-STEReO wildfire response model built in fmdtools evaluates a subset of identified hazards. Specifically, we simulate the effect of communications faults and equipment faults on operator safety, the effect of changing winds and flammability, and a scenario with multiple ignition points and heavy smoke. Tool Limitations and Usage Considerations. We provide a discussion of appropriate tool use cases as well as limitations and considerations for usage. The tool findings are used to synthesize recommendations for wildfire response operations, which can be captured as part of an IASMS. Key recommendations are as follows: Hazards are identified from a broad spectrum of sources including aircraft subsystems, operational sources, and ground crew operations. Highest risk operational environment hazards identified are Evacuations. The highest risk manned aerial operations hazard categorized is Jumper Operations Mishap. Ground crew hazards that are highest risk are Burns, Cargo Operations Overhead, Dehydration, Entrapment, Falling Objects, Heart Attacks, Heat Exhaustion, Inadequate Training or Certification, Vehicle Breakdown, and Vehicle Collision. Modelled containment failures arise from a mismatch between the difficulty of the firefighting scenario and the capacity (e.g., speed, effectiveness, awareness) of the response. In firefighting scenarios where containment is possible (e.g., because the fire does not spread too quickly), these mismatches can occur because of a change in environmental conditions (e.g., wind, flammability, etc) or because of planning, equipment, or communications faults. Improvements to communications increase the capacity of the firefighting response by reducing the time needed to respond to the fire. While surveillance does not increase this capacity by itself, it increases operator safety by increasing state awareness, enabling firefighters to evade approaching fires. Increasing both has a synergistic effect. In general, these performance and resilience increases generalize over fault scenarios as well as unforeseen changes to circumstances (i.e., wind, aridity, etc.). However, these improvements need to be designed so as not to make the system prone to persistent large-scale communications outages, which can reduce performance.

Hazard analysis↗

Adopting an Objectives-Driven Assurance Case Approach for Achieving Space Flight Mission Planetary Protection Objectives

Traditionally, NASA has utilized prescriptive technical and process requirements to ensure safety and mission assurance performance objectives for space flight missions are achieved. While prescriptive re-quirements may be easier to communicate and manage throughout the systems engineering process, the highly-constrained nature of prescriptive requirements can limit the ability to take advantage of cost-saving opportunities and offer limited ability to explore other options or alternative designs, processes, and methods. It can also be difficult to develop prescriptive requirements for objectives that are prob-abilistic in nature or that cannot be satisfied by direct verification. In contrast, the development of an assurance case allows for a compelling, comprehensible, and valid argument to be developed with support-ing evidence that shows safety and mission assurance objectives have been satisfied. Analogous to how patent applications are constructed for inventions, an assurance case has a high-level claim of meeting a safety and mission assurance objective, followed by a more specific set of sub-claims and technical evidence which supports the claims. The objectives-driven assurance case approach allows for a better understand-ing and exploration of the trade space, more flexibility to balance trades, and the ability to realize and implement technical and process innovations for resource, time, and cost savings. The assurance case is a living case that evolves over the entire program life cycle. Recently, NASA’s Office of Planetary Pro-tection (OPP) has adopted the assurance case approach as an acceptable methodology for demonstrating avoidance of contamination of target solar system bodies explored by NASA space flight missions. This methodology has been incorporated into NASA’s new technical standard for planetary protection and is currently being utilized by the Mars Sample Return campaign for safe sample containment during sample return. This presentation will explore the development and implementation of an assurance case approach in the context of planetary protection, the shift from prescriptive requirements and the ongoing culture change in the technical community, and the support and guidance from NASA’s OPP in adopting the assurance case approach for achieving planetary protection objectives on NASA’s space flight missions.

Elaine Seasly↗

Preliminary Thermal-hydraulics and Selected Safety Analysis for Holos-Quad Reactor Design

This report presents thermal hydraulics and safety analyses of the 10 MWe Holos-Quad micro-reactor design developed by HolosGen LLC. These analyses were executed under steady-state and station black-out (SBO) transient conditions using the System Analysis Module (SAM), with a focus on ensuring peak fuel temperatures do not exceed the safety thresholds of 1,250°C for steady state normal operating conditions and 1,600°C for transient conditions. For steady-state temperature predictions, a coupled 1D fluid-to-3D solid heat conduction methodology was used. The steady-state simulations included a model of the central core region where power peaking occurs to predict the maximum steady-state fuel temperature, and a coarse-mesh full-core model to provide the initial condition for the consequent transient SBO decay heat removal simulation. The maximum fuel temperature predicted from the central core region simulations under the normal operating condition was 1,222°C, which is below the design limit 1,250°C. To simulate a SBO transient, a full core model was necessary because of the non-axial symmetric core design and heat loss from the outer core structures to the environment. To reduce the required computational costs, a novel scaled subassembly approach was used to model the full core domain. With the full core steady-state temperature distribution provided as the initial condition, the passive decay heat removal of the core was simulated with the scaled subassembly full core model under SBO transient conditions. This analysis showed that the peak fuel temperatures of the Holos-Quad core remained below their steady-state values during the transient, therefore much lower than the safety limit 1,600°C. This is mainly due to the large thermal inertia of the graphite matrix, relatively low power density, and the large surface-to-volume-ratio of the core. The preliminary analyses presented in this report confirm the inherent safety of the Holos-Quad micro-reactor thermal-hydraulics design, as the peak fuel temperatures under both normal and off-normal operational conditions remain within design and safety limits.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

Enhanced accuracy through ensembling of randomly initialized auto-regressive models for dynamical systems

Computational mechanics simulations using traditional finite element methods (FEM) require prohibitively expensive computational resources for real-time engineering applications, design optimization, and digital twin implementations. While machine learning (ML) surrogate models offer significant computational speedups, autoregressive ML models for time-dependent mechanical systems suffer from error accumulation that compromises long-term prediction reliability - a critical concern for engineering applications where accuracy over extended time horizons is essential for safety and performance assessments. Here, we propose a deep ensemble framework specifically designed to address this challenge in computational mechanics applications, where multiple ML surrogate models with random weight initializations are trained in parallel and their predictions aggregated during inference. This approach leverages statistical diversity to maximize information gain from a fixed set of training data and to mitigate error propagation, while maintaining the computational efficiency that makes ML surrogates attractive for engineering practice. We validate the framework on three representative problems spanning critical areas of computational mechanics: stress field evolution in heterogeneous microstructures under complex loading (relevant to advanced materials design and composite analysis), planetary-scale shallow water dynamics (applicable to environmental and geotechnical engineering), and Gray-Scott reaction-diffusion systems (relevant to mass transport and chemical process engineering). Across all test cases, the ensemble approach demonstrates consistent error reduction of 15-33% compared to individual models. The codes for this work are available on GitHub (https://github.com/Graham-Brady-Research-Group/AutoregressiveEnsemble_SpatioTemporal_Evolution).

autoregressive prediction↗

SAS4A/SASSYS-1 Verification and Validation Plan for the Versatile Test Reactor

Software verification and validation (V&V) hold an important role in the safety analysis for nuclear facilities. Codes and models utilized in calculations that demonstrate the safety basis as part of a license application or authorization must demonstrate an acceptable pedigree with regard to key critical characteristics that are comprised of the functional and performance requirements of the software. This document describes the methodology for verification and validation of the SAS4A/SASSYS-1 systems-level liquid-metal safety analysis software in support of DOE authorization of the Versatile Test Reactor (VTR). The overall goal of this V&V effort is to demonstrate the suitability of SAS4A/SASSYS-1 for evaluation of safety performance and characterization of safety margins in VTR. To that end, the V&V methodology will be used to demonstrate the adequacy of the component and physical models of SAS4A/SASSYS-1 for the corresponding VTR design elements. This methodology, which has been derived as a generalized approach to the U.S. NRC’s evaluation model development and assessment process (EMDAP) of Regulatory Guide 1.203, entails four high-level activities: software requirements identification, assessment base development, determination of acceptance, and gap closure. The methodology has been generalized to be suitable for both verification and validation of the software for the VTR project. Several high-level engineering analysis quality assurance measures as well as supporting V&V methodology documentation are also described in this document to help support demonstration of software acceptance. To support initial development of the SAS4A/SASSYS-1 V&V basis, existing verification test problems and systems benchmarks are also identified and briefly described in this document.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

In-Flight Icing Training for Pilots Using Multimedia Technology

Over the last five years, the Aircraft Icing Project of the NASA Aviation Safety Program has developed a number of in-flight icing education and training aids to support increased awareness for pilots of the hazards associated with atmospheric icing conditions. Through the development of this work, a number of new instructional design approaches and media delivery methods have been introduced to enhance the learning experience, expand user interactivity and participation, and, hopefully, increase the learner retention rates. The goal of using these multimedia techniques is to increase the effectiveness of the training materials. This paper will describe the mutlimedia technology that has been introduced and give examples of how it was used.

Burke, Kevin M.↗

Computation of Low Speed Cavity Noise

Over the last five years, the Aircraft Icing Project of the NASA Aviation Safety Program has developed a number of in-flight icing education and training aids to support increased awareness for pilots of the hazards associated with atmospheric icing conditions. Through the development of this work, a number of new instructional design approaches and media delivery methods have been introduced to enhance the learning experience, expand user interactivity and participation, and, hopefully, increase the learner retention rates. The goal of using these multimedia techniques is to increase the effectiveness of the training materials. This paper will describe the multimedia technology that has been introduced and give examples of how it was used.

Blech, Richard A.↗

Modeling, Analysis and Simulation Approaches Used in Development of the National Aeronautics and Space Administration Max Launch Abort System

The National Aeronautics and Space Administration (NASA) Engineering and Safety Center was chartered to develop an alternate launch abort system (LAS) as risk mitigation for the Orion Project. Its successful flight test provided data for the design of future LAS vehicles. Design of the flight test vehicle (FTV) and pad abort trajectory relied heavily on modeling and simulation including computational fluid dynamics for vehicle aero modeling, 6-degree-of-freedom kinematics models for flight trajectory modeling, and 3-degree-of-freedom kinematics models for parachute force modeling. This paper highlights the simulation techniques and the interaction between the aerodynamics, flight mechanics, and aerodynamic decelerator disciplines during development of the Max Launch Abort System FTV.

Yuchnovicz, Daniel E.↗

Towards Real-time, On-board, Hardware-Supported Sensor and Software Health Management for Unmanned Aerial Systems

Unmanned aerial systems (UASs) can only be deployed if they can effectively complete their missions and respond to failures and uncertain environmental conditions while maintaining safety with respect to other aircraft as well as humans and property on the ground. In this paper, we design a real-time, on-board system health management (SHM) capability to continuously monitor sensors, software, and hardware components for detection and diagnosis of failures and violations of safety or performance rules during the flight of a UAS. Our approach to SHM is three-pronged, providing: (1) real-time monitoring of sensor and/or software signals; (2) signal analysis, preprocessing, and advanced on the- fly temporal and Bayesian probabilistic fault diagnosis; (3) an unobtrusive, lightweight, read-only, low-power realization using Field Programmable Gate Arrays (FPGAs) that avoids overburdening limited computing resources or costly re-certification of flight software due to instrumentation. Our implementation provides a novel approach of combining modular building blocks, integrating responsive runtime monitoring of temporal logic system safety requirements with model-based diagnosis and Bayesian network-based probabilistic analysis. We demonstrate this approach using actual data from the NASA Swift UAS, an experimental all-electric aircraft.

System & Software Health Management↗