Search NASA⌕ Search

SEARCH · Search NASA

Results for “Failure Tolerance”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 73 records · Page 4
All sourcesNASA NTRSDOE OSTI
NASA NTRS2004

FY04 Advanced Life Support Architecture and Technology Studies: Mid-Year Presentation

Long-Term Objective: Identify optimal advanced life support system designs that meet existing and projected requirements for future human spaceflight missions. a) Include failure-tolerance, reliability, and safe-haven requirements. b) Compare designs based on multiple criteria including equivalent system mass (ESM), technology readiness level (TRL), simplicity, commonality, etc. c) Develop and evaluate new, more optimal, architecture concepts and technology applications.

Lange, Kevin↗
NASA NTRS2013

End User Acceptance - Requirements or Specifications, Certification, Testing

NASA follows top level safety requirement of two-failure tolerance (t hree levels of controls or design for minimum risk) to all catastroph ic hazards in the design of safe li-ion batteries for space use. ? R igorous development testing at appropriate levels to credible offnominal conditions and review of test data. ? Implement robust design con trols based on test results and test again to confirm safety at the a ppropriate levels. ? Stringent testing of all (100%) flight batteries (from button cells to large batteries).

Jeevarajan, Judith↗
NASA NTRS2019

Flat-H Redundant Frangible Joint Design Evolution 2018: Feasibility Study Conclusions

This paper reports results of an investigation into developing a single failure tolerant pyrotechnic linear separation system which features completely redundant explosive trains suitable for human spaceflight. It is a follow up to “Flat-H Redundant Frangible Joint Design Evolution 2017” and “Flat-H Redundant Frangible Joint Evolution”. The paper chronicles the history of the redundant frangible joint development program including testing, analysis, and design improvements from 2014 to the present culminating in a successful proof-of-concept prototype. The paper describes work done to address debris control and containment of combustion products. A performance optimization strategy is presented along with optimization results. Additionally a novel containment manifold design is presented with test results.

Structures↗
NASA NTRS2021

Modernizing NASA’s Space Flight Safety and Mission Success (S&MS) Assurance Framework In Line With Evolving Acquisition Strategies and Systems Engineering Practices

This paper presents the objectives-driven, case-based safety and mission success (S&MS) assurance framework being developed by the NASA Office of Safety and Mission Assurance (OSMA), including its motivations and its implementation via a S&MS Assurance Standard that is under development, supplemented by supporting standards including an S&MS Analysis Management Standard that is also under development. A need to evolve NASA’s S&MS assurance framework has emerged in recent years, resulting from the need to accommodate new acquisition models; the need to accommodate evolving systems engineering (SE) practices; the need to stipulate acceptable levels of S&MS risk; the need for improved integration of S&MS into SE; and the need for clearer risk acceptance accountability. The objectives-driven, case-based S&MS assurance framework proposed here is responsive to that need. Its key features include: • The establishment, by NASA Acquirers, of fundamental S&MS performance objectives that define limits of acceptability for the likelihoods that mission technical objectives will be accomplished and that people, assets, and environments put at risk by the mission will not be adversely affected; • The development and approval of Providers’ S&MS plans for meeting Acquirers’ S&MS performance objectives, including commitments to support Acquirer audit, investigation, and reporting needs; • The development, by Providers, of S&MS assurance cases that argue, supported by evidence, that the Provider has met, or is on track to meeting, the fundamental S&MS objectives; • The evaluation, throughout the program/project life cycle, of Provider S&MS assurance cases as the primary S&MS-related technical basis for Acquirer risk acceptance and the granting to the Provider of authority to proceed through the program/project life cycle. This proposed S&MS assurance framework is notable for its lack of prescription of traditional S&MS requirements and strategies such as defined failure tolerances, margins, or analysis requirements. Instead, Providers are given latitude to propose their own strategies for meeting the fundamental S&MS performance objectives, subject to independent review and Acquirer approval. The result is a framework for S&MS assurance that is at once both rigorous and flexible.

Assurance Case↗
NASA NTRS2024

NASA Engineering and Safety Center Technical Bulletin No. 24-01: Material Compatibility of Common Aerospace Metals in MMH/MON-3

The NESC evaluated material compatibility of some common aerospace metals in monomethylhydrazine (MMH) and nitrogen tetroxide (MON-3). Previous work had identified a lack of quantitative compatibility data for nickel alloy 718, 300 series stainless steel, and titanium Ti-6Al-4V in MMH and MON-3 to support the use of zero-failure-tolerant, thin-walled pressure barriers in these propellants. Static (i.e., not flowing) general corrosion and electrochemistry testing was conducted, evaluating varied processing forms and heat treatment of the metals, water content of propellant, and exposure duration. Corrosion-rate data for all tested product forms, fluids, and durations were on the order of 1 x 10 –6 inch per year rather than the previously documented “less than 1 x 10 –3 inch per year”. The majority of the corrosion products were seen in the first 20 days of exposure, with an overall corrosion rate decreasing with time due to the increased divisor (time). It is therefore recommended that corrosion testing be performed at multiple short-term durations to inform the need for longer-duration testing.

Heather K Hickman↗
NASA NTRS1992

Fault-tolerant wait-free shared objects

A concurrent system consists of processes and shared objects. Previous research focused on the problem of tolerating process failure. We study the complementary problem of tolerating failures. We divide object failures into two broad classes: responsive and non-responsive. With responsive failures, a faulty object responds to every invocation, but responses may be incorrect. With non-responsive failures, a faulty object may also 'hang' without responding. For each class, we consider crash, and arbitrary types of failures. For each type of failure, we are seeking a universal implementation for fault-tolerant wait-free shared objects. We present (deterministic) implementations for all types of responsive failures, including arbitrary failures. In contrast, we show that even the most benign type of non-responsive failures requires the use of randomization. Of special interest is the problem of implementing fault-tolerant objects using only objects of the same type. We present such fault-tolerant self-implementations for many common object types. Graceful degradation is a desirable property of fault-tolerant implementations: the implemented object never fails more severely than the base objects it is derived from, even if all the base objects fail. For several failure models, we show whether this property can be achieved, and, if so, how. In addition to the above possibility/impossibility results, we also consider the resources complexity of fault-tolerant implementations. In many cases, we present lower bounds and give matching algorithms.

Jayanti, Prasad↗
DOE OSTI2022

Tolerating memory stack failures in multi-stack systems

Memory management circuitry and processes operate to improve reliability of a group of memory stacks, providing that if a memory stack or a portion thereof fails during the product's lifetime, the system may still recover with no errors or data loss. A front-end controller receives a block of data requested to be written to memory, divides the block into sub-blocks, and creates a new redundant reliability sub-block. The sub-blocks are then written to different memory stacks. When reading data from the memory stacks, the front-end controller detects errors indicating a failure within one of the memory stacks, and recovers corrected data using the reliability sub-block. The front-end controller may monitor errors for signs of a stack failure and disable the failed stack.

Mappouras, Georgios↗
NASA NTRS1989

Implementing fault-tolerant sensors

One aspect of fault tolerance in process control programs is the ability to tolerate sensor failure. A methodology is presented for transforming a process control program that cannot tolerate sensor failures to one that can. Additionally, a hierarchy of failure models is identified.

Marzullo, Keith↗
NASA NTRS1982

A fault tolerant approach to state estimation and failure detection in nonlinear systems

The design problem considered in the present investigation involves a nonlinear discrete time stochastic system where replicated sensors provide redundant observations of inputs and outputs of the system, compensate for sensor 'normal operating' bias levels, and generate reliable estimates for the plant states in the presence of possible sensor failures. The resulting fault tolerant design should utilize inherent analytical redundancy and be capable of detecting many different types and levels of sensor failures. In addition, it should have minimal complexity. In connection with these goals, a sensor fault tolerant system design methodology is developed. The performance of the considered approach to an application is discussed, taking into account the design of a sensor fault tolerant system using analytic redundancy for the Terminal Configured Vehicle research aircraft in a microwave landing system environment.

Lancraft, R. E.↗
NASA NTRS2006

Closed-Loop Evaluation of an Integrated Failure Identification and Fault Tolerant Control System for a Transport Aircraft

Formal robustness analysis of aircraft control upset prevention and recovery systems could play an important role in their validation and ultimate certification. Such systems developed for failure detection, identification, and reconfiguration, as well as upset recovery, need to be evaluated over broad regions of the flight envelope or under extreme flight conditions, and should include various sources of uncertainty. To apply formal robustness analysis, formulation of linear fractional transformation (LFT) models of complex parameter-dependent systems is required, which represent system uncertainty due to parameter uncertainty and actuator faults. This paper describes a detailed LFT model formulation procedure from the nonlinear model of a transport aircraft by using a preliminary LFT modeling software tool developed at the NASA Langley Research Center, which utilizes a matrix-based computational approach. The closed-loop system is evaluated over the entire flight envelope based on the generated LFT model which can cover nonlinear dynamics. The robustness analysis results of the closed-loop fault tolerant control system of a transport aircraft are presented. A reliable flight envelope (safe flight regime) is also calculated from the robust performance analysis results, over which the closed-loop system can achieve the desired performance of command tracking and failure detection.

Shin, Jong-Yeob↗
DOE OSTI2020

Degradation and Failure Phenomena of Accident Tolerant Fuel Concepts: FeCrAl Alloy Cladding

The U.S. Nuclear Regulatory Commission (NRC) is anticipating licensing applications and commercial use of accident tolerant fuel (ATF) in United States commercial nuclear power reactors. Pacific Northwest National Laboratory is providing technical assistance to the NRC related to the newly proposed nuclear fuel and cladding designs. This report focuses specifically on the iron-chromium-aluminum (FeCrAl) alloys being investigated to replace zirconium-based alloys for fuel cladding and provides current state-of-the-industry information on material properties and fuel performance considerations under reactor operating conditions and design basis accident conditions. Currently, Global Nuclear Fuels (GNF) is the only U.S.-based fuel vendor considering FeCrAl cladding as a near-term ATF design. GNF has tested several different FeCrAl alloys including Kanthal APMT, C26M, and MA956; fueled C26M rods and unfueled Kanthal APMT, C26M, and MA956 rods have been inserted in lead test assemblies at Plants Hatch and Clinton. This report will focus on those three alloys specifically, with broader information given regarding in-reactor and ex-reactor testing of FeCrAl alloys. To support the NRC’s readiness efforts, this report will identify and discuss degradation and failure modes of FeCrAl cladding concepts, including fuel performance characteristics that may not be addressed within existing regulatory documents.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
NASA NTRS1985

Reliability bounds for fault-tolerant systems with competing responses to component failures

Bounds are established on the probability of system failure for fault-tolerant systems of the type used, for example, in aviation control. Event series leading to system failure are assumed to follow a semi-Markov model in which the potential sojourn times associated with component failures have exponential distributions and those associated with system responses have distributions with unspecified form. A product form of the bounds is derived by using a model that provides for multiple competing system responses to component failures.

Lee, L. D.↗
NASA NTRS1986

Reliability bounds for fault-tolerant systems with competing responses to component failures

Bounds are established on the probability of system failure for fault-tolerant systems of the type used, for example, in aviation control. Event series leading to system failure are assumed to follow a semi-Markov model in which the potential sojourn times associated with component failures have exponential distributions and those associated with system responses have distributions with unspecified form. A product form of the bounds is derived by using a model that provides for multiple competing system responses to component failures.

Lee, L. D.↗
NASA NTRS1984

Fault-tolerant system considerations for a redundant strapdown inertial measurement unit

The development and evaluation of a fault-tolerant system for the Redundant Strapdown Inertial Measurement Unit (RSDIMU) being developed and evaluated by the NASA Langley Research Center was continued. The RSDIMU consists of four two-degree-of-freedom gyros and accelerometers mounted on the faces of a semi-octahedron which can be separated into two halves for damage protection. Compensated and uncompensated fault-tolerant system failure decision algorithms were compared. An algorithm to compensate for sensor noise effects in the fault-tolerant system thresholds was evaluated via simulation. The effects of sensor location and magnitude of the vehicle structural modes on system performance were assessed. A threshold generation algorithm, which incorporates noise compensation and filtered parity equation residuals for structural mode compensation, was evaluated. The effects of the fault-tolerant system on navigational accuracy were also considered. A sensor error parametric study was performed in an attempt to improve the soft failure detection capability without obtaining false alarms. Also examined was an FDI system strategy based on the pairwise comparison of sensor measurements. This strategy has the specific advantage of, in many instances, successfully detecting and isolating up to two simultaneously occurring failures.

Motyka, P.↗
NASA NTRS2018

Adaptive Control Allocation for Powered Descent Vehicles

The following work details a study into real-time failure adaptive control allocation method for powered descent vehicle systems. The motivation for this work is to enable future human and robotic missions utilizing a powered descent system to tolerate engine failures in flight without the loss of crew or assets. This study is conducted using a six degree-of-freedom trajectory simulation of a PDV (Powered Descent Vehicle) experiencing either a loss of thrust or an engine stuck full on failure scenario. Sequential least squares in the frequency domain is used on-board to process inertial measurement unit (IMU) data and generate an estimate of the PDV plant model, which is then fed to the guidance and control system. Data used by the sequential least squares method is generated from an in-flight maneuver. The work herein focuses on determining a maneuver that is least impactful to the PDV trajectory and enables a suitable plant model estimate. A 1.5-second-long maneuver with an amplitude of 5 percent throttle is determined to provide suitable data for the sequential least squares method to estimate a plant model. A PDV implementing this method can adapt to a single engine failure and continue to reach its touchdown conditions.

Green, Justin S.↗
NASA NTRS1990

Masking failures of multidimensional sensors (extended abstract)

When a computer monitors a physical process, the computer uses sensors to determine the values of the physical variables that represent the state of the process. A sensor can sometimes fail, however, and in the worst case report a value completely unrelated to the true physical value. The work described is motivated by a methodology for transforming a process control program that can not tolerate sensor failure into one that can. In this methodology, a reliable abstract sensor is created by combining information from several real sensors that measure the same physical value. To be useful, an abstract sensor must deliver reasonably accurate information at reasonable computational cost. Sensors are considered that deliver multidimensional values (e.g., location or velocity in three dimensions, or both temperature and pressure). Geometric techniques are used to derive upper bounds on abstract sensor accuracy and to develop efficient algorithms for implementing abstract sensors.

Chew, Paul↗
DOE OSTI2023

A Hot‐Swappable, Fault‐Tolerant, Modular Power Converter System for Solar Photovoltaic Plants

The performance metrics of the state-of-the-art commercial solar inverters, such as system cost, operation and maintenance (O&M) cost, service life, reliability, maintainability, and power density are much lower than the target metrics needed to achieve SunShot’s 2030 levelized cost of energy (LCOE) goals. To overcome the shortcomings of the existing solar inverters, this project proposed a novel Hot-Swappable, Fault-Tolerant, Modular Power Converter (HSFT-MPC) concept for solar photovoltaic (PV) plants and proved the concept through the design, fabrication, and laboratory test validation of a single-phase HSFT-MPC prototype. The HSFT-MPC has the following distinct advantages over the state-of-the-art: 1) elimination of harmonic/ electromagnetic interference (EMI) filter in the inverter stage due to the novel topology, 2) lower system cost and higher power density due to the modular design, elimination of harmonic/EMI filter, and lower cooling requirement, 3) higher efficiency due to lower switching frequencies, 4) higher reliability and longer (50 years) service life due to simpler cooling and fault tolerance capability, 5) easier installation, lower O&M cost, and improved maintainability due to the modular design and hot-swappable power electronic building blocks (PEBBs), and 6) improved manufacturability due to the modular design. This project developed a single-phase HSFT-MPC prototype with 25kW nominal output power, 2.4kV, 60Hz nominal AC output, lower than 5% AC output voltage total harmonic distortion, over 5 kW/L inverter power density, and 99.4% inverter peak efficiency, being tolerant to failure of single and multiple PEBBs, and capable of hot swapping of the failed PEBB(s). The HSFT-MPC enables uninterruptable operation of the solar PV plant when failure of single or multiple PEBBs or PV modules occurs. Compared with the existing solar inverters in the market, the HSFT-MPC is expected to reduce the inverter failure-caused downtime and energy losses of solar PV plants by more than 60% and 50%, respectively. Project findings have been presented at major conferences in the field and published in peer-reviewed papers, which added new knowledge to the field of power electronics for solar PV systems. A minicourse on Solar PV Systems was developed for outreach activities. The minicourse will help attract young individuals to the renewable energy profession which has a significant talent shortage. The HSFT-MPC is expected to overcome all of the shortcomings of the state-of-the-art solar inverters in terms of cost, efficiency, service life, reliability, maintainability, and manufacturability targets needed to achieve SunShot’s 2030 LCOE goals. Therefore, the proposed HSFT-MPC concept has the great potential to disrupt the current solar inverter market. This project created a pathway towards industry adoption of the HSFT-MPC to help achieve 50-year service life solar PV systems. Since the solar PV plants using the HSFT-MPC will feature with higher reliability, longer service life, and easier maintenance, they are particularly useful for the rural areas with underserved populations that demand reliable and affordable clean electricity. The outcomes of the project have the strong potential to address national needs in the field of renewable energy to reduce CO 2 emissions from the electricity sector, reduce imports of energy from foreign sources, and improve energy security, efficiency, and sustainability. Since electricity is used in almost all of society’s sectors, the outcomes of the project will benefit various sectors of society and economy.

14 SOLAR ENERGY↗