Search NASA⌕ Search

SEARCH · Search NASA

Results for “Safety Controls”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 577 records · Page 32

Materials Safety - Not just Flammability and Toxic Offgassing

For many years, the safety community has focused on a limited subset of materials and processes requirements as key to safety: Materials flammability, Toxic offgassing, Propellant compatibility, Oxygen compatibility, and Stress-corrosion cracking. All these items are important, but the exclusive focus on these items neglects many other items that are equally important to materials safety. Examples include (but are not limited to): 1. Materials process control -- proper qualification and execution of manufacturing processes such as structural adhesive bonding, welding, and forging are crucial to materials safety. Limitation of discussions on materials process control to an arbitrary subset of processes, known as "critical processes" is a mistake, because any process where the quality of the product cannot be verified by inspection can potentially result in unsafe hardware 2 Materials structural design allowables -- development of valid design allowables when none exist in the literature requires extensive testing of multiple lots of materials and is extremely expensive. But, without valid allowables, structural analysis cannot verify structural safety 3. Corrosion control -- All forms of corrosion, not just stress corrosion, can affect structural integrity of hardware 4. Contamination control during ground processing -- contamination control is critical to manufacturing processes such as adhesive bonding and also to elimination foreign objects and debris (FOD) that are hazardous to the crew of manned spacecraft in microgravity environments. 5. Fasteners -- Fastener design, the use of verifiable secondary locking features, and proper verification of fastener torque are essential for proper structural performance This presentation discusses some of these key factors and the importance of considering them in ensuring the safety of space hardware.

Pedley, Michael D.↗

Explanation Constraint Programming for Model-based Diagnosis of Engineered Systems

We can expect to see an increase in the deployment of unmanned air and land vehicles for autonomous exploration of space. In order to maintain autonomous control of such systems, it is essential to track the current state of the system. When the system includes safety-critical components, failures or faults in the system must be diagnosed as quickly as possible, and their effects compensated for so that control and safety are maintained under a variety of fault conditions. The Livingstone fault diagnosis and recovery kernel and its temporal extension L2 are examples of model-based reasoning engines for health management. Livingstone has been shown to be effective, it is in demand, and it is being further developed. It was part of the successful Remote Agent demonstration on Deep Space One in 1999. It has been and is being utilized by several projects involving groups from various NASA centers, including the In Situ Propellant Production (ISPP) simulation at Kennedy Space Center, the X-34 and X-37 experimental reusable launch vehicle missions, Techsat-21, and advanced life support projects. Model-based and consistency-based diagnostic systems like Livingstone work only with discrete and finite domain models. When quantitative and continuous behaviors are involved, these are abstracted to discrete form using some mapping. This mapping from the quantitative domain to the qualitative domain is sometimes very involved and requires the design of highly sophisticated and complex monitors. We propose a diagnostic methodology that deals directly with quantitative models and behaviors, thereby mitigating the need for these sophisticated mappings. Our work brings together ideas from model-based diagnosis systems like Livingstone and concurrent constraint programming concepts. The system uses explanations derived from the propagation of quantitative constraints to generate conflicts. Fast conflict generation algorithms are used to generate and maintain multiple candidates whose consistency can be tracked across multiple time steps.

Narasimhan, Sriram↗

Mars Exploration Rovers Launch Performance and TCM-1 Maneuver Design

The Mars Exploration Rover (MER) project successfully landed two identical rovers on Mars in order to remotely conduct geologic investigations, including characterization of rocks and soils that may hold clues to past water activity. Two landing sites, Gusev crater and Meridiani Planum, were selected out of nearly 200 candidate sites after balancing science returns and flight system engineering and safety. Precise trajectory targeting and control was necessary to achieve the atmospheric entry requirements for the selected landing sites within the flight system constraints. This paper discusses the expected and achieved launch vehicle performance and the impacts of that performance on the first Trajectory Correction Maneuver (TCM-1) while maintaining targeting flexibility in accommodating additional project concerns about landing site safety and possible in-flight retargeting to alternate landing sites.

Trajectory Correction Maneuvers (TCMs)↗

Guidance Algorithms for Non-Drifting Trajectory Generation and Control in RendezVous Missions into Elliptical Orbits

Safety requirement represents one of the most critical aspect when defining the operational profile for a RendezVous mission. This requirement specially affects the design of the guidance algorithms that need to be tailored to guarantee what is normally referred to as Passive Trajectory Protection . The basic idea of passive trajectory protection is to design all the trajectory elements in an approach sequence such that if, at any point of the trajectory, thrust control ceases, the resulting free drift motion will remain collision free during a certain amount of time. This paper deals with the design and performances assessment of specific guidance algorithm addressing this issue. Firstly the problem is addressed for circular orbit using the Traveling Ellipse formulation for the relative motion. Secondly a solution for the RendezVous into a generic elliptical orbit is presented. This is based on a reduced transition matrix obtained through a description of the relative motion based on the first order variation of the orbital elements.

DiSotto, Emanuele↗

AirSTAR: A UAV Platform for Flight Dynamics and Control System Testing

As part of the NASA Aviation Safety Program at Langley Research Center, a dynamically scaled unmanned aerial vehicle (UAV) and associated ground based control system are being developed to investigate dynamics modeling and control of large transport vehicles in upset conditions. The UAV is a 5.5% (seven foot wingspan), twin turbine, generic transport aircraft with a sophisticated instrumentation and telemetry package. A ground based, real-time control system is located inside an operations vehicle for the research pilot and associated support personnel. The telemetry system supports over 70 channels of data plus video for the downlink and 30 channels for the control uplink. Data rates are in excess of 200 Hz. Dynamic scaling of the UAV, which includes dimensional, weight, inertial, actuation, and control system scaling, is required so that the sub-scale vehicle will realistically simulate the flight characteristics of the full-scale aircraft. This testbed will be utilized to validate modeling methods, flight dynamics characteristics, and control system designs for large transport aircraft, with the end goal being the development of technologies to reduce the fatal accident rate due to loss-of-control.

Jordan, Thomas L.↗

Safe Reinforcement Learning for Emergency Load Shedding of Power Systems

The paradigm shift in the electric power grid necessitates a revisit of existing control methods to ensure the grid’s security and resilience. In particular, the increased uncertainties and rapidly changing operational conditions in power systems have revealed outstanding issues in terms of either speed, adaptiveness, or scalability of the existing control methods for power systems. On the other hand, the availability of massive real-time data can provide a clearer picture of what is happening in the grid. Recently, deep reinforcement learning (RL) has been regarded and adopted as a promising approach leveraging massive data for fast and adaptive grid control. However, like most existing machine learning (ML)- based control techniques, RL control usually cannot guarantee the safety of the power systems. In this paper, we introduce a novel method for safe RL-based load shedding of power systems that can enhance the safe voltage recovery of the electric power grid after experiencing faults. Numerical simulation on the IEEE 39-bus testcase is performed to demonstrate the effectiveness of the proposed safe RL emergency control, as well as its adaptive capability to faults not seen in the training.

reinforcement learning, emergency control, power g↗

Impact of Latency and Reliability on Separation Assurance with Remotely Piloted Aircraft in Terminal Operations

Remotely Piloted Aircraft (RPA) for cargo operations in the national airspace system will impact safety due to, among other factors, the latency and reliability of command & control, and of communication. This paper investigates the safety impact with increasing mix of RPA amidst manned traffic in a generic arrival pattern with three merging flows. Latency was modelled as the response time between air traffic control's determination of a resolution and the RPAs' initiation of the maneuver. Reliability was modelled as a message drop probability. The experiment was repeated with two different aircraft types having different performance characteristics as representatives of RPA for conducting automated cargo operations. Overall response time above thirty seconds and message drop probability over twenty percent caused losses of separation. Specific results depended on the RPA aircraft type. The detailed impacts of latency and reliability with increasing mix of RPA traffic are provided. Applications of the approach for further studies at increasing levels of automation are also discussed.

Vishwanath Bulusu↗

Impact of Latency and Reliability on Separation Assurance with Remotely Piloted Aircraft in Terminal Operations

Remotely Piloted Aircraft (RPA) for cargo operations in the national airspace system will impact safety due to, among other factors, the latency and reliability of command & control, and of communication. This paper investigates the safety impact with increasing mix of RPA amidst manned traffic in a generic arrival pattern with three merging flows. Latency was modelled as the response time between air traffic control's determination of a resolution and the RPAs' initiation of the maneuver. Reliability was modelled as a message drop probability. The experiment was repeated with two different aircraft types having different performance characteristics as representatives of RPA for conducting automated cargo operations. Overall response time above thirty seconds and message drop probability over twenty percent caused losses of separation. Specific results depended on the RPA aircraft type. The detailed impacts of latency and reliability with increasing mix of RPA traffic are provided. Applications of the approach for further studies at increasing levels of automation are also discussed.

Vishwanath Bulusu↗

Synthetic Vision for Lunar and Planetary Landing Vehicles

The Crew Vehicle Interface (CVI) group of the Integrated Intelligent Flight Deck Technologies (IIFDT) has done extensive research in the area of Synthetic Vision (SV), and has shown that SV technology can substantially enhance flight crew situation awareness, reduce pilot workload, promote flight path control precision and improve aviation safety. SV technology is being extended to evaluate its utility for lunar and planetary exploration vehicles. SV may hold significant potential for many lunar and planetary missions since the SV presentation provides a computer-generated view of the terrain and other significant environment characteristics independent of the outside visibility conditions, window locations, or vehicle attributes. SV allows unconstrained control of the computer-generated scene lighting, terrain coloring, and virtual camera angles which may provide invaluable visual cues to pilots/astronauts and in addition, important vehicle state information may be conformally displayed on the view such as forward and down velocities, altitude, and fuel remaining to enhance trajectory control and vehicle system status. This paper discusses preliminary SV concepts for tactical and strategic displays for a lunar landing vehicle. The technical challenges and potential solutions to SV applications for the lunar landing mission are explored, including the requirements for high resolution terrain lunar maps and an accurate position and orientation of the vehicle that is essential in providing lunar Synthetic Vision System (SVS) cockpit displays. The paper also discusses the technical challenge of creating an accurate synthetic terrain portrayal using an ellipsoid lunar digital elevation model which eliminates projection errors and can be efficiently rendered in real-time.

Williams, Steven P.↗

Engineering and Safety Partnership Enhances Safety of the Space Shuttle Program (SSP)

Project Management must use the risk assessment documents (RADs) as tools to support their decision making process. Therefore, these documents have to be initiated, developed, and evolved parallel to the life of the project. Technical preparation and safety compliance of these documents require a great deal of resources. Updating these documents after-the-fact not only requires substantial increase in resources - Project Cost -, but this task is also not useful and perhaps an unnecessary expense. Hazard Reports (HRs), Failure Modes and Effects Analysis (FMEAs), Critical Item Lists (CILs), Risk Management process are, among others, within this category. A positive action resulting from a strong partnership between interested parties is one way to get these documents and related processes and requirements, released and updated in useful time. The Space Shuttle Program (SSP) at the Marshall Space Flight Center has implemented a process which is having positive results and gaining acceptance within the Agency. A hybrid Panel, with equal interest and responsibilities for the two larger organizations, Safety and Engineering, is the focal point of this process. Called the Marshall Safety and Engineering Review Panel (MSERP), its charter (Space Shuttle Program Directive 110 F, April 15, 2005), and its Operating Control Plan emphasizes the technical and safety responsibilities over the program risk documents: HRs; FMEA/CILs; Engineering Changes; anomalies/problem resolutions and corrective action implementations, and trend analysis. The MSERP has undertaken its responsibilities with objectivity, assertiveness, dedication, has operated with focus, and has shown significant results and promising perspectives. The MSERP has been deeply involved in propulsion systems and integration, real time technical issues and other relevant reviews, since its conception. These activities have transformed the propulsion MSERP in a truly participative and value added panel, making a difference for the safety of the Space Shuttle Vehicle, its crew, and personnel. Because of the MSERP's valuable contribution to the assessment of safety risk for the SSP, this paper also proposes an enhanced Panel concept that takes this successful partnership concept to a higher level of 'true partnership'. The proposed panel is aimed to be responsible for the review and assessment of all risk relative to Safety for new and future aerospace and related programs.

Duarte, Alberto↗

Xanthohumol microbiome and signature in adults with Crohn’s disease (the XMaS trial): a protocol for a phase II triple-masked, placebo-controlled clinical trial

Xanthohumol (XN), a bioactive flavonoid from Humulus lupulus with anti-inflammatory properties, has potential benefits for patients with Crohn’s disease (CD), a type of inflammatory bowel disease. We recently completed and published results of a placebo-controlled phase I clinical trial demonstrating the safety and tolerability of 24 mg XN daily for 8 weeks. The present study aims to evaluate the safety and tolerability of the same dose of XN adults with clinically active CD in a placebo-controlled phase II clinical trial. Additional aims will assess the impact of XN on inflammatory biomarkers, platelet function, CD clinical activity, and stool microbial composition. The metabolism of XN will also be evaluated. This article provides a model protocol for consideration in investigations of XN or other natural products in disease states. A triple-masked, randomized, placebo-controlled trial will be conducted in adults with clinically active CD. Participants (n ≤ 32) will be randomized to either 24 mg encapsulated XN per day or placebo and followed for 8 weeks. Throughout the trial, participants will be queried for adverse events. Biomarkers of clinical safety, blood and stool markers of inflammation, platelet function, Crohn’s Disease Activity Index score, stool microbial composition, and XN metabolite profiles in blood, urine, and stool will be assessed every 2 weeks. We describe the protocol for a phase II clinical trial that evaluates the safety and tolerability of XN in adults with active CD, as well as evaluate metabolism and mechanisms that are relevant to CD and other diseases with underlying inflammation and/or gut permeability. The effects of XN on inflammatory biomarkers, platelet function, the microbiota, and multi-omics biomarkers measured in this phase II trial of adults with CD will be compared to the effects of XN in healthy adults in our previous phase I trial. The results of the study will advance the evidence guiding the use of XN in patients with CD.

60 APPLIED LIFE SCIENCES↗

Integrated autopilot/autothrottle for the NASA TSRV B-737 aircraft: Design and verification by nonlinear simulation

An integrated autopilot/autothrottle was designed for flight test on the NASA TSRV B-737 aircraft. The system was designed using a total energy concept and is attended to achieve the following: (1) fuel efficiency by minimizing throttle activity; (2) low development and implementation costs by designing the control modes around a fixed inner loop design; and (3) maximum safety by preventing stall and engine overboost. The control law was designed initially using linear analysis; the system was developed using nonlinear simulations. All primary design requirements were satisfied.

Bruce, Kevin R.↗

Space Station Freedom altitude strategy

The Space Station Freedom (SSF) altitude strategy provides guidelines and assumptions to determine an altitude profile for Freedom. The process for determining an altitude profile incorporates several factors such as where the Space Shuttle will rendezvous with the SSF, when reboosts must occur, and what atmospheric conditions exist causing decay. The altitude strategy has an influence on all areas of SSF development and mission planning. The altitude strategy directly affects the micro-gravity environment for experiments, propulsion and control system sizing, and Space Shuttle delivery manifests. Indirectly the altitude strategy influences almost every system and operation within the Space Station Program. Evolution of the SSF altitude strategy has been a very dynamic process over the past few years. Each altitude strategy in turn has emphasized a different consideration. Examples include a constant Space Shuttle rendezvous altitude for mission planning simplicity, or constant micro-gravity levels with its inherent emphasis on payloads, or lifetime altitudes to provide a safety buffer to loss of control conditions. Currently a new altitude strategy is in development. This altitude strategy will emphasize Space Shuttle delivery optimization. Since propellant is counted against Space Shuttle payload-to-orbit capacity, lowering the rendezvous altitude will not always increase the net payload-to-orbit, since more propellant would be required for reboost. This altitude strategy will also consider altitude biases to account for Space Shuttle launch slips and an unexpected worsening of atmospheric conditions. Safety concerns will define a lower operational altitude limit, while radiation levels will define upper altitude constraints. The evolution of past and current SSF altitude strategies and the development of a new altitude strategy which focuses on operational issues as opposed to design are discussed.

Mcdonald, Brian M.↗

National plan to enhance aviation safety through human factors improvements

The purpose of this section of the plan is to establish a development and implementation strategy plan for improving safety and efficiency in the Air Traffic Control (ATC) system. These improvements will be achieved through the proper applications of human factors considerations to the present and future systems. The program will have four basic goals: (1) prepare for the future system through proper hiring and training; (2) develop a controller work station team concept (managing human errors); (3) understand and address the human factors implications of negative system results; and (4) define the proper division of responsibilities and interactions between the human and the machine in ATC systems. This plan addresses six program elements which together address the overall purpose. The six program elements are: (1) determine principles of human-centered automation that will enhance aviation safety and the efficiency of the air traffic controller; (2) provide new and/or enhanced methods and techniques to measure, assess, and improve human performance in the ATC environment; (3) determine system needs and methods for information transfer between and within controller teams and between controller teams and the cockpit; (4) determine how new controller work station technology can optimally be applied and integrated to enhance safety and efficiency; (5) assess training needs and develop improved techniques and strategies for selection, training, and evaluation of controllers; and (6) develop standards, methods, and procedures for the certification and validation of human engineering in the design, testing, and implementation of any hardware or software system element which affects information flow to or from the human.

Foushee, Clay↗

Synthetic and Enhanced Vision System for Altair Lunar Lander

Past research has demonstrated the substantial potential of synthetic and enhanced vision (SV, EV) for aviation (e.g., Prinzel & Wickens, 2009). These augmented visual-based technologies have been shown to significantly enhance situation awareness, reduce workload, enhance aviation safety (e.g., reduced propensity for controlled flight -into-terrain accidents/incidents), and promote flight path control precision. The issues that drove the design and development of synthetic and enhanced vision have commonalities to other application domains; most notably, during entry, descent, and landing on the moon and other planetary surfaces. NASA has extended SV/EV technology for use in planetary exploration vehicles, such as the Altair Lunar Lander. This paper describes an Altair Lunar Lander SV/EV concept and associated research demonstrating the safety benefits of these technologies.

Prinzell, Lawrence J., III↗

Control Synthesis for a Class of Hybrid Systems Subject to Configuration-Based Safety Constraints

We examine a class of hybrid systems which we call Composite Hybrid Machines (CHM's) that consists of the concurrent (and partially synchronized) operation of Elementary Hybrid Machines (EHM's). Legal behavior, specified by a set of illegal configurations that the CHM may not enter, is to be achieved by the concurrent operation of the CHM with a suitably designed legal controller. In the present paper we focus on the problem of synthesizing a legal controller, whenever such a controller exists. More specifically, we address the problem of synthesizing the minimally restrictive legal controller. A controller is minimally restrictive if, when composed to operate concurrently with another legal controller, it will never interfere with the operation of the other controller and, therefore, can be composed to operate concurrently with any other controller that may be designed to achieve liveness specifications or optimality requirements without the need to reinvestigate or reverify legality of the composite controller. We confine our attention to a special class of CHM's where system dynamics is rate-limited and legal guards are conjunctions or disjunctions of atomic formulas in the dynamic variables (of the type x less than or equal to x(sub 0), or x greater than or equal to x(sub 0)). We present an algorithm for synthesis of the minimally restrictive legal controller. We demonstrate our approach by synthesizing a minimally restrictive controller for a steam boiler (the verification of which recently received a great deal of attention).

Heymann, Michael↗

Telerobotic Surgery: An Intelligent Systems Approach to Mitigate the Adverse Effects of Communication Delay

An extremely innovative approach has been presented, which is to have the surgeon operate through a simulator running in real-time enhanced with an intelligent controller component to enhance the safety and efficiency of a remotely conducted operation. The use of a simulator enables the surgeon to operate in a virtual environment free from the impediments of telecommunication delay. The simulator functions as a predictor and periodically the simulator state is corrected with truth data. Three major research areas must be explored in order to ensure achieving the objectives. They are: simulator as predictor, image processing, and intelligent control. Each is equally necessary for success of the project and each of these involves a significant intelligent component in it. These are diverse, interdisciplinary areas of investigation, thereby requiring a highly coordinated effort by all the members of our team, to ensure an integrated system. The following is a brief discussion of those areas. Simulator as a predictor: The delays encountered in remote robotic surgery will be greater than any encountered in human-machine systems analysis, with the possible exception of remote operations in space. Therefore, novel compensation techniques will be developed. Included will be the development of the real-time simulator, which is at the heart of our approach. The simulator will present real-time, stereoscopic images and artificial haptic stimuli to the surgeon. Image processing: Because of the delay and the possibility of insufficient bandwidth a high level of novel image processing is necessary. This image processing will include several innovative aspects, including image interpretation, video to graphical conversion, texture extraction, geometric processing, image compression and image generation at the surgeon station. Intelligent control: Since the approach we propose is in a sense predictor based, albeit a very sophisticated predictor, a controller, which not only optimizes end effector trajectory but also avoids error, is essential. We propose to investigate two different approaches to the controller design. One approach employs an optimal controller based on modern control theory; the other one involves soft computing techniques, i.e. fuzzy logic, neural networks, genetic algorithms and hybrids of these.

Cardullo, Frank M.↗

Nuclear Safety [Vol. 32, No. 4, October-December 1991]

Nuclear Safety is a review journal that covers significant developments in the field of nuclear safety. Its scope includes the analysis and control of hazards associated with nuclear energy, operations involving fissionable materials, and the products of nuclear fission and their effects on the environment. Primary emphasis is on safety in reactor design, construction, and operation; however, the safety aspects of the entire fuel cycle, including fuel fabrication, spent-fuel processing, nuclear waste disposal, handling of radioisotopes, and environmental effects of these operations, are also treated. Table of Contents for this issue follows. GENERAL SAFETY CONSIDERATIONS: 477 Report on the International Symposium on the Use of Probabilistic Safety Assessment for Operational Safety—PSA '91, S. Chakraborty and M. Khatib-Rahbar; 488 Good Relationships Are Pivotal in Nuclear Data Bases, A. S. Heger and B. V. Koen; 494 Technical Note: The Interagency Nuclear Safety Review Panel's Evaluation of the Ulysses Space Mission, J. A. Sholtis, Jr., D. A. Huff, L. B. Gray, N. P. Klug, and R. O. Winchester; ACCIDENT ANALYSIS: 502 The Severe Accident Analysis Program for the Savannah River Nuclear Production Reactors, M. L. Hyder; CONTROL AND INSTRUMENTATION: 511 A Framework for Selecting Suitable Control Technologies for Nuclear Power Plant Systems, R. A. Kisner; DESIGN FEATURES: 521 Containments for Gas-Cooled Power Reactors History and Status, P.W. Williams; ENVIRONMENTAL EFFECTS: 537 Indoor Radon: A Natural Risk, N. H. Harley and J.H. Harley; On the Importance of the Atmospheric Parameters in the Fission Products Distribution of a Severe Reactor Accident, M. C. Barla and A. R. Bayulken; Book Review: Health Effects of Exposure to Low Levels of Ionizing Radiation BEIR V, C. R. Richmond; WASTE AND SPENT FUEL MANAGEMENT: 555 Activities Related to Waste and Spent Fuel Management, M. D. Muhlheim and E. G. Silver OPERATING EXPERIENCES: 567 Effects of Component Aging on the Westhinghouse Control Rod Drive System, K. Sullivan and W. Gunther; 577 Reactor Shutdown Experience, Compiled by J. W. Cletcher, 580 Selected Safety-Related Events, Compiled by G. A. Murphy; 582 Operating U 8 Power Reactors, Compiled by M. D. Muhlheim and E. G. Silver, RECENT DEVELOPMENTS: 596 General Administrative Activities, Compiled by M. D. Muhlheim and E. G. Silver; 610 Reports, Standards, and Safety Guides, D. S. Queener; 614 Proposed Rule Changes as of June 30, 1991; ANNOUNCEMENTS: 520 Workshop on PC PRAISE: A Probabilistic Fracture Mechanics Personal Computer Code for Nuclear Power Plant Piping Reliability Assessment; 536 Fifth Workshop on Nuclear Power Plant Containment Integrity; 624 New OECD "International Information System on Occupational Exposure (ISOE)"; 625 Harvard School of Public Health Announces Short Courses; 625 Eighth Power Plant Dynamics, Control and Testing Symposium; 626 Second Training Course on Off-Site Emergency Planning and Response for Nuclear Accidents; 618 The Authors; 622 Reviewers of Nuclear Safety, Vol 32.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗