SEARCH · Search NASA

Results for “Safety Controls”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 703 records · Page 39

All sources NASA NTRS DOE OSTI

NASA NTRS2007

NASA Glenn Research in Controls and Diagnostics for Intelligent Aerospace Propulsion Systems

With the increased emphasis on aircraft safety, enhanced performance and affordability, and the need to reduce the environmental impact of aircraft, there are many new challenges being faced by the designers of aircraft propulsion systems. The Controls and Dynamics Branch (CDB) at NASA (National Aeronautics and Space Administration) Glenn Research Center (GRC) in Cleveland, Ohio, is leading and participating in various projects in partnership with other organizations within GRC and across NASA, the U.S. aerospace industry, and academia to develop advanced controls and health management technologies that will help meet these challenges through the concept of Intelligent Propulsion Systems. This presentation describes the current CDB activities in support of the NASA Aeronautics Research Mission, with an emphasis on activities under the Integrated Vehicle Health Management (IVHM) and Integrated Resilient Aircraft Control (IRAC) projects of the Aviation Safety Program. Under IVHM, CDB focus is on developing advanced techniques for monitoring the health of the aircraft engine gas path with a focus on reliable and early detection of sensor, actuator and engine component faults. Under IRAC, CDB focus is on developing adaptive engine control technologies which will increase the probability of survival of aircraft in the presence of damage to flight control surfaces or to one or more engines. The technology development plans are described as well as results from recent research accomplishments.

Garg, Sanjay↗

NASA NTRS1992

Final-Approach-Spacing Subsystem For Air Traffic

Automation subsystem of computers, computer workstations, communication equipment, and radar helps air-traffic controllers in terminal radar approach-control (TRACON) facility manage sequence and spacing of arriving aircraft for both efficiency and safety. Called FAST (Final Approach Spacing Tool), subsystem enables controllers to choose among various levels of automation.

Davis, Thomas J.↗

NASA NTRS2015

Certification Considerations for Adaptive Systems

Advanced capabilities planned for the next generation of aircraft, including those that will operate within the Next Generation Air Transportation System (NextGen), will necessarily include complex new algorithms and non-traditional software elements. These aircraft will likely incorporate adaptive control algorithms that will provide enhanced safety, autonomy, and robustness during adverse conditions. Unmanned aircraft will operate alongside manned aircraft in the National Airspace (NAS), with intelligent software performing the high-level decision-making functions normally performed by human pilots. Even human-piloted aircraft will necessarily include more autonomy. However, there are serious barriers to the deployment of new capabilities, especially for those based upon software including adaptive control (AC) and artificial intelligence (AI) algorithms. Current civil aviation certification processes are based on the idea that the correct behavior of a system must be completely specified and verified prior to operation. This report by Rockwell Collins and SIFT documents our comprehensive study of the state of the art in intelligent and adaptive algorithms for the civil aviation domain, categorizing the approaches used and identifying gaps and challenges associated with certification of each approach.

Bhattacharyya, Siddhartha↗

DOE OSTI2020

Flammable Gas Generation and Control at the Idaho Completion Project Legacy Combustible Gas Generation - 20191

On April 11, 2018, four drums containing transuranic waste at the Idaho National Laboratory underwent over-pressurization, ejecting their lids and spreading radiological waste within a facility. An investigation has found that waste in the drums generated methane gas, which contributed to the event. Subsequent to the investigation, the potential for drums to have methane and other flammable analytes whose concentrations could approach or exceed the lower flammability limit (LFL) and the adequacy of the controls to prevent or mitigate a possible deflagration was evaluated. An extensive review of the historical records was performed to determine how many drums exceed the LFL. The historical record identified a small quantity of drums that exceeded the LFL for xylene, hydrogen, and methane. The primary codified applicable code or standard for handling drums is 29 CFR 1910.120 (j) 'Handling Drums and Containers.' It is used throughout the commercial and government sector. This code is integrated throughout the Fluor Idaho safety management programs and procedures to control the Standard Industrial Hazards (SIHs) associated with drum and container handling. Example requirements include: - Drums and containers are inspected, and their integrity assured prior to being moved. - Site operations are organized to minimize the amount of drum or container movement. - When there is a reasonable possibility of flammable atmospheres being present, material handling equipment and hand tools are of the type to prevent sources of ignition. Drums and containers under pressure, as evidenced by bulging or swelling, are not moved until the cause for excess pressure is determined and appropriate containment procedures have been implemented to protect employees from explosive relief of the drum. Drums which exceed the WIPP FGA limit have NCRs associated with them. Once a drum fails flammable gas sampling, an NCR is initiated. The NCR drives placement into NCR dense pack rows. A standing order drives placement of the FGA failures to a single planer segregation location. These drums are not allowed for further processing or shipment until the NCR has been cleared. Once in the single planer rows, follow-up FGA testing is performed by CCP. The NCR is dispositioned by follow-up sampling occurring after adequate time has been provided for the gas to diffuse through the filter assembly, or, in some cases, the drums are repackaged into additional drums to reduce the source term. To date, the ICP project has performed approximately 1.5 million drums moves without a deflagration event due to combustible gas generation. Flammable gas generation in a transuranic waste drum is not unique to the ICP but is common across the DOE complex. Based on the experience at Idaho, application of industry standards is sufficient to control the risk of drum deflagration due to drum movements. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

NASA NTRS2001

Automated Theorem Proving in High-Quality Software Design

The amount and complexity of software developed during the last few years has increased tremendously. In particular, programs are being used more and more in embedded systems (from car-brakes to plant-control). Many of these applications are safety-relevant, i.e. a malfunction of hardware or software can cause severe damage or loss. Tremendous risks are typically present in the area of aviation, (nuclear) power plants or (chemical) plant control. Here, even small problems can lead to thousands of casualties and huge financial losses. Large financial risks also exist when computer systems are used in the area of telecommunication (telephone, electronic commerce) or space exploration. Computer applications in this area are not only subject to safety considerations, but also security issues are important. All these systems must be designed and developed to guarantee high quality with respect to safety and security. Even in an industrial setting which is (or at least should be) aware of the high requirements in Software Engineering, many incidents occur. For example, the Warshaw Airbus crash, was caused by an incomplete requirements specification. Uncontrolled reuse of an Ariane 4 software module was the reason for the Ariane 5 disaster. Some recent incidents in the telecommunication area, like illegal "cloning" of smart-cards of D2GSM handies, or the extraction of (secret) passwords from German T-online users show that also in this area serious flaws can happen. Due to the inherent complexity of computer systems, most authors claim that only a rigorous application of formal methods in all stages of the software life cycle can ensure high quality of the software and lead to real safe and secure systems. In this paper, we will have a look, in how far automated theorem proving can contribute to a more widespread application of formal methods and their tools, and what automated theorem provers (ATPs) must provide in order to be useful.

Schumann, Johann↗

DOE OSTI2021

Optimizing Ventilation Using Low-Cost Sensors to Improve Health, Safety, and Energy Efficiency

Air is the primary carrier of hazards within a space, whether it be hazardous byproducts of laboratory research activities or airborne pathogens. As a result, building ventilation is a primary defense against unseen airborne hazards. Critical laboratory facilities require effective mitigation of exposure to research-related, airborne hazards, providing a proving ground for effective ventilation strategies that optimize safety of occupants and reduce energy use. The heart of smart laboratory building operation is dynamic, analytics-based ventilation, which requires an in-depth intimate knowledge of building environmental conditions achieved through contaminant-detection systems. Unfortunately, currently many contaminant-detection solutions are expensive, elaborate systems that raise barriers for building managers. Through the successful deployment of a novel low-cost, modular sensor technology, we have developed a demand-control ventilation protocol effective in improving safety and reducing energy in critical laboratory environments. In this article, we will highlight best practices and lessons learned through this deployment that can be applied beyond laboratories. This article describes a low-cost sensor to support providing a safe, healthy building environment and reduce energy use through effective and efficient ventilation.

dynamic management of indoor air quality↗

DOE OSTI2021

Optimizing Ventilation Using Low-Cost Sensors to Improve Health, Safety, and Energy Efficiency

Air is the primary carrier of hazards within a space, whether it be hazardous bi-products of research activities or airborne pathogens. As a result, building ventilation is the primary defense against unseen airborne hazards. Critical laboratory facilities already demand the need for effective mitigation of exposure to research-related, airborne hazards, providing a proving ground for effective ventilation strategies that optimize safety of occupants and reduce energy use. The heart of smart laboratory building operation is dynamic, analytics-based ventilation, which requires an intimate knowledge of building environmental conditions achieved through contaminant-detection systems. Unfortunately, currently available contaminant-detection solutions are expensive, elaborate systems that raise barriers for building managers on a limited budget. Through the successful deployment of a novel low-cost, modular sensor technology, we have developed a demand-control ventilation protocol effective in improving safety and reducing energy in the critical laboratory environment. In this session, we will highlight best practices and lessons learned through this deployment that can be applied beyond laboratories without breaking the bank. This paper describes a low-cost solution for providing a safe, healthy building environment and reducing energy use through effective, efficient ventilation.

ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATION↗

NASA NTRSDate not supplied

Controlled Rest: Investigating the Use of an In-Flight Sleepiness Countermeasure

INTRODUCTION: Sleepiness is commonly reported amongst commercial airline pilots and is recognized as a safety risk due to its impact on performance. Controlled Rest (CR) refers to a short, voluntary nap opportunity taken by pilots on the flight deck as a countermeasure to unanticipated sleepiness in flight. This study explores the profile of CR use in a long-haul commercial airline. METHODS: Forty-four pilots filled in an application-based sleep/work diary and wore actiwatches for approximately 2 weeks. Complete data sets from 239 flights including sleep diaries, actigraphy, and schedules were merged and analyzed. Sleep diary entries were used to set CR intervals in the actigraphy software, which was then used to predict sleep within these intervals. All time-stamps of sleep periods and flight schedules were adjusted for home-base time of the pilots. Pearson Correlations were used to assess the influence of pilot demographics on CR use. A mixed-effects logistic regression was used to analyze the impact of schedule factors on CR. RESULTS: Pilots reported taking CR on 46% (n=110) of observed flights. Average CR attempt duration was 43.1 ± 11.0 minutes. Eighty-percent (n=106/133) of all CR attempts were estimated by actigraphy to have successfully achieved sleep with an average sleep duration during successful rest periods of 31.7 ± 12.2 minutes. Captains reported taking CR on 38% of flights (n=39/102), compared to First Officers reporting 52% (n=71/137) of flights with CR (p=0.131). Age, experience, BMI, and sleep need were not associated with the percentage of flights with CR (all p>0.244). The following schedule factors were associated with a higher frequency of CR: night (55%, n=76) vs. day flights (34%, n=34); <10h (63%, n=80) vs. >10h duration flights (27%, n=30); return (60%, n=71) vs. outbound flights (33%, n=39); and 2-pilot (69%, n=83) vs. >2-pilot flights (23%, n=27) (all p≤0.001). There was a trend for more CR on eastbound flights, but this was not significant (eastbound: 51%, n= 57; westbound: 40%, n= 44; p=0.059). Of note, 22% (n=26) of augmented flights (>2-pilots) contained both CR and Bunk Rest (in a designated rest facility). DISCUSSION: Data from this airline show that pilots commonly use CR to mitigate sleepiness in-flight, especially on flights <10h duration and during home-base nighttime flights. Future studies are required to determine generalizability of these results to other airlines.

sleepiness↗

DOE OSTI1988

Nuclear Safety [Vol. 29, No. 1, January-March 1988]

Nuclear Safety is a review journal that covers significant developments in the field of nuclear safety. Its scope includes the analysis and control of hazards associated with nuclear energy, operations involving fissionable materials, and the products of nuclear fission and their effects on the environment. Primary emphasis is on safety in reactor design, construction, and operation; however, the safety aspects of the entire fuel cycle, including fuel fabrication, spent-fuel processing, nuclear waste disposal, handling of radioisotopes, and environmental effects of these operations, are also treated. Table of Contents for this issue follows. THE CHERNOBYL ACCIDENT: 1 Core History and Nuclide Inventory of the Chernobyl Core at the Time of Accident by Gerald Kirchner and Cornelius C. Noack; GENERAL SAFETY CONSIDERATIONS: 6 Nonprescriptive Nuclear Safety Regulation: The Example of Loss of Offsite Power by M. W. Golay, V. P. Manno, and C. Vlahoplus, Jr., 20 Nuclear Power Safety Goals in Light of the Chernobyl Accident by C. Whipple and C. Starr; ACCIDENT ANALYSIS: 29 Containment Loads from Severe Accidents—U.S. Program by W. Kerr and M. K. Dey; PLANT SAFETY FEATURES: 36 Safety Characteristics of Modern High-Temperature Reactors: Focus on German Designs by W. Kröger, H. Nickel, and R. Schulten; ENVIRONMENTAL EFFECTS: 49 Radiation Hormesis and Nuclear Safety by C. C. Congdon; OPERATING EXPERIENCES: 58 Evaluation of Nonradiological Water Chemistry at Power Reactors by Harvey Zibulsky, James J. Kottan, Walter J. Pasciak, Mary Ann Castrogivanni, and Sujit Banerjee, 64 Reactor Shutdown Experience Compiled by J. W. Cletcher, 67 Operating U.S. Power Reactors Compiled by E. G. Silver; RECENT DEVELOPMENTS: 85 General Administrative Activities Compiled by E. G. Silver, 94 Reports, Standards, and Safety Guides by D. S. Queener, 100 Status of Power-Reactor Projects Undergoing Licensing Review Compiled by E. G. Silver, 103 Proposed Rule Changes as of Sept. 30, 1987; ANNOUNCEMENTS: 5 Northwestern University Short Course on Radiation Safety, 28 International Approach to Nuclear Safety (After Three-Mile Island and Chernobyl), 57 RPI Short Course on Modern Developments in Boiling Heat Transfer and Two-Phase Flow, 107 20th DOE/NRC Nuclear Air Cleaning Conference, 110 Third International Topical Meeting on Nuclear Power Plant Thermal Hydraulics and Operations, 108 The Authors, 111 Indexes to Nuclear Safety, Volume 28.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

NASA NTRS2007

Symbolic LTL Compilation for Model Checking: Extended Abstract

In Linear Temporal Logic (LTL) model checking, we check LTL formulas representing desired behaviors against a formal model of the system designed to exhibit these behaviors. To accomplish this task, the LTL formulas must be translated into automata [21]. We focus on LTL compilation by investigating LTL satisfiability checking via a reduction to model checking. Having shown that symbolic LTL compilation algorithms are superior to explicit automata construction algorithms for this task [16], we concentrate here on seeking a better symbolic algorithm.We present experimental data comparing algorithmic variations such as normal forms, encoding methods, and variable ordering and examine their effects on performance metrics including processing time and scalability. Safety critical systems, such as air traffic control, life support systems, hazardous environment controls, and automotive control systems, pervade our daily lives, yet testing and simulation alone cannot adequately verify their reliability [3]. Model checking is a promising approach to formal verification for safety critical systems which involves creating a formal mathematical model of the system and translating desired safety properties into a formal specification for this model. The complement of the specification is then checked against the system model. When the model does not satisfy the specification, model-checking tools accompany this negative answer with a counterexample, which points to an inconsistency between the system and the desired behaviors and aids debugging efforts.

Rozier, Kristin Y.↗

DOE OSTI1988

Nuclear Safety [Vol. 29, No. 1, January-March 1988]

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

DOE OSTI2020

Preliminary Criticality and Radiation Shielding Analysis for the Storage and Transfer of MARVEL Reactor Spent Nuclear Fuel

This report documents the results of preliminary nuclear criticality and radiation shielding assessments during transfer and dry storage of irradiated Microreactor Applications Research Validation and Evaluation (MARVEL) reactor fuel at Idaho National Laboratory (INL). The assessments focus on transfer casks and storage canisters that are currently in use at INL, which may be compatible with the irradiated MARVEL reactor fuel. The criticality assessments were performed using the radiation transport code MCNP6 with 37 MARVEL reactor fuel elements in various configurations and scenarios. All transfer and storage configurations under dry conditions were below the assumed criticality safety limit of 0.93. Some storage and transfer configurations under wet conditions exceeded the criticality safety limit. This suggests that the appropriate administrative and engineering controls, in addition to reducing the number of MARVEL reactor fuel elements per transfer cask or storage canister, can be expected to ensure criticality safety under all scenarios. The radiation shielding assessments were performed by generating conservative neutron and photon source terms using the ORIGEN module in the SCALE suite of codes. These source spectra were used to estimate the dose equivalent rates using the radiation transport code MCNP6, both on contact and 1 m away from the fuel and transfer casks. The maximum estimated dose equivalent rate of 37 unshielded MARVEL reactor fuel elements on contact is approximately 42000 R/hr. The maximum estimated dose equivalent rates on contact to the ATR transfer cask, HFEF-5 transfer cask, and high load charger were approximately 233 mR/hr, 171 mR/hr, and 201 mR/hr, respectively. This suggests that with the appropriate administrative and engineering controls, all three transfer casks analyzed can be expected to provide sufficient radiation shielding to workers during transfer of irradiated MARVEL reactor fuel. These calculations are performed to support the planning and strategy for the MARVEL project and will demonstrate the technical viability of the different configurations discussed and help identify where engineered or administrative controls may be necessary. A complete criticality safety analysis and radiation shielding analysis, including validation and contingency and accident analysis must be completed by licensed and authorized personnel before any transfer or storage of MARVEL reactor nuclear fuel.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

DOE OSTI2021

Dynamic Human-in-the-Loop Simulated Nuclear Power Plant Thermal Dispatch System Demonstration and Evaluation Study

An Idaho National Laboratory research team performed a human-in-the-loop study with two formerly licensed retired operators to evaluate thermal power dispatch operations supported by the modified GSE Systems GPWR plant simulator. Virtual representations of the analog control panels were presented on touch-screen bays configured to mimic the control room layout in the newly renovated Human Systems Simulation Laboratory. The operators performed 15 scenarios covering normal evolutions to transition the plant from full turbine operation to joint turbine and thermal power dispatch operations in addition to transient response scenarios induced with simulated faults to evaluate the impact of thermal power dispatch system on operator and plant responses. A prototype human-system interface (HSI) was developed and displayed in tandem with the virtual analog panels to support the operators executing the procedurally drive evolutions and transient responses. An interdisciplinary team of operations experts, nuclear engineers, and human factors experts observed the operators performing the scenarios to evaluate the operations. Only a preliminary analysis of the results has been performed. The full analysis will be shared in a milestone report scheduled for release at the end of September; however, some high-level conclusions were readily available. Two high level findings for the system design were captured in the study. The manual control supported by the HSI to transition from standard operations to thermal power dispatch operation imposed a considerable amount of workload on the operators due to tedious manual valve manipulations and system monitoring required to verify their intended effect. An additional operator would be required in the control room to support the daily evolution. Automatic control for the transition was deemed a requirement for plant adoption without imposing additional staffing costs. The second finding was the necessity for an automatic thermal power dispatch system trip isolation function linked to a turbine and reactor trip signal. The operators completed scenarios with automatic isolation functionality and manually required actuation of the thermal power dispatch system. The operator response was sufficiently slower in the manual trip condition, such that operators were unable to manually actuate key post trip safety functions an indicate a degraded control capability that should be avoided. With an automatic trip signal little to no impact of the thermal power dispatch system was identified on the primary plant response and therefore the system could be readily and safely adopted. Together these two findings represent the need to support the adoption of thermal power dispatch capability into existing operations by leveraging automation to augment any additional operator tasking required to control and monitor an additional system beyond existing operations.

99 GENERAL AND MISCELLANEOUS↗

NASA NTRS2002

Control Oriented Modeling and Validation of Aeroservoelastic Systems

Lightweight aircraft design emphasizes the reduction of structural weight to maximize aircraft efficiency and agility at the cost of increasing the likelihood of structural dynamic instabilities. To ensure flight safety, extensive flight testing and active structural servo control strategies are required to explore and expand the boundary of the flight envelope. Aeroservoelastic (ASE) models can provide online flight monitoring of dynamic instabilities to reduce flight time testing and increase flight safety. The success of ASE models is determined by the ability to take into account varying flight conditions and the possibility to perform flight monitoring under the presence of active structural servo control strategies. In this continued study, these aspects are addressed by developing specific methodologies and algorithms for control relevant robust identification and model validation of aeroservoelastic structures. The closed-loop model robust identification and model validation are based on a fractional model approach where the model uncertainties are characterized in a closed-loop relevant way.

Crowder, Marianne↗

NASA NTRS1992

RICIS Symposium 1992: Mission and Safety Critical Systems Research and Applications

This conference deals with computer systems which control systems whose failure to operate correctly could produce the loss of life and or property, mission and safety critical systems. Topics covered are: the work of standards groups, computer systems design and architecture, software reliability, process control systems, knowledge based expert systems, and computer and telecommunication protocols.

Source record↗

NASA NTRS1971

Hydraulic actuator motion limiter ensures operator safety

Device regulates action of hydraulic linkage to control column to minimize hazard to operator. Primary components of device are flow rate control valve, limiter accumulator, and shutoff valve. Limiter may be incorporated into other hydraulic systems to prevent undue wear on hydraulic actuators and associated components.

Steinmetz, C. P.↗

NASA NTRS2005

Development of Advanced Verification and Validation Procedures and Tools for the Certification of Learning Systems in Aerospace Applications

Adaptive control technologies that incorporate learning algorithms have been proposed to enable automatic flight control and vehicle recovery, autonomous flight, and to maintain vehicle performance in the face of unknown, changing, or poorly defined operating environments. In order for adaptive control systems to be used in safety-critical aerospace applications, they must be proven to be highly safe and reliable. Rigorous methods for adaptive software verification and validation must be developed to ensure that control system software failures will not occur. Of central importance in this regard is the need to establish reliable methods that guarantee convergent learning, rapid convergence (learning) rate, and algorithm stability. This paper presents the major problems of adaptive control systems that use learning to improve performance. The paper then presents the major procedures and tools presently developed or currently being developed to enable the verification, validation, and ultimate certification of these adaptive control systems. These technologies include the application of automated program analysis methods, techniques to improve the learning process, analytical methods to verify stability, methods to automatically synthesize code, simulation and test methods, and tools to provide on-line software assurance.

Jacklin, Stephen↗

NASA NTRSDate not supplied

A Concept of Operations (ConOps) of an In-time Aviation Safety Management System (IASMS) for Advanced Air Mobility (AAM)

The growth of new emerging operations involving Advanced Air Mobility (AAM) necessitates developing a perspective for an In-time Aviation Safety Management System (IASMS). This perspective advances from the National Academies report on IASMS and its recommendation for developing a Concept of Operations (ConOps) for IASMS. A ConOps has been developed for In-time System-Wide Safety Assurance (ISSA) from which the IASMS ConOps pivots to provide a robust scope commensurate with the broad vision defined by the National Academies. The IASMS ConOps focuses on emerging operations and spans innovations in Unmanned Aircraft System (UAS) and an increasingly complex ecosystem comprised of a widening mix of vehicles and technologies, Urban Air Mobility (UAM) with industry-federated services, traditional operations, as well as new supersonic aircraft and space launch systems.The challenge for the IASMS ConOps is to be broad to encompass innovations in the coming years and decades while agile to ensure levels of safety compatible with operational and certification requirements of the National Airspace System (NAS). The IASMS ConOps interweaves increasing complexity of operational safety capabilities and unlocking UAS Maturity Levels (UMLs). The relationships between increased complexity of automation and automated systems, fewer operators who are not as traditionally higher skilled, more complex operational environments, and aviation operations management with mixed aircraft and equipage pose a multi-dimensional space for IASMS capabilities essential for safety assurance and risk management. Instantiating IASMS capabilities and how they would be integral to AAM operations and increasing maturity of UAM could be accomplished through a series of Safety Demonstrators. These Safety Demonstrators could provide increased understanding and insight into use of controls for risk mitigation, means of compliance for certification, and operational experience with safety services such as in relation to contingency management. The IASMS capabilities can be viewed as initially residing with the vehicle, airspace, and Supplemental Data Service Provider (SDSP). For example, vehicle capabilities include communications including the command and control link, Remote Identification (ID), conflict advisory/alerting, and UAS system monitoring. These capabilities monitor and assess data such as battery health, aircraft state, and human performance. Complexity of ISAMS capabilities depends on a number of factors. These factors are intendedonly as a notional categorization with the purpose being to reflect the complexity of the AAM ecosystem that would drive up the complexity of ISSA capabilities including systems, sensors, models, standards, and controls. Factors could include the Vehicle Flight Management, Environment, Airspace, and Contingency Management. Each of these factors can be comprised of multiple sub-factors that contribute to increasing complexity. For example, Airspace at a lower level of complexity could be dedicated to UTM operations that are unmonitored, and at a higher level of complexity could involve mixed UTM and ATM operations. The IASMS concept includes safety services that provide data and information to different participants in AAM. The roles and responsibilities of participants can be defined using the Responsible-Accountable-Consulted-Informed (RACI) analysis. For example, for the safety service involving the Remote ID, the Operator would be accountable for providing the data, the Vehicle would be responsible for transmitting it, and the USS, SDSP, Vertiports, FIMS (FAA), and Public Entities such as safety services would be informed by receiving the data. The IASMS ConOps identifies the capabilities needed for risk mitigation and safety assurance in the increasingly complex national airspace. The ConOps serves as a pathway for engaging with industry to gain operational experience including through the Safety Demonstrator series, the RACI analysis, and operational complexity factors. The ConOps serves to integrate these different perspectives to build a cohesive and cogent approach to an AAM safety management system.

In-Time Aviation Safety Management System↗