Search NASA⌕ Search

SEARCH · Search NASA

Results for “Design Information Verification”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 73 records · Page 4

Europa Clipper Payload Verification and Validation: Avionics-Instrument Interface Test Campaign

NASA's Europa Clipper mission will investigate Jupiter's icy moon Europa using a payload suite consisting of nine instruments to address a range of scientific objectives concerning Europa's habitability. As the project proceeds past its Critical Design Review, confidence is being built in the system's ability to achieve mission objectives through the implementation of a rigorous payload verification and validation (V&V) program. As part of this payload V&V program, instrument box-level testing was performed by the payload team to verify select instrument-avionics interface requirements. This testing was performed at JPL using the avionics testbed's Bulk Data Storage Emulator (BDSEM) with visiting instrument Test Models. This paper summarizes the Data Link test campaign involving roughly four days of functional testing per instrument, including planning, testing methods, types of issues found, and the requirement closure process. Detail is also provided on the development, deployment, and validation of a standardized analysis tool used in data reviews. This testing verified requirements related to commanding rates, loss of link, packet format, clock counters, loopback test capability, and SpaceWire jitter and skew margins. Additional risk reduction testing of basic commanding, counter behavior, science data collection and transfer, and interface swapping was also performed. Because the BDSEM venue was not originally designed to be a run for record venue, the process of characterizing venue fidelity and establishing suitability for requirement closure using data collected in this venue will also be addressed.In order to close requirements, an extensible tool was developed to post-process instrument command and telemetry data from their original binary to a human-readable format and give visibility to errors detected within the data, such as packets with Cyclic Redundancy Check errors. This tool, called payload-packet-parser, is a Python 3.9 command line tool built using a variety of open-source Python libraries. Payload-packet-parser was designed to support parsing command and telemetry packets for all Europa Clipper instruments and additional analysis tools were developed for verification of specific information interface requirements. This test campaign, including post-processing using a single parsing and verification toolset, allowed for early interface testing, alleviating testing burdens on instrument teams and buying down risk on the instrument-avionics interface by finding hardware and software issues and idiosyncrasies prior to integration with system test venues. Over twenty issues were discovered across the payload, resulting in software updates and instrument rework well in advance of any system impacts. This paper concludes with an assessment of benefits and costs of this type of testing and lessons learned.

Montanez, Leticia↗

Guidelines for mission integration, a summary report

Guidelines are presented for instrument/experiment developers concerning hardware design, flight verification, and operations and mission implementation requirements. Interface requirements between the STS and instruments/experiments are defined. Interface constraints and design guidelines are presented along with integrated payload requirements for Spacelab Missions 1, 2, and 3. Interim data are suggested for use during hardware development until more detailed information is developed when a complete mission and an integrated payload system are defined. Safety requirements, flight verification requirements, and operations procedures are defined.

Source record↗

Software Tools to Support the Assessment of System Health

This presentation provides an overview of three software tools that were developed by the NASA Glenn Research Center to support the assessment of system health: the Propulsion Diagnostic Method Evaluation Strategy (ProDIMES), the Systematic Sensor Selection Strategy (S4), and the Extended Testability Analysis (ETA) tool. Originally developed to support specific NASA projects in aeronautics and space, these software tools are currently available to U.S. citizens through the NASA Glenn Software Catalog. The ProDiMES software tool was developed to support a uniform comparison of propulsion gas path diagnostic methods. Methods published in the open literature are typically applied to dissimilar platforms with different levels of complexity. They often address different diagnostic problems and use inconsistent metrics for evaluating performance. As a result, it is difficult to perform a one ]to ]one comparison of the various diagnostic methods. ProDIMES solves this problem by serving as a theme problem to aid in propulsion gas path diagnostic technology development and evaluation. The overall goal is to provide a tool that will serve as an industry standard, and will truly facilitate the development and evaluation of significant Engine Health Management (EHM) capabilities. ProDiMES has been developed under a collaborative project of The Technical Cooperation Program (TTCP) based on feedback provided by individuals within the aircraft engine health management community. The S4 software tool provides a framework that supports the optimal selection of sensors for health management assessments. S4 is structured to accommodate user ]defined applications, diagnostic systems, search techniques, and system requirements/constraints. One or more sensor suites that maximize this performance while meeting other user ]defined system requirements that are presumed to exist. S4 provides a systematic approach for evaluating combinations of sensors to determine the set or sets of sensors that optimally meet the performance goals and the constraints. It identifies optimal sensor suite solutions by utilizing a merit (i.e., cost) function with one of several available optimization approaches. As part of its analysis, S4 can expose fault conditions that are difficult to diagnose due to an incomplete diagnostic philosophy and/or a lack of sensors. S4 was originally developed and applied to liquid rocket engines. It was subsequently used to study the optimized selection of sensors for a simulation ]based aircraft engine diagnostic system. The ETA Tool is a software ]based analysis tool that augments the testability analysis and reporting capabilities of a commercial ]off ]the ]shelf (COTS) package. An initial diagnostic assessment is performed by the COTS software using a user ]developed, qualitative, directed ]graph model of the system being analyzed. The ETA Tool accesses system design information captured within the model and the associated testability analysis output to create a series of six reports for various system engineering needs. These reports are highlighted in the presentation. The ETA Tool was developed by NASA to support the verification of fault management requirements early in the Launch Vehicle process. Due to their early development during the design process, the TEAMS ]based diagnostic model and the ETA Tool were able to positively influence the system design by highlighting gaps in failure detection, fault isolation, and failure recovery.

Melcher, Kevin J.↗

Information management system study results. Volume 1: IMS study results

The information management system (IMS) special emphasis task was performed as an adjunct to the modular space station study, with the objective of providing extended depth of analysis and design in selected key areas of the information management system. Specific objectives included: (1) in-depth studies of IMS requirements and design approaches; (2) design and fabricate breadboard hardware for demonstration and verification of design concepts; (3) provide a technological base to identify potential design problems and influence long range planning (4) develop hardware and techniques to permit long duration, low cost, manned space operations; (5) support SR&T areas where techniques or equipment are considered inadequate; and (6) permit an overall understanding of the IMS as an integrated component of the space station.

Source record↗

Discrete Abstractions of Hybrid Systems: Verification of Safety and Application to User-Interface Design

Human interaction with a complex control system involves the user, the automation’s discrete mode logic, and the underlying continuous dynamics of the physical system. The user-interface of such systems always displays a reduced set of information about the entire system. Designing interfaces such that all the pertinent information is available and assuring that this information is correct is important for any user-interface, but especially so for safety-critical systems such as automotive systems and autopilots. Here we describe a methodology for the analysis of hybrid control systems that incorporate user interaction, with the goal of assuring that the information provided to the user is correct. That is, the user-interface must contain all information necessary to safely complete a desired procedure or task. We begin with a hybrid system model which incorporates discrete mode logic as well as nonlinear continuous dynamics. Using a hybrid computational tool for reachability, we find the largest region of the state-space in which we can guarantee the state of the system can always remain – this is the safe region of operation. By implementing a controller for safety which arises from this computation, we mathematically guarantee that this safe region is invariant, meaning that the system will always remain within the safe region if the determined controller is used on the boundary of the safe region. Verification within a hybrid framework allows us to account for the continuous dynamics underlying the discrete representations displayed to the user. Using the computed invariant regions as discrete states, we can abstract a discrete event system from this hybrid system with safety restrictions. This abstraction can be used to determine what information must be provided on the display. Furthermore, in cases in which an interface already exists, the abstraction provides the necessary input into existing interface verification methods. We provide two examples: a car traveling through a yellow light at an intersection and an aircraft autopilot in an automatic landing/go-around maneuver. The examples demonstrate the applicability of this methodology to hybrid systems that have operational constraints we can pose in terms of safety. This methodology differs from existing work in hybrid system verification in that we directly account for the user’s interactions with the system.

Meeko Oishi↗

Imagine Moving Off the Planet

Moving off the planet will be a defining moment of this century as landing on the Moon was in the last. For that to happen for humans to go where humans cannot go-- simulation is the sole solution. NASA supports simulation for life-cycle activities: design, analysis, test, checkout, operations, review and training. We contemplate time spans of a century and more, teams dispersed to different planets and the need for systems that endure or adapt as missions, teams and technology change. Without imagination such goals are impossible. But with imagination we can go outside our present perception of reality to think about and take action on what has been, is and, especially, what might be. Consciously maturing an imagined, possibly workable, idea through framing it to optimization to design, and building the product provides us with a new approach to innovation and simulation fidelity. We address options, analyze, test and make improvements in how we think and work. Each step includes increasingly exact information about costs, schedule, who will be needed, where, when and how. NASA i integrating such thinking into its Exploration Product Realization Hierarchy for simulation and analysis, test and verification, and stimulus response goals. Technically NASA follows a timeline of studies, analysis, definition, design, development and operations with concurrent documentation. We have matched this Product Realization Hierarchy with a continuum from image to realization that incorporates commitment, current and needed research and communication to ensure superior and creative problem solving as well as advances in simulation. One result is a new approach to collaborative systems. Another is a distributed observer network prototyped using game engine technology bringing advanced 3-D simulation of a simulation to the desktop enabling people to develop shared consensus of its meaning. Much of the value of simulation comes from developing in people their ability to make good decisions and reflexes supporting impressive achievement. Synthesizing imagination systematically into our work - and thus our success - is a challenge. NASA engineers have inventive minds, and the task is determining how best to enable them to devise the simulation and other innovations that will make a story so clear and so intellectually sound that people can carry out the mission for 50-100 years. This demands skills and knowledge traditionally under-respected and under-represented in technology organizations. But we are beginning to see that the process encourages efficiency and enables us to attain more effective results. We have to elicit imaginative, intelligent and effective ways to make better use than ever of the minds we have and will have available. We have to accept the challenge to accomplish tasks among dispersed interdisciplinary teams who must overcome changing priorities and technology, time and distance in order to maximize interactivity and innovation as never before. Attention to the process of innovation is a practical means to increase the efficiency of our intelligence. We have an obligation to reexamine and improve the process by which we approach and exercise innovation as we accept the charge to move off the planet.

Elfrey, Priscilla R.↗

Research and Technology Challenges for Human Data Analysts in Future Safety Management Systems

Enabling new and novel concepts of operations for Advanced Air Mobility poses an important need to evolve current safety management systems (SMS) and is posited to be realized through advances in Machine Learning (ML) Data Sciences and Artificial Intelligence. The “In-time Aviation Safety Management System” (IASMS) concept of operations supports the need to evolve today’s SMS to become more tailorable, scalable, and interoperable in response to forecasted changes expected for the future airspace system. Key to IASMS is integration of proactive and predictive ML algorithms trained to provide “in time” detection and mitigation of hazards and emergent risks through new methods and novel data types. IASMS research and technology development includes human factors design considerations for these systems to include human-system teaming, innovations in human interfaces and management of complex digital data information, human-system interaction/model-based system engineering, and verification and validation for data assurance and trust.

Chad L Stephens↗

System design package for IBM system one: solar heating and domestic hot water

This report is a collation of documents and drawings that describe a prototype solar heating and hot water system using air as the collector fluid and a pebble bed for heat storage. The system was designed for installation into a single family dwelling. The description, performance specification, subsystem drawings, verification plan/procedure, and hazard analysis of the system was packaged for evaluation of the system with information sufficient to assemble a similar system.

Source record↗

The design of a common lunar lander

The Austin Cynthesis Corporation was formed to respond to a Request for Proposal for the design of a Common Lunar Lander (CLL) capable of carrying lightweight (less than 500 kg), unspecified payload to the moon. This Final Design Report Document includes information on the requirements for the design project; the ideas proposed as solutions to the design problem; the work which has been completed in support of the design effort; justifications, validations, and verifications of decisions made during the project; and suggestions for future work to be done in support of the project. A project schedule, including current status of the items included on the schedule, as well as cost and management summaries is also included.

Driggers, Dan↗

Evaluation of Transport-Equations-Based Transition Models for High-Speed Boundary Layers Using OVERFLOW

Accurate modeling of laminar-turbulent transition is crucial for the design of hypersonic flight systems. However, the current transition models used in production CFD codes are insufficient for high-speed flows. Many extensions to low-speed models have been suggested; however, a thorough verification and validation effort is needed before these models can be used in design settings. Challenges include potentially missing details of the model implementation requirements and/or a complete specification of the input parameters needed to replicate the test findings. A meaningful assessment of the generalization capability of these models is also hindered by a lack of information regarding the specific flow configurations and associated grids employed for model calibration. As a key first step toward model verification, we present an independent assessment of two recently proposed models for high-speed transition, namely, a model within the SST-𝛾 framework and a model based on the SST-𝛾 – 𝜈 𝐿 equations. These models are implemented in the NASA OVERFLOW 2.3e solver and their performance in predicting first mode, second mode, and crossflow transition has been evaluated for several test cases in the supersonic and hypersonic regimes. Besides the test cases employed by the model developers, which could have also been used for model calibration, the present assessment includes supplementary configurations that contribute to an unbiased assessment of the models. The outcomes presented in this study indicate the potential for the models to be applied to high-speed flight configurations. Key steps toward future improvements to these models are also outlined.

CFD↗

Evaluation of Transport-Equation-Based Transition Models for High-Speed Boundary Layers Using OVERFLOW

Accurate modeling of laminar-turbulent transition is crucial for the design of hypersonic flight systems. However, the current transition models used in production CFD codes are insufficient for high-speed flows. Many extensions to low-speed models have been suggested; however, a thorough verification and validation effort is needed before these models can be used in design settings. Challenges include potentially missing details of the model implementation requirements and/or a complete specification of the input parameters needed to replicate the test findings. A meaningful assessment of the generalization capability of these models is also hindered by a lack of information regarding the specific flow configurations and associated grids employed for model calibration. As a key first step toward model verification, we present an independent assessment of two recently proposed models for high-speed transition, namely, a model within the SST-$\gamma$ framework and a model based on the SST-$\gamma-\nu_L$ equations. These models are implemented in the NASA OVERFLOW 2.3e solver and their performance in predicting first mode, second mode, and crossflow transition has been evaluated for several test cases in the supersonic and hypersonic regimes. Besides the test cases employed by the model developers, which could have also been used for model calibration, the present assessment includes supplementary configurations that contribute to an unbiased assessment of the models. The outcomes presented in this study indicate the potential for the models to be applied to high-speed flight configurations. Key steps toward future improvements to these models are also outlined.

High-speed flow↗

Characterization of Carbon Dioxide Washout Measurement Techniques in the Mark-III Space Suit

Providing adequate carbon dioxide (CO2) washout is essential to the reduction of risk in performing suited operations. Long term CO2 exposure can lead to symptoms such as headache, lethargy, dizziness, and in severe cases can lead to unconsciousness and death. Thus maintaining adequate CO2 washout in both ground testing and during in flight EVAs is a requirement of current and future suit designs. It is necessary to understand the inspired CO2 of suit wearers such that future requirements for space suits appropriately address the risk of inadequate washout. Testing conducted by the EVA Physiology Laboratory at the NASA Johnson Space Center aimed to characterize a method for noninvasively measuring inspired oronasal CO2 under pressurized suited conditions in order to better inform requirements definition and verification techniques for future CO2 washout limits in space suits. Prior work conducted by the EPL examined several different wearable, respirator style, masks that could be used to sample air from the vicinity surround the nose and mouth of a suited test subject. Previously published studies utilized these masks, some being commercial products and some novel designs, to monitor CO2 under various exercise and flow conditions with mixed results for repeatability and/or consistency between subjects. Based on a meta-analysis of those studies it was decided to test a nasal cannula as it is a commercially available device that is placed directly in the flow path of the user as they breathe. A nasal cannula was used to sample air inhaled by the test subjects during both rest and exercise conditions. Eight subjects were tasked with walking on a treadmill or operating an arm ergometer to reach target metabolic rates of 1000, 2000, and 3000 BTU/hr. Suit pressure was maintained at 4.3 psid for all tests, with supply flow rates of 6, 4, and 2 actual cubic feet per minute depending on the test condition. Each test configuration was conducted twice with subjects breathing either through their nose only, or however they felt comfortable. By restricting breathing through a single orifice, we are able to more accurately define exactly what flow stream the sampled CO2 is taken from. Oronasal CO2 was monitored using real time infrared gas analyzers fed via sample tubes connected to the nasal cannula within the suit. Two additional sampling tubes were placed at the head and chin of the test subject, in an effort to capture CO2 concentrations across the entire flow stream of the Mark-III vent system (flow path is head to neck). Metabolic rate was calculated via the exhaust CO2 concentration and used to adjust subject workload on either the treadmill or arm ergometer until the target was reached. Forward work will aim to characterize the historically accepted minimum ppCO2 in suit during EVA by repeating this study in the Extravehicular Mobility Unit (EMU) space suit. This will help to define washout requirements for future suits, be they NASA (e.g. Z-2) or Commercial Crew designed. Additionally it is important to determine the functional consequences of CO2 exposure during EVA. Severe CO2 symptoms are a result of very high concentration, acute exposures. While long term, low concentration exposures have been shown to result in slight cognitive decline, symptoms resolve upon quickly returning to nominal concentrations and it remains unknown the impact that minor deficits in cognitive performance can have on EVA performance.

Norcross, J.↗

System Design Package for SIMS Prototype System 3, Solar Heating and Domestic Hot Water

A collation of documents and drawings are presented that describe a prototype solar heating and hot water system using liquid flat plate collectors and a gas or electric furnace energy subsystem. The system was designed for installation into a single-family dwelling. The description, performance specification, subsystem drawings, verification plan/procedure, and hazard analysis of the system are packaged for evaluation of the system with information sufficient to assemble a similar system.

Source record↗

Error Estimation and Uncertainty Propagation in Computational Fluid Mechanics

Numerical simulation has now become an integral part of engineering design process. Critical design decisions are routinely made based on the simulation results and conclusions. Verification and validation of the reliability of the numerical simulation is therefore vitally important in the engineering design processes. We propose to develop theories and methodologies that can automatically provide quantitative information about the reliability of the numerical simulation by estimating numerical approximation error, computational model induced errors and the uncertainties contained in the mathematical models so that the reliability of the numerical simulation can be verified and validated. We also propose to develop and implement methodologies and techniques that can control the error and uncertainty during the numerical simulation so that the reliability of the numerical simulation can be improved.

Zhu, J. Z.↗

Design and Testing of an Approach to Automated In-Flight Safety Risk Management for sUAS Operations

An onboard risk management automation design is presented based on run-time assurance principles, as well as the concept for In-Time Aviation Safety Management Systems (IASMS) as described by the National Academies. The automation is designed to operate independently of the autopilot and perform real-time risk assessment spanning multiple classes of hazards, predict constraint violations, and track autopilot states. In the event of elevated risk conditions or predicted constraint violations, the automation will select from a set of available contingencies and trigger autopilot mode changes if necessary to mitigate risk exposure. The onboard automation also informs the remote operator/pilot of what the independent monitor is observing and any contingency decisions or actions that may arise during flight. Details of an implementation of this design and results of verification and validation activities, as required to meet stringent NASA software and system assurance standards, are also presented. This includes simulation and flight testing using small unmanned aircraft systems.

Ersin Ancel↗

Design and Verification of a Distributed Communication Protocol

The safety of remotely operated vehicles depends on the correctness of the distributed protocol that facilitates the communication between the vehicle and the operator. A failure in this communication can result in catastrophic loss of the vehicle. To complicate matters, the communication system may be required to satisfy several, possibly conflicting, requirements. The design of protocols is typically an informal process based on successive iterations of a prototype implementation. Yet distributed protocols are notoriously difficult to get correct using such informal techniques. We present a formal specification of the design of a distributed protocol intended for use in a remotely operated vehicle, which is built from the composition of several simpler protocols. We demonstrate proof strategies that allow us to prove properties of each component protocol individually while ensuring that the property is preserved in the composition forming the entire system. Given that designs are likely to evolve as additional requirements emerge, we show how we have automated most of the repetitive proof steps to enable verification of rapidly changing designs.

Munoz, Cesar A.↗

Formal verification of human-automation interaction

This paper discusses a formal and rigorous approach to the analysis of operator interaction with machines. It addresses the acute problem of detecting design errors in human-machine interaction and focuses on verifying the correctness of the interaction in complex and automated control systems. The paper describes a systematic methodology for evaluating whether the interface provides the necessary information about the machine to enable the operator to perform a specified task successfully and unambiguously. It also addresses the adequacy of information provided to the user via training material (e.g., user manual) about the machine's behavior. The essentials of the methodology, which can be automated and applied to the verification of large systems, are illustrated by several examples and through a case study of pilot interaction with an autopilot aboard a modern commercial aircraft. The expected application of this methodology is an augmentation and enhancement, by formal verification, of human-automation interfaces.

Aviation↗

NASA plans for future earth resources missions

Development activities underway to improve LANDSAT sensors and observing systems are reported. Data cover high resolution imagery of surface temperatures for improving crop and other vegetation and soil classifications, and heat capacity mapping for recording surface temperatures at hours of maximum and minimum heating. Automatic identification and classification methods designed to extract information such as crop and forage acreages, amounts of water run-off, and types of land use directly from the satellite observations were also studied. A number of applications verification tests were conducted, particularly in the areas of crop and land use inventory and water run-off prediction, to demonstrate the direct transfer of space acquired information to end users.

Nordberg, W.↗