Search NASA⌕ Search

SEARCH · Search NASA

Results for “certification”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 559 records · Page 31

Structural Analysis of the Right Rear Lug of American Airlines Flight 587

A detailed finite element analysis of the right rear lug of the American Airlines Flight 587 - Airbus A300-600R was performed as part of the National Transportation Safety Board s failure investigation of the accident that occurred on November 12, 2001. The loads experienced by the right rear lug are evaluated using global models of the vertical tail, local models near the right rear lug, and a global-local analysis procedure. The right rear lug was analyzed using two modeling approaches. In the first approach, solid-shell type modeling is used, and in the second approach, layered-shell type modeling is used. The solid-shell and the layered-shell modeling approaches were used in progressive failure analyses (PFA) to determine the load, mode, and location of failure in the right rear lug under loading representative of an Airbus certification test conducted in 1985 (the 1985-certification test). Both analyses were in excellent agreement with each other on the predicted failure loads, failure mode, and location of failure. The solid-shell type modeling was then used to analyze both a subcomponent test conducted by Airbus in 2003 (the 2003-subcomponent test) and the accident condition. Excellent agreement was observed between the analyses and the observed failures in both cases. The moment, Mx (moment about the fuselage longitudinal axis), has significant effect on the failure load of the lugs. Higher absolute values of Mx give lower failure loads. The predicted load, mode, and location of the failure of the 1985- certification test, 2003-subcomponent test, and the accident condition are in very good agreement. This agreement suggests that the 1985-certification and 2003-subcomponent tests represent the accident condition accurately. The failure mode of the right rear lug for the 1985-certification test, 2003-subcomponent test, and the accident load case is identified as a cleavage-type failure. For the accident case, the predicted failure load for the right rear lug from the PFA is greater than 1.98 times the limit load of the lugs.

Raju, Ivatury S.↗

NASA/Navy Benchmarking Exchange (NNBE). Volume 1. Interim Report. Navy Submarine Program Safety Assurance

The NASA/Navy Benchmarking Exchange (NNBE) was undertaken to identify practices and procedures and to share lessons learned in the Navy's submarine and NASA's human space flight programs. The NNBE focus is on safety and mission assurance policies, processes, accountability, and control measures. This report is an interim summary of activity conducted through October 2002, and it coincides with completion of the first phase of a two-phase fact-finding effort.In August 2002, a team was formed, co-chaired by senior representatives from the NASA Office of Safety and Mission Assurance and the NAVSEA 92Q Submarine Safety and Quality Assurance Division. The team closely examined the two elements of submarine safety (SUBSAFE) certification: (1) new design/construction (initial certification) and (2) maintenance and modernization (sustaining certification), with a focus on: (1) Management and Organization, (2) Safety Requirements (technical and administrative), (3) Implementation Processes, (4) Compliance Verification Processes, and (5) Certification Processes.

SUBSAFE PROGRAM↗

2021 Component Innovation Awardee: Windurance, LLC

Distributed wind turbine manufacturers seeking to enter the market are often hampered by two challenges: not enough capital and no specific expertise in developing certified electronic equipment. A harsh reality is that off-the-shelf power electronics are neither certified nor cost-effective. This lack of certified controller equipment in the distributed wind energy industry adds expense and impedes market penetration related to certification for individual wind turbines, wind system projects, and installations. Normally, these certification costs would be borne repeatedly by individual turbine manufacturers or developers on a model-by-model or project-by-project basis, resulting in cost and time delays as well as uncertainty and risk for project developers and prospective owners. Windurance seeks to eliminate these challenges by developing and obtaining third-party certification of a standardized wind turbine controller. This will facilitate development, certification, and production while supporting efficiencies not easily achievable by individual manufacturers. Windurance's Distributed Wind Industry Turbine Controller will enable manufacturers to apply proprietary turbine- specific configurations and functionality. When applicable, manufacturers can expand on a Windurance-provided software framework to add unique or proprietary functionality.

CIP↗

Misclassification of primary liver cancer in the Life Span Study of atomic bomb survivors

Primary liver cancer is difficult to diagnose accurately at death, due to metastases from nearby organs and to concomitant diseases, such as chronic hepatitis and cirrhosis. Trends in diagnostic accuracy could affect radiation risk estimates for incident liver cancer by altering background rates or by impacting risk modification by sex and age. We quantified the potential impact of death‐certificate inaccuracies on radiation risk estimates for liver cancer in the Life Span Study of atomic bomb survivors. True‐positive and false‐negative rates were obtained from a previous study that compared death‐certificate causes of death with those based on pathological review, from 1958 to 1987. We assumed various scenarios for misclassification rates after 1987. We obtained estimated true positives and estimated false negatives by stratified sampling from binomial distributions with probabilities given by the true‐positive and false‐negative rates, respectively. Poisson regression methods were applied to highly stratified person‐year tables of corrected case counts and accrued person years. During the study period (1958–2009), there were 1,885 cases of liver cancer, which included 383 death‐certificate‐only (DCO) cases; 1,283 cases with chronic liver disease as the underlying cause of death; and 150 DCO cases of pancreatic cancer among 105,444 study participants. Across the range of scenarios considered, radiation risk estimates based on corrected case counts were attenuated, on average, by 13–30%. Our results indicated that radiation risk estimates for liver cancer were potentially sensitive to death‐certificate inaccuracies. Additional data are needed to inform misclassification rates in recent years.

French, Benjamin↗

Critical design load case fatigue and ultimate failure simulation for a 10-m H-type vertical-axis wind turbine

While previous studies investigating critical VAWT design load cases have focused on large and relatively flexible Darrieus designs, the bulk of current commercial products seeking certification fall in the relatively small, stiff, and H-type configuration, such as the XFlow Energy Corporation turbine that this study compares against. Understanding the critical design load case impacts for both fatigue and ultimate failure for this size and type of VAWT are imperative for certification. The abil

Brownstein, Ian↗

Certified Green Building Materials: Policy Impact Assessment

Chinese building construction is rapidly expanding, making it critical to focus on energy efficiency to curb the increase of energy consumption and emissions over a building’s lifetime. A key mechanism to do so is through building material certification systems and programs. These establish how building materials will perform and can be used to promote energy and resource efficiency, which help create a more sustainable and healthy building industry. This report begins by identifying characteristics of a strong certification system and ways to improve existing systems. To curb building energy demand, the Chinese government began developing a building material certification program to encourage energy and resource efficiency in the building sector. A timeline is provided of their program’s development and provides analysis. China’s building material database is highlighted and analyzed for their significance and opportunities for improvement. The report then continues to analyze the importance of policies such as procurement programs, and the Chinese government is developing their procurement programs for certified green building materials. To understand the potential large-scale impacts of green building material certifications, we conducted an analysis of the environmental and market impact of a nationwide green building procurement policy for all new residential and commercial construction.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

Assessment and Coordination of EVSE Cybersecurity Standards

Cybersecurity certification programs for Electric Vehicle Supply Equipment (EVSE) are fragmented due to no single certification covering all aspects of the device and additionally the existence of multiple programs and under different levels of regulation. These devices are also confronted by the intricate assembly of product software, firmware, and hardware. Devices contain both logical and physical interfaces. These multifaceted devices have vulnerabilities at many levels and interconnect with other potentially vulnerable systems including the electric vehicle, the cloud where data and payment information are stored, and the electric grid and electric grid equipment including utilities. Of the EVSE certification programs that are found, none are directly for the cybersecurity of EVSE. Many standards are for safety, specifically battery safety, some are cybersecurity standards for other types of equipment and can be modeled for EVSE. In specific, ISA/IEC 62443 is found to be significantly in line with EVSE security needs and will be used in future testing to certify EVSE and help guide the project to demonstrate where gaps exist, where strengths lie in the standard and how this can be used to lead the certification efforts in harmonizing EVSE cybersecurity standards. In addition, there are multiple efforts that are currently seeking to build EVSE standards or revise existing standards to address gaps. This effort is seeking to establish a cybersecurity program for EVSE that will inform customers and help increase the level of security across products and state EVSE procurements to achieve consistency across different jurisdictions.

33 ADVANCED PROPULSION SYSTEMS↗

Understanding Biases in Sample Preparation Techniques for Coupled Scanning Electron Microscopy and MAMA PuO 2 Morphological Analysis

In this project, the scanning electron microscopy (SEM) sampling method used during the statistical design study (SDS) was investigated to determine if any sampling biases were present in the analyzed data. Using standard particle size distribution powders from the National Institute of Standards and Technology (NIST 1984 standard reference material) with the origin wet dispersion method, it was determined that a bias to smaller particles was present. This was supported by theoretical calculations using Stokes’ law to determine the settling rate of spherical particles of roughly the same size and mass as those found in the SDS. Based on the theoretical calculations, it was determined that the settling rate for each of the 76 powder sets in the SDS could be unique based on specific particle shape and mass distributions, making a universal correction factor/formula not applicable. Therefore, priority shifted to developing an improved wet dispersion method that significantly reduced the particle settling rate for all particle size and shapes. This was achieved by replacing the original solvent (isopropyl alcohol) with a heavy liquid (lithium heteropolytungstates), which dramatically slowed the settling rate and allowed for the capture of a suitable homogeneous aliquot. SEM imaging and Morphological Analysis for Material Attribution (MAMA) software analysis were conducted on the NIST standard, and the SEM/MAMA data were compared to data captured by a dynamic image analysis particle size analyzer. The resulting data confirmed that the new wet dispersion method does indeed deliver an improved representative aliquot to the SEM stub. For instance, in the NIST certificate, the average particle size is ~17.1 µm ± 2.2 µm with a normal distribution. The initial wet dispersion method resulted in a drastically reduced average particle size of 6.1 µm in addition to a non-representative heavy bi-modal distribution whereas the improved LST wet dispersion method resulting in an average particle size that was much closer to the NIST certificate (12.7 µm) with a similar normal distribution. Although the improved method was still short of the NIST certificate average, atomic force microscopy analysis determined that the resulting ~20-25% reduction in size was due to particles sinking into the carbon sticky tape used for SEM imaging. It is believed that that this bias can be calibrated in a much more predicable manner than the original settling rate bias. In addition, the matching normal distribution curves between the NIST certificate and the heavy liquid method indicate a much-improved representative aliquot has been sampled and imaged. A surrogate CeO 2 powder was used to reflect PuO 2 more accurately and to aid in implementing radiological controls and shielding. The resulting data sets from the SEM/MAMA method and the particle size analyzer give almost identical average particle sizes and particle distribution statistics. Future work will re-analyze several select runs from the SDS to determine if morphological signatures can be found with the improved sampling method.

37 INORGANIC, ORGANIC, PHYSICAL, AND ANALYTICAL CH↗

Investigation of the Impact of Fuel Properties on Particulate Number Emission of a Modern Gasoline Direct Injection Engine

Gasoline Direct Injection (GDI) has become the preferred technology for spark-ignition engines resulting in greater specific power output and lower fuel consumption, and consequently reduction in CO2 emission. However, GDI engines face a substantial challenge in meeting new and future emission limits, especially the stringent particle number (PN) emissions recently introduced in Europe and China. Studies have shown that the fuel used by a vehicle has a significant impact on engine out emissions. In this study, nine fuels with varying chemical composition and physical properties were tested on a modern turbo-charged side-mounted GDI engine with design changes to reduce particulate emissions. The fuels tested included four fuels meeting US certification requirements; two fuels meeting European certification requirements; and one fuel meeting China 6 certification requirements being proposed at the time of this work. Two risk safeguard fuels (RSG), representing the properties of worst case market fuels in Europe and China, were also included. The particle number concentration of the solid particulates was measured in the engine-out exhaust flow at steady state engine operations with load and speed sweeps, and semi-transient load steps. The test results showed a factor of 6 PN emission difference among all certification fuels tested. Combined with detailed fuel analyses, this study evaluated important factors (such as oxygenates, carbon chain length and thermo-physical properties) that cause PN emissions which were not included in PMI index. A linear regression was performed to develop a PN predictive model which showed improved fitting quality than using PMI.

33 ADVANCED PROPULSION SYSTEMS↗

Full power level development of the Space Shuttle main engine

Development of the Space Shuttle main engine for nominal operation at full power level (109 percent rated power) is continuing in parallel with the successful flight testing of the Space Transportation System. Verification of changes made to the rated power level configuration currently being flown on the Orbiter Columbia is in progress and the certification testing of the full power level configuration has begun. The certification test plan includes the accumulation of 10,000 seconds on each of two engines by early 1983. Certification testing includes the simulation of nominal mission duty cycles as well as the two abort thrust profiles: abort to orbit and return to launch site. Several of the certification tests are conducted at 111 percent power to demonstrate additional safety margins. In addition to the flight test and development program results, future plans for life demonstration and engine uprating will be discussed.

Johnson, J. R.↗

On the use of the systems approach to certify advanced aviation technologies

The field of human factors is as varied and diverse as the human subject itself. But one of its most important applications is the facilitation of safety and efficiency in a particular working environment through the implementation of paradigms known about humans and their working relationship with machines and systems. During the period since World War II (which is often viewed as the birth of Human Factors) no area has been the subject of more human factors research than aviation. And in no time during that epoch is the influence of human factors more important, nor more imperative than it is today. As technology driven designs have been finding their way into the national airspace system (NAS), there has been growing concern within the aviation industry itself, the Federal Aviation Administration (FAA), and the general public for a means by which to certify complex systems and the advanced aviation technologies that will be responsible for transporting, directing, and maintaining our airborne travel. While it is widely agreed human factors certification is desirable, the philosophy that will underlie the approach is debatable. There are, in general, two different approaches to certification: (1) the top-down or systems approach; and, (2) the bottom-up or monadical approach. The top-down approach is characterized by the underlying assumption that certification can be best achieved by looking at the system as a whole, understanding its objectives and operating environment, then examining the constituent parts. In an aircraft cockpit, this would be accomplished by first examining what the aircraft is supposed to be (e.g., fighter, general aviation, passenger), identifying its operating environment (IFR, VMC, combat, etc.) and looking at the entire working system which includes the hardware, software, liveware and their interactions; then, evaluative measures can be applied to the subsystems (e.g., individual instruments, CRT displays, controls). The bottom-up approach is founded on the philosophy that the whole can be best served by first examining it constituent elements. This approach would perform the above certification completely antithetically, by looking at the individual parts and certifying good human factors applications to those parts under the basic assumption that the whole is equal to the sum of its parts.

Wise, Mark A.↗

The Design of a Remotely Operated Shutter (ROS) for Thermal Vacuum Testing

Space-flight hardware is required to meet specific outgassing criteria under vacuum conditions in order to reduce the risk of contaminating sensitive optics and spacecraft components. Under certain circumstances, it is desirable to measure the contamination levels that are being released from all surfaces of the test payload. This certification is often accomplished with a Total Outgassing Measurement (TOM) box. The TOM box has one 103.2 square centimeter (16 square inch) opening and one 4.84 square centimeter (0.75 square inches) opening. The larger opening allows contaminants to easily escape the box during the hardware bakeout phase. The smaller opening provides a limited conductance path for outgassed contaminants during the certification phase. A Thermoelectric Quartz Crystal Microbalance (TQCM) monitors the contamination levels inside the box to provide the total outgassing measurement. During transition from the bakeout phase to the certification phase, the TOM box is reconfigured to close the larger opening. For previous certifications, the vacuum chamber was returned to ambient conditions and the larger conductance port was closed manually. The ROS system eliminates the need to enter the chamber by remotely closing the large TOM box opening. Substantial schedule and cost savings are achieved through the use of this system. The ROS system consists of three main components; a shutter, a motion actuator, and an actuator controller. Each of these components was selected or designed to operate in an extreme-temperature and vacuum environment while providing a high level of reliability. Different types of motion actuators were considered for driving the shutter. Design parameters for the actuator included material properties, force capability, reliability, and cost.

Hale, Kathleen L.↗

Analysis of Near Simultaneous Jimsphere and AMPS High Resolution Wind Profiles

The high-resolution wind profile of the Automated Meteorological Profiling System (HRAMPS) is the proposed replacement for the Jimsphere measurement system used to support NASA Shuttle launches from the Eastern Test Range (ETR). Samples of twenty-six ETR near simultaneous Jimsphere and HRAMPS wind profiles were obtained for Shuttle program HRAMPS certification studies. Shuttle systems engineering certification is to ensure that spacecraft and launch vehicle systems performance and safety evaluations for each launch (derived from flight simulations with Jimsphere wind profile data bases) retain their validity when HRAMPS profiles are used on day-of-launch (DOL) in trajectory and loads simulations to support the commit-to-launch decision. This paper describes a statistical analysis of the near simultaneous profiles. In principle the differences between a Jimsphere profile and an HRAMPS profile should be attributed to tracking technology (radar versus GPS tracking of a Jimsphere flight element) and the method for derivation of wind vectors from the raw tracking data. In reality, it is not technically feasible to track the same Jimsphere balloon with the two systems. The aluminized Mylar surface of the standard Jimsphere flight element facilitates radar tracking, but it interferes with HRAMPS during simultaneous tracking. Suspending a radar reflector from an HRAMPS flight element (Jimsphere without aluminized coating) does not produce satisfactory Jimsphere profiles because of intermittent radar returns. Thus, differences between the Jimsphere and HRAMPS profiles are also attributed to differences in the trajectories of separate flight elements. Because of small sample size and a test period limited to one winter season, test measurements during extreme high winds aloft could not have been expected and did not occur. It is during the highest winds that the largest differences between Jimsphere and HRAMPS would occur because the distance between flight elements would be larger. Jimsphere radar tracking noise increases as a function of balloon displacement downrange. The Jimsphere data processing compensates for tracking signal/noise degradation by increasing the smoothing interval. The Jimsphere wind profile effective resolution is a function of downrange distance and altitude, whereas the effective resolution of the HRAMPS should be independent of those variables. The procedure used for editing Jimsphere spikes in Shuttle DOL profiles was not implemented for the Jimsphere profile measurements during the AMPS field tests. For this analysis a code was developed that essentially mimics DOL Jimsphere spike editing. Jimsphere profiles have somewhat more noise in the wavelength range less than 200m defined as the noise floor. No differences between Jimsphere and HRAMPS wind profile pairs have been found that would support denial of HRAMPS certification for application in Shuttle DOL applications. The reliability of the HRAMPS system, which is an important certification issue, is not addressed in this study.

Adelfang, S. I.↗

A Generic Software Safety Document Generator

Formal certification is based on the idea that a mathematical proof of some property of a piece of software can be regarded as a certificate of correctness which, in principle, can be subjected to external scrutiny. In practice, however, proofs themselves are unlikely to be of much interest to engineers. Nevertheless, it is possible to use the information obtained from a mathematical analysis of software to produce a detailed textual justification of correctness. In this paper, we describe an approach to generating textual explanations from automatically generated proofs of program safety, where the proofs are of compliance with an explicit safety policy that can be varied. Key to this is tracing proof obligations back to the program, and we describe a tool which implements this to certify code auto-generated by AutoBayes and AutoFilter, program synthesis systems under development at the NASA Ames Research Center. Our approach is a step towards combining formal certification with traditional certification methods.

Denney, Ewen↗

JDD, Inc. Database

JDD Inc, is a maintenance and custodial contracting company whose mission is to provide their clients in the private and government sectors "quality construction, construction management and cleaning services in the most efficient and cost effective manners, (JDD, Inc. Mission Statement)." This company provides facilities support for Fort Riley in Fo,rt Riley, Kansas and the NASA John H. Glenn Research Center at Lewis Field here in Cleveland, Ohio. JDD, Inc. is owned and operated by James Vaughn, who started as painter at NASA Glenn and has been working here for the past seventeen years. This summer I worked under Devan Anderson, who is the safety manager for JDD Inc. in the Logistics and Technical Information Division at Glenn Research Center The LTID provides all transportation, secretarial, security needs and contract management of these various services for the center. As a safety manager, my mentor provides Occupational Health and Safety Occupation (OSHA) compliance to all JDD, Inc. employees and handles all other issues (Environmental Protection Agency issues, workers compensation, safety and health training) involving to job safety. My summer assignment was not as considered "groundbreaking research" like many other summer interns have done in the past, but it is just as important and beneficial to JDD, Inc. I initially created a database using a Microsoft Excel program to classify and categorize data pertaining to numerous safety training certification courses instructed by our safety manager during the course of the fiscal year. This early portion of the database consisted of only data (training field index, employees who were present at these training courses and who was absent) from the training certification courses. Once I completed this phase of the database, I decided to expand the database and add as many dimensions to it as possible. Throughout the last seven weeks, I have been compiling more data from day to day operations and been adding the information to the database. It now consists of seven different categories of data (carpet cleaning, forms, NASA Event Schedules, training certifications, wall and vent cleaning, work schedules, and miscellaneous) . I also did some field inspecting with the supervisors around the site and was present at all of the training certification courses that have been scheduled since June 2004. My future outlook for the JDD, Inc. database is to have all of company s information from future contract proposals, weekly inventory, to employee timesheets all in this same database.

Miller, David A., Jr.↗

Certifying Auto-Generated Flight Code

Model-based design and automated code generation are being used increasingly at NASA. Many NASA projects now use MathWorks Simulink and Real-Time Workshop for at least some of their modeling and code development. However, there are substantial obstacles to more widespread adoption of code generators in safety-critical domains. Since code generators are typically not qualified, there is no guarantee that their output is correct, and consequently the generated code still needs to be fully tested and certified. Moreover, the regeneration of code can require complete recertification, which offsets many of the advantages of using a generator. Indeed, manual review of autocode can be more challenging than for hand-written code. Since the direct V&V of code generators is too laborious and complicated due to their complex (and often proprietary) nature, we have developed a generator plug-in to support the certification of the auto-generated code. Specifically, the AutoCert tool supports certification by formally verifying that the generated code is free of different safety violations, by constructing an independently verifiable certificate, and by explaining its analysis in a textual form suitable for code reviews. The generated documentation also contains substantial tracing information, allowing users to trace between model, code, documentation, and V&V artifacts. This enables missions to obtain assurance about the safety and reliability of the code without excessive manual V&V effort and, as a consequence, eases the acceptance of code generators in safety-critical contexts. The generation of explicit certificates and textual reports is particularly well-suited to supporting independent V&V. The primary contribution of this approach is the combination of human-friendly documentation with formal analysis. The key technical idea is to exploit the idiomatic nature of auto-generated code in order to automatically infer logical annotations. The annotation inference algorithm itself is generic, and parametrized with respect to a library of coding patterns that depend on the safety policies and the code generator. The patterns characterize the notions of definitions and uses that are specific to the given safety property. For example, for initialization safety, definitions correspond to variable initializations while uses are statements which read a variable, whereas for array bounds safety, definitions are the array declarations, while uses are statements which access an array variable. The inferred annotations are thus highly dependent on the actual program and the properties being proven. The annotations, themselves, need not be trusted, but are crucial to obtain the automatic formal verification of the safety properties without requiring access to the internals of the code generator. The approach has been applied to both in-house and commercial code generators, but is independent of the particular generator used. It is currently being adapted to flight code generated using MathWorks Real-Time Workshop, an automatic code generator that translates from Simulink/Stateflow models into embedded C code.

Denney, Ewen↗

Group Capability Model

The Group Capability Model (GCM) is a software tool that allows an organization, from first line management to senior executive, to monitor and track the health (capability) of various groups in performing their contractual obligations. GCM calculates a Group Capability Index (GCI) by comparing actual head counts, certifications, and/or skills within a group. The model can also be used to simulate the effects of employee usage, training, and attrition on the GCI. A universal tool and common method was required due to the high risk of losing skills necessary to complete the Space Shuttle Program and meet the needs of the Constellation Program. During this transition from one space vehicle to another, the uncertainty among the critical skilled workforce is high and attrition has the potential to be unmanageable. GCM allows managers to establish requirements for their group in the form of head counts, certification requirements, or skills requirements. GCM then calculates a Group Capability Index (GCI), where a score of 1 indicates that the group is at the appropriate level; anything less than 1 indicates a potential for improvement. This shows the health of a group, both currently and over time. GCM accepts as input head count, certification needs, critical needs, competency needs, and competency critical needs. In addition, team members are categorized by years of experience, percentage of contribution, ex-members and their skills, availability, function, and in-work requirements. Outputs are several reports, including actual vs. required head count, actual vs. required certificates, CGI change over time (by month), and more. The program stores historical data for summary and historical reporting, which is done via an Excel spreadsheet that is color-coded to show health statistics at a glance. GCM has provided the Shuttle Ground Processing team with a quantifiable, repeatable approach to assessing and managing the skills in their organization. They now have a common frame of reference across NASA/contractor lines to communicate and mitigate any critical skills concerns.

Olejarski, Michael↗

Space Shuttle Main Engine Liquid Air Insulation Redesign Lessons Learned

The Space Shuttle Main Engine Liquid Air Insulation redesign was required to prevent the reoccurance of the STS-111 High Pressure Speed Sensor In-Flight Anomaly. The STS-111 In-Flight Anomaly Failure Investigation Team's initial redesign of the High Pressure Fuel Turbopump Pump End Ball Bearing Liquid Air Insulation failed the certification test by producing Liquid Air. The certification test failure indicated not only the High Pressure Fuel Turbopump Liquid Air Insulation, but all other Space Shuttle Main Engine Liquid Air Insulation. This paper will document the original Space Shuttle Main Engine Liquid Air STS-111 In-Flight Anomaly investigation, the heritage Space Shuttle Main Engine Insulation certification testing faults, the techniques and instrumentation used to accurately test the Liquid Air Insulation systems on the Stennis Space Center SSME test stand, the analysis techniques used to identify the Liquid Air Insulation problem areas and the analytical verification of the redesign before entering certification testing, Trade study down selected to three potential design solutions, the results of the development testing which down selected the final Liquid Air Redesign are also documented within this paper.

Darrell Gaddy↗