Search NASA⌕ Search

SEARCH · Search NASA

Results for “Spacecraft Development”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 577 records · Page 32

Enabling Advanced Automation in Spacecraft Operations with the Spacecraft Emergency Response System

True autonomy is the Holy Grail of spacecraft mission operations. The goal of launching a satellite and letting it manage itself throughout its useful life is a worthy one. With true autonomy, the cost of mission operations would be reduced to a negligible amount. Under full autonomy, any problems (no matter the severity or type) that may arise with the spacecraft would be handled without any human intervention via some combination of smart sensors, on-board intelligence, and/or smart automated ground system. Until the day that complete autonomy is practical and affordable to deploy, incremental steps of deploying ever-increasing levels of automation (computerization of once manual tasks) on the ground and on the spacecraft are gradually decreasing the cost of mission operations. For example, NASA's Goddard Space Flight Center (NASA-GSFC) has been flying spacecraft with low cost operations for several years. NASA-GSFC's SMEX (Small Explorer) and MIDEX (Middle Explorer) missions have effectively deployed significant amounts of automation to enable the missions to fly predominately in 'light-out' mode. Under light-out operations the ground system is run without human intervention. Various tools perform many of the tasks previously performed by the human operators. One of the major issues in reducing human staff in favor of automation is the perceived increased in risk of losing data, or even losing a spacecraft, because of anomalous conditions that may occur when there is no one in the control center. When things go wrong, missions deploying advanced automation need to be sure that anomalous conditions are detected and that key personal are notified in a timely manner so that on-call team members can react to those conditions. To ensure the health and safety of its lights-out missions, NASA-GSFC's Advanced Automation and Autonomy branch (Code 588) developed the Spacecraft Emergency Response System (SERS). The SERS is a Web-based collaborative environment that enables secure distributed fault and resource management. The SERS incorporates the use of intelligent agents, threaded discussions, workflow, database connectivity, and links to a variety of communications devices (e.g., two-way paging, PDA's, and Internet phones) via commercial gateways. When the SERS detects a problem, it notifies on-call team members, who then can remotely take any necessary actions to resolve the anomalies.The SERS goes well beyond a simple '911' system that sends out an error code to everyone with a pager. Instead, SERS' software agents send detailed data (i.e., notifications) to the most appropriate team members based on the type and severity of the anomaly and the skills of the on-call team members. The SERS also allows the team members to respond to the notifications from their wireless devices. This unique capability ensures rapid response since the team members no longer have to go to a PC or the control center for every anomalous event. Most importantly, the SERS enables safe experimentation with various techniques for increasing levels of automation, leading to robust autonomy. For the MIDEX missions at NASA GSFC, the SERS is used to provide 'human-in-the-loop' automation. During lights-out operations, as greater control is given to the MIDEX automated systems, the SERS can be configured to page remote personnel and keep them informed regarding actions taking place in the control center. Remote off-duty operators can even be given the option of enabling or inhibiting a specific automated response in near real time via their two-way pagers. The SERS facilitates insertion of new technology to increase automation, while maintaining the safety and security of mission resources. This paper will focus on SERS' overall functionality and how SERS has been designed to handle the monitoring and emergency response for missions with varying levels of automation. The paper will also convey some of the key lessons learned from SERS' deployment across of variety of missions, highlighting this incremental approach to achieving 'robust autonomy'.

Breed, Julie↗

Space Shuttle communications experiments

Experiments which are under consideration for possible flight on the Space Shuttle in the 1980's to aid in the development of new communications techniques are outlined. A millimeter wave communications experiment for the study of propagation above 10 GHz and an electromagnetic environment experiment for the characterization of fields in orbit are planned to provide information needed for effective spectrum conservation. An antenna range experiment is being studied to provide an in-orbit far-field RF signal source for measuring ground antenna patterns and gain over a wide frequency range. Additional experiments will be intended to test spacecraft technology developments, including such communications system components as large phased array antennas and solid state transmitters and receivers.

Wolff, E. A.↗

An altitude-dependent spacecraft charging model

A model for the altitude dependence of the hot plasma parameters responsible for the electrostatic charging of spacecraft was developed. Based upon plasma orbit theory, the directed velocity is a function of the ambient magnetic field flux density. A consequence of this approach is that while the thermal velocity distributions (assumed to be Maxwellian) of the plasma particles are independent of the magnetic field strength (and hence altitude), the particle densities increase with magnetic field strength. Thus, according to this model, while the equilibrium voltage is independent of altitude, the charging current density increases with decreasing altitude. However, the probability of such spacecraft charging decreases with decreasing altitude.

Haffner, J. W.↗

Towards the Development of a Unified Distributed Date System for L1 Spacecraft

The purpose of this grant, 'Towards the Development of a Unified Distributed Data System for L1 Spacecraft', is to take the initial steps towards the development of a data distribution mechanism for making in-situ measurements more easily accessible to the scientific community. Our obligations as subcontractors to this grant are to add our Faraday Cup plasma data to this initial study and to contribute to the design of a general data distribution system. The year 1 objectives of the overall project as stated in the GSFC proposal are: 1) Both the rsync and Perl based data exchange tools will be fully developed and tested in our mixed, Unix, VMS, Windows and Mac OS X data service environment. Based on the performance comparisons, one will be selected and fully deployed. Continuous data exchange between all L1 solar wind monitors initiated. 2) Data version metadata will be agreed upon, fully documented, and deployed on our data sites. 3) The first version of the data description rules, encoded in a XML Schema, will be finalized. 4) Preliminary set of library routines will be collected, documentation standards and formats agreed on, and desirable routines that have not been implemented identified and assigned. 5) ViSBARD test site implemented to independently validate data mirroring procedures. The specific MIT tasks over the duration of this project are the following: a) implement mirroring service for WIND plasma data b) participate in XML Schema development c) contribute toward routine library.

Lazarus, Alan J.↗

Summary of Cassini Acoustic Criteria Development Using Titan IV Flight Data

The Cassini spacecraft is being developed by the Jet Propulsion Laboratory (JPL) for theNational Aeronautics and Space Administration (NASA) to orbit and explore the planet Saturn, itsrings and satellites. Cassini will be launched on a Titan IV and boosted out of earth orbit by aCentaur. This paper discusses the development of Cassini acoustic criteria using Titan IV flight data. The Titan IV flight acoustic measurements and the different flight data processing techniquesemployed by Martin Marietta and The Aerospace Corporation are described in Reference 1, as wellasthe methods employed by JPL for identifying and correcting for instrumentation system transients.

Davis, G. L.↗

FRET-Aptamer Assays for Bone Marker Assessment, C-Telopeptide, Creatinine, and Vitamin D

Astronauts lose 1.0 to 1.5% of their bone mass per month on long-duration spaceflights. NASA wishes to monitor the bone loss onboard spacecraft to develop nutritional and exercise countermeasures, and make adjustments during long space missions. On Earth, the same technology could be used to monitor osteoporosis and its therapy. Aptamers bind to targets against which they are developed, much like antibodies. However, aptamers do not require animal hosts or cell culture and are therefore easier, faster, and less expensive to produce. In addition, aptamers sometimes exhibit greater affinity and specificity vs. comparable antibodies. In this work, fluorescent dyes and quenchers were added to the aptamers to enable pushbutton, one-step, bind-and-detect fluorescence resonance energy transfer (FRET) assays or tests that can be freeze-dried, rehydrated with body fluids, and used to quantitate bone loss of vitamin D levels with a handheld fluorometer in the spacecraft environment. This work generated specific, rapid, one-step FRET assays for the bone loss marker C-telopeptide (CTx) when extracted from urine, creatinine from urine, and vitamin D congeners in diluted serum. The assays were quantified in nanograms/mL using a handheld fluorometer connected to a laptop computer to convert the raw fluorescence values into concentrations of each analyte according to linear standard curves. DNA aptamers were selected and amplified for several rounds against a 26- amino acid form of CTx, creatinine, and vitamin D. The commonalities between loop structures were studied, and several common loop structures were converted into aptamer beacons with a fluorophore and quencher on each end. In theory, when the aptamer beacon binds its cognate target (CTx bone peptide, creatinine, or vitamin D), it is forced open and no longer quenched, so it gives off fluorescent light (when excited) in proportion to the amount of target present in a sample. This proportional increase in fluorescence is called a "lights on" FRET response. The vitamin D aptamer beacon gives a "lights off" or inversely proportional fluorescence response to the amount of vitamin D present in diluted serum. These FRET-aptamer assays are rapid (<30 minutes), sensitive (low ng/mL detection limits), and quite easy to carry out (add sample, mix, and detect in the handheld reader). Benefits include the speed of the assays as well as the small amount of space taken up by the handheld reader and cuvette assays. The aptamer DNA sequences represent novel additional features of the existing (patent-pending) FRET-aptamer assay platform.

Bruno, John G.↗

Follow-on studies using the Voyager spacecraft thermal model

The 42-year-old Voyager mission, now named the Voyager Interstellar Mission (VIM) is operating long beyond its design life. In 2012, Voyager 1 crossed the heliopause into interstellar space and Voyager 2 made the same transit in November 2018. Due to declining power output from the Radioisotope Thermoelectric Generators (RTGs) the Science and Flight Operations teams continue to make difficult choices in terms of managing both the power and thermal margins to preserve critical science observations and maintain the health of the two spacecraft. A previous paper, “Creating a Voyager Thermal Model 39 Years Into the Flight Mission, Along With Model Correlation and Application” described how a thermal model of these 1977 spacecraft was developed and correlated without many design artifacts and with limited temperature telemetry. This paper describes how the thermal model has been used to establish an Allowable Flight Temperature (AFT) limit for hydrazine propellant in the propulsion subsystem to minimize the risk of freezing. Voyager 2 temperatures have already descended to this limit in the vicinity of the Roll thruster propellant lines. The Flight Operations team has investigated several ways of detecting propellant freezing based on analysis and trending of thruster performance telemetry. In addition, the Voyager thermal model is being used to predict the spacecraft response to possible changes in power state. These changes could involve turning off outboard science instruments and/or their heaters to increase power margin and hence power dissipation inside the spacecraft bus (i.e. in Bay 7, where the power regulation electronics are located). Changes might also be made to turn on or off other loads inside the bus to more effectively heat the coldest propellant lines.

Medina, Enrique↗

Follow-on studies using the Voyager spacecraft thermal model

The 42-year-old Voyager mission, now named the Voyager Interstellar Mission (VIM) is operating long beyond its design life. In 2012, Voyager 1 crossed the heliopause into interstellar space and Voyager 2 made the same transit in November 2018. Due to declining power output from the Radioisotope Thermoelectric Generators (RTGs) the Science and Flight Operations teams continue to make difficult choices in terms of managing both the power and thermal margins to preserve critical science observations and maintain the health of the two spacecraft. A previous paper, “Creating a Voyager Thermal Model 39 Years Into the Flight Mission, Along With Model Correlation and Application” described how a thermal model of these 1977 spacecraft was developed and correlated without many design artifacts and with limited temperature telemetry. This paper describes how the thermal model has been used to establish an Allowable Flight Temperature (AFT) limit for hydrazine propellant in the propulsion subsystem to minimize the risk of freezing. Voyager 2 temperatures have already descended to this limit in the vicinity of the Roll thruster propellant lines. The Flight Operations team has investigated several ways of detecting propellant freezing based on analysis and trending of thruster performance telemetry. In addition, the Voyager thermal model is being used to predict the spacecraft response to possible changes in power state. These changes could involve turning off outboard science instruments and/or their heaters to increase power margin and hence power dissipation inside the spacecraft bus (i.e. in Bay 7, where the power regulation electronics are located). Changes might also be made to turn on or off other loads inside the bus to more effectively heat the coldest propellant lines. Many of these changes have been or will be tested first on Voyager 1 which has more power margin and does not have the power matrix commanding issues experienced on Voyager 2. Ultimately this assessment may assist the Voyager project in making decisions on the order in which science instruments are permanently turned off.

Medina, Enrique↗

Science Hybrid Orbiter and Lunar Relay (SCHOLR) Architecture and Design

Considered both a stepping-stone to deep space and a key to unlocking the mysteries of planetary formation, the Moon offers a unique opportunity for scientific study. Robotic precursor missions are being developed to improve technology and enable new approaches to exploration. Robots, lunar landers, and satellites play significant roles in advancing science and technologies, offering close range and in-situ observations. Science and exploration data gathered from these nodes and a lunar science satellite is intended to support future human expeditions and facilitate future utilization of lunar resources. To attain a global view of lunar science, the nodes will be distributed over the lunar surface, including locations on the far side of the Moon. Given that nodes on the lunar far side do not have direct line-of-sight for Earth communications, the planned presence of such nodes creates the need for a lunar communications relay satellite. Since the communications relay capability would only be required for a small portion of the satellite s orbit, it may be possible to include communication relay components on a science spacecraft. Furthermore, an integrated satellite has the potential to reduce lunar surface mission costs. A SCience Hybrid Orbiter and Lunar Relay (SCHOLR) is proposed to accomplish scientific goals while also supporting the communications needs of landers on the far side of the Moon. User needs and design drivers for the system were derived from the anticipated needs of future robotic and lander missions. Based on these drivers and user requirements, accommodations for communications payload aboard a science spacecraft were developed. A team of interns identified and compared possible SCHOLR architectures. The final SCHOLR architecture was analyzed in terms of orbiter lifetime, lunar surface coverage, size, mass, power, and communications data rates. This paper presents the driving requirements, operational concept, and architecture views for SCHOLR within a lunar surface nodal network. Orbital and bidirectional link analysis, between lunar nodes, orbiter, and Earth, as well as a conceptual design for the spacecraft are also presented

Trase, Kathryn K.↗

An extended Kalman filter for spinning spacecraft attitude estimation

An extended Kalman filter for real-time ground attitude estimation of a gyro-less spinning spacecraft was developed and tested. The filter state vector includes the angular momentum direction, phase angle, inertial nutation angle, and inertial and body nutation rates. The filter solves for the nutating three-axis attitude and accounts for effects due to principle axes offset from the body axes. The attitude is propagated using the kinematics of a rigid body symmetric about the principle spin axis; disturbance torques are assumed to be small. Filter updates consist only of the measured angles between celestial objects (Sun, Earth, etc.) and the nominal spin axis, and the times these angles were measured. Both simulated data and real data from the Dynamics Explorer -A (DE-A) spacecraft were used to test the filter; the results are presented. Convergence was achieved rapidly from a wide range of a priori state estimates, and sub-degree accuracy was attained. Systematic errors affecting the solution accuracy are discussed, as are the results of an attempt to solve for sensor measurement angle biases in the state vector.

Baker, David F.↗

Microbial Contamination in the Spacecraft

Spacecraft and space habitats supporting human exploration contain a diverse population of microorganisms. Microorganisms may threaten human habitation in many ways that directly or indirectly impact the health, safety, or performance of astronauts. The ability to produce and maintain spacecraft and space stations with environments suitable for human habitation has been established over 40 years of human spaceflight. An extensive database of environmental microbiological parameters has been provided for short-term (< 20 days) spaceflight by more than 100 missions aboard the Space Shuttle. The NASA Mir Program provided similar data for long-duration missions. Interestingly, the major bacterial and fungal species found in the Space Shuttle are similar to those encountered in the nearly 15-year-old Mir. Lessons learned from both the US and Russian space programs have been incorporated into the habitability plan for the International Space Station. The focus is on preventive measures developed for spacecraft, cargo, and crews. On-orbit regular housekeeping practices complete with visual inspections are essential, along with microbiological monitoring. Risks associated with extended stays on the Moon or a Mars exploration mission will be much greater than previous experiences because of additional unknown variables. The current knowledge base is insufficient for exploration missions, and research is essential to understand the effects of spaceflight on biological functions and population dynamics of microorganisms in spacecraft.

Pierson, Duane L.↗

Microbial contamination of spacecraft

Spacecraft and space habitats supporting human exploration contain a diverse population of microorganisms. Microorganisms may threaten human habitation in many ways that directly or indirectly impact the health, safety, or performance of astronauts. The ability to produce and maintain spacecraft and space stations with environments suitable for human habitation has been established over 40 years of human space flight. An extensive database of environmental microbiological parameters has been provided for short-term (< 20 days) space flight by more than 100 missions aboard the Space Shuttle. The NASA Mir Program provided similar data for long-duration missions. Interestingly, the major bacterial and fungal species found in the Space Shuttle are similar to those encountered in the nearly 15-year-old Mir. Lessons learned from both the US and Russian space programs have been incorporated into the habitability plan for the International Space Station. The focus is on preventive measures developed for spacecraft, cargo, and crews. On-orbit regular housekeeping practices complete with visual inspections are essential, along with microbiological monitoring. Risks associated with extended stays on the Moon or a Mars exploration mission will be much greater than previous experiences because of additional unknown variables. The current knowledge base is insufficient for exploration missions, and research is essential to understand the effects of space flight on biological functions and population dynamics of microorganisms in spacecraft. Equally important is a better understanding of the immune response and of human-microorganism-environment interactions during long-term space habitation.

Mir Project↗

Utilization of Machine Learning Techniques for Managing the Tracking and Data Relay Satellite Constellation

National Aeronautics and Space Administration’s (NASA) Goddard Space Flight Center (GSFC) operates a constellation of ten geosynchronous Tracking and Data Relay Satellites (TDRS). The TDRS constellation consists of multiple geosynchronous communication relay satellites located around the equator so they can provide continual coverage of any mission in low earth orbit. The TDRS are located primarily in three oceanic regions around the earth. NASA’s White Sands Complex provides the ground communication support for TDRS located over the Atlantic and Pacific Oceans. Another TDRS ground station in Guam supports the TDRS over the Indian Ocean. With these satellites the TDRS network can provide continuous coverage of satellites in low-earth orbit. The NASA Space Network (SN) project office at GSFC manages the constellation of spacecraft. Major customers of the TDRS constellation include, but are not limited to, the International Space Station and the Hubble Space Telescope. The TDRS constellation has three generations of satellites and has been active for over 30 years providing reliable communication links between customer satellites and corresponding ground stations. However, one of the major concerns for TDRS, and in any space mission, is to ensure the health and safety of the spacecraft. Generally, engineers use telemetry data to monitor and analyze the performance and state of health of the spacecraft. Telemetry data contains hundreds of parameters that monitor each important component in the spacecraft, which can be utilized to recognize and characterize the behavior of the spacecraft. Each parameter contains considerable information to represent time-dependent properties of each spacecraft subsystem and component. During the entire life of a TDRS spacecraft, thousands of gigabytes of telemetry data are transmitted in real-time from the spacecraft to the ground station at the White Sands Complex in Las Cruces, New Mexico, and recorded as historical data sets for engineers to process and analyze the events that occurred on-orbit. These parameters contain the function of multiple spacecraft subsystems, such as the attitude control system (ACS), Thermal, Electrical Power Subsystem (EPS), etc. . The first and second generations have exceeded their required lifetime and NASA is keen to manage these spacecrafts carefully in order to maximize the remaining life using the spacecraft telemetry. The challenge is to know when the risk of losing a spacecraft in geosynchronous orbit exceeds the benefit of continued operations for customer support. In the TDRS fleet, the EPS is the most critical subsystem related to spacecraft operations. Failure of the EPS would strand a spacecraft in geosynchronous orbit. Since EPS provides power to the spacecraft, component failures ultimately lead to the inability to support the spacecraft loads and the communications payload. For instance, TDRS-8 has several anomalies in EPS including the Bus Voltage Limiter (BVL) shunt current, solar array loss of circuits, and failed battery cells. Any of these anomalies can cause critical issues to the spacecraft. Therefore, developing a system to analyze and perform early detection of a potential anomaly is an important issue in telemetry data analysis. In recent years, Telemetry Mining (TM) has been proposed to process telemetry data by using Data Mining (DM) techniques such as classification, clustering, regression and anomaly detection. Anomaly detection, also known as outlier detection, has been widely used in many data mining areas such as remote sensing, medical data processing and digital image processing. The goal of anomaly detection is to detect abnormal data, which contains a relatively low probability of occurrence among the entire data set. Early detection of anomalies is one of the most significant issues in managing the spacecraft configuration. If anomalies can be detected early enough, then the redundant resources can be used to extend the life of the operational spacecraft. We present an unsupervised anomaly detection method to process the EPS data extracted from TDRS-8. This is different from traditional analytical methods, which use telemetry data to illustrate behavior and physical meaning of each spacecraft component. TM connects multiple parameters as a vector and then conducts data analysis on this high dimension telemetry vector. This method is looking at the properties of a high dimensional vector that is able to consider the relationship between different parameters in the anomaly detection problem. This kind of method performs much better than the traditional limit checking method. In addition, we propose a new approach of real-time anomaly detection to process telemetry data in real-time, which can then be applied to spacecraft monitoring with high reliability, low cost and high accuracy.

Machine Learning (ML)↗

SLS Integrated Modal Test Uncertainty Quantification using the Hybrid Parametric Variation Method

Uncertainty in structural loading during launch is a significant concern in the development of spacecraft and launch vehicles. Small variations in launch vehicle and payload mode shapes and their interaction can result in significant variation in system loads. In many cases involving large aerospace systems it is difficult, not economical, or impossible to perform a system modal test. However, it is still vital to obtain test results that can be compared with analytical predictions to validate models. Instead, the “Building Block Approach” is used in which system components are tested individually. Component models are correlated and updated to agree as best they can with test results. The Space Launch System consists of a number of components that are assembled into a launch vehicle. Finite element models of the components are developed, reduced to Hurty/Craig-Bampton models and assembled to represent different phases of flight. The only opportunity to obtain modal test data from an assembled Space Launch System will be during the Integrated Modal Test. There is always uncertainty in every model, which flows into uncertainty in predicted system results. Uncertainty Quantification is used to determine statistical bounds on prediction accuracy based on model uncertainty. For the Space Launch System, model uncertainty is at the Hurty/Craig-Bampton component level. Uncertainty in the Hurty/Craig-Bampton components is quantified using the hybrid parametric variation approach that combines parametric and nonparametric uncertainty. Uncertainty in model form is one of the biggest contributors to uncertainty in complex built-up structures. This type of uncertainty cannot be represented by variations infinite element model input parameters and thus cannot be included in a parametric approach. However, model-form uncertainty can be modeled using a nonparametric approach based on random matrix theory. The hybrid parametric variation method requires the selection of dispersion values for the Hurty/Craig-Bampton fixed-interface eigenvalues, and the Hurty/Craig-Bampton stiffness matrices. Component test/analysis frequency error is used to identify the fixed-interface eigenvalue dispersions, while test/analysis cross-orthogonality is used to identify stiffness dispersion values. The hybrid parametric variation uncertainty quantification approach is applied to the Space Launch System Integrated Modal Test configuration. Monte Carlo analysis is performed, and statistics are determined for modal correlation metrics, frequency response from Integrated Modal Test shakers to selected accelerometers, as well as other metrics for determining how well target modes are excited and identified. If the predicted uncertainty envelopes future Integrated Modal Test results, then there will be increased confidence in the utility of the component-based hybrid parametric variation uncertainty quantification approach.

Uncertainty Quantification↗

Relative Navigation of Formation Flying Satellites

The Guidance, Navigation, and Control Center (GNCC) at Goddard Space Flight Center (GSFC) has successfully developed high-accuracy autonomous satellite navigation systems using the National Aeronautics and Space Administration's (NASA's) space and ground communications systems and the Global Positioning System (GPS). In addition, an autonomous navigation system that uses celestial object sensor measurements is currently under development and has been successfully tested using real Sun and Earth horizon measurements.The GNCC has developed advanced spacecraft systems that provide autonomous navigation and control of formation flyers in near-Earth, high-Earth, and libration point orbits. To support this effort, the GNCC is assessing the relative navigation accuracy achievable for proposed formations using GPS, intersatellite crosslink, ground-to-satellite Doppler, and celestial object sensor measurements. This paper evaluates the performance of these relative navigation approaches for three proposed missions with two or more vehicles maintaining relatively tight formations. High-fidelity simulations were performed to quantify the absolute and relative navigation accuracy as a function of navigation algorithm and measurement type. Realistically-simulated measurements were processed using the extended Kalman filter implemented in the GPS Enhanced Inboard Navigation System (GEONS) flight software developed by GSFC GNCC. Solutions obtained by simultaneously estimating all satellites in the formation were compared with the results obtained using a simpler approach based on differencing independently estimated state vectors.

Long, Anne↗

Trends in Human Spaceflight: Failure Tolerance, High Reliability and Correlated Failure History

In a half century of human spaceflight, NASA has continuously refined agency safety and reliability requirements in response to mission demands, critical failures, and technology development. Early spacecraft, including Mercury, Gemini and Apollo vehicles, were highly reliant on dissimilar redundancy and demonstrated test margins. Later programs, such as the reusable Space Transportation System (STS) and International Space Station (ISS), introduced probabilistic studies and isolated two-failure tolerance to improve robustness at the expense of added complexity. More recently, the Orion Multi-Program Crew Vehicle (MPCV) program adopted universal single-failure tolerance with two categorical exceptions; Zero-Failure Tolerant (0FT) and Design for Minimum Risk (DFMR) hardware. Failure tolerance variances are defined and managed in accordance with agency human-rating requirements, and require concurrence from program Technical Authorities (TA) as well as the MPCV Safety and Mission Assurance Safety and Engineering Review Panel (MSERP). To understand and reaffirm standards applied to Apollo, Space Shuttle and Orion vehicles, Orion and Deep Space Gateway Safety and Mission Assurance (S&MA) representatives conducted accelerated research to compare unique safety and reliability criteria against ground and flight anomalies, based on information contained in post-mission reports and the Problem Reporting and Corrective Action (PRACA) database. In some cases, high-profile failures and narrow escapes have reinforced decisions to maintain or adapt safety requirements. In others, empirical trends have highlighted the need for vigilance and innovative safety guidelines. Given the inability to achieve absolute compliance with evolving safety and reliability requirements, the team conducted a targeted review of DFMR and 0FT propulsion elements within the framework of changing system design, inspection, materials and process developments to formulate conclusions on technological maturity, failure density, and net changes in safety risk. Based on the aggregate performance of high-reliability and failure-tolerant systems, the authors have attempted to establish best practices and guidelines to inform future program decisions. On a somewhat cautionary note, this study is not intended to direct a universal set of requirements for future missions based on prior lessons learned. Spacecraft safety is a multi-variable problem, and attempts to mitigate past failures will not guarantee future success. However, this assessment offers a retrospective review of policy changes, implementation and effectiveness. In the future, NASA, European Space Agency (ESA) and industry partners may benefit from a more robust correlation between requirements and performance, as space-faring nations work toward more challenging, complex and long-duration commercial and deep-space ventures.

Green, Carrie↗