Search NASA⌕ Search

SEARCH · Search NASA

Results for “Fault Termination”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 73 records · Page 4
All sourcesNASA NTRSDOE OSTI
NASA NTRS1993

Destination-directed, packet-switched architecture for a geostationary communications satellite network

A major goal of the Digital Systems Technology Branch at the NASA Lewis Research Center is to identify and develop critical digital components and technologies that either enable new commercial missions or significantly enhance the performance, cost efficiency, and/or reliability of existing and planned space communications systems. NASA envisions a need for low-data-rate, interactive, direct-to-the-user communications services for data, voice, facsimile, and video conferencing. The network would provide enhanced very-small-aperture terminal (VSAT) communications services and be capable of handling data rates of 64 kbps through 2.048 Mbps in 64-kbps increments. Efforts have concentrated heavily on the space segment; however, the ground segment has been considered concurrently to ensure cost efficiency and realistic operational constraints. The focus of current space segment developments is a flexible, high-throughput, fault-tolerant onboard information-switching processor (ISP) for a geostationary satellite communications network. The Digital Systems Technology Branch is investigating both circuit and packet architectures for the ISP. Destination-directed, packet-switched architectures for geostationary communications satellites are addressed.

Ivancic, William D.↗
NASA NTRS1988

MOORE: A prototype expert system for diagnosing spacecraft problems

MOORE is a rule-based, prototype expert system that assists in diagnosing operational Tracking and Data Relay Satellite (TDRS) problems. It is intended to assist spacecraft engineers at the TDRS ground terminal in trouble shooting problems that are not readily solved with routine procedures, and without expert counsel. An additional goal of the prototype system is to develop in-house expert system and knowledge engineering skills. The prototype system diagnoses antenna pointing and earth pointing problems that may occur within the TDRS Attitude Control System (ACS). Plans include expansion to fault isolation of problems in the most critical subsystems of the TDRS spacecraft. Long term benefits are anticipated with use of an expert system during future TDRS programs with increased mission support time, reduced problem solving time, and retained expert knowledge and experience. Phase 2 of the project is intended to provide NASA the necessary expertise and capability to define requirements, evaluate proposals, and monitor the development progress of a highly competent expert system for NASA's Tracking Data Relay Satellite. Phase 2 also envisions addressing two unexplored applications for expert systems, spacecraft integration and tests (I and T) and support to launch activities. The concept, goals, domain, tools, knowledge acquisition, developmental approach, and design of the expert system. It will explain how NASA obtained the knowledge and capability to develop the system in-house without assistance from outside consultants. Future plans will also be presented.

Howlin, Katherine↗
NASA NTRS1999

Design Description of the X-33 Avionics Architecture

In this paper, we provide a design description of the X-33 avionics architecture. The X-33 is an autonomous Single Stage to Orbit (SSTO) launch vehicle currently being developed by Lockheed Martin for NASA as a technology demonstrator for the VentureStar Reusable Launch Vehicle (RLV). The X-33 avionics provides autonomous control of die vehicle throughout takeoff, ascent, descent, approach, landing, rollout, and vehicle safing. During flight the avionics provides communication to the range through uplinked commands and downlinked telemetry. During pre-launch and post-safing activities, the avionics provides interfaces to ground support consoles that perform vehicle flight preparations and maintenance. The X-33 Avionics is a hybrid of centralized and distributed processing elements connected by three dual redundant Mil-Std 1553 data buses. These data buses are controlled by a central processing suite located in the avionics bay and composed of triplex redundant Vehicle Mission Computers (VMCs). The VMCs integrate mission management, guidance, navigation, flight control, subsystem control and redundancy management functions. The vehicle sensors, effectors and subsystems are interfaced directly to the centralized VMCs as remote terminals or through dual redundant Data Interface Units (DIUs). The DIUs are located forward and aft of the avionics bay and provide signal conditioning, health monitoring, low level subsystem control and data interface functions. Each VMC is connected to all three redundant 1553 data buses for monitoring and provides a complete identical data set to the processing algorithms. This enables bus faults to be detected and reconfigured through a voted bus control configuration. Data is also shared between VMCs though a cross channel data link that is implemented in hardware and controlled by AlliedSignal's Fault Tolerant Executive (FTE). The FTE synchronizes processors within the VMC and synchronizes redundant VMCs to each other. The FTE provides an output-voting plane to detect, isolate and contain faults due to internal hardware or software faults and reconfigures the VMCs to accommodate these faults. Critical data in the 1553 messages are scheduled and synchronized to specific processing frames in order to minimize data latency. In order to achieve an open architecture, military and commercial off-the-shelf equipment is incorporated using common processors, standard VME backplanes and chassis, the VxWorks operating system, and MartixX for automatic code generation. The use of off-the-shelf tools and equipment helps reduce development time and enables software reuse. The open architecture allows for technology insertion, while the distributed modular elements allow for expansion to increased redundancy levels to meet the higher reliability goals of future RLVs.

Reichenfeld, Curtis J.↗
NASA NTRS2015

AMO EXPRESS: A Command and Control Experiment for Crew Autonomy Onboard the International Space Station

NASA is investigating a range of future human spaceflight missions, including both Mars-distance and Near Earth Object (NEO) targets. Of significant importance for these missions is the balance between crew autonomy and vehicle automation. As distance from Earth results in increasing communication delays, future crews need both the capability and authority to independently make decisions. However, small crews cannot take on all functions performed by ground today, and so vehicles must be more automated to reduce the crew workload for such missions. NASA's Advanced Exploration Systems Program funded Autonomous Mission Operations (AMO) project conducted an autonomous command and control experiment on-board the International Space Station that demonstrated single action intelligent procedures for crew command and control. The target problem was to enable crew initialization of a facility class rack with power and thermal interfaces, and involving core and payload command and telemetry processing, without support from ground controllers. This autonomous operations capability is enabling in scenarios such as initialization of a medical facility to respond to a crew medical emergency, and representative of other spacecraft autonomy challenges. The experiment was conducted using the Expedite the Processing of Experiments for Space Station (EXPRESS) rack 7, which was located in the Port 2 location within the U.S Laboratory onboard the International Space Station (ISS). Activation and deactivation of this facility is time consuming and operationally intensive, requiring coordination of three flight control positions, 47 nominal steps, 57 commands, 276 telemetry checks, and coordination of multiple ISS systems (both core and payload). Utilization of Draper Laboratory's Timeliner software, deployed on-board the ISS within the Command and Control (C&C) computers and the Payload computers, allowed development of the automated procedures specific to ISS without having to certify and employ novel software for procedure development and execution. The procedures contained the ground procedure logic and actions as possible to include fault detection and recovery capabilities. The autonomous operations concept includes a reduction of the amount of data a crew operator is required to verify during activation or de-activation, as well as integration of procedure execution status and relevant data in a single integrated display. During execution, the auto-procedures (via Timerliner) provide a step-by-step messaging paradigm and a high-level status upon termination. This messaging and high-level status is the only data generated for operator display. To enhance situational awareness of the operator, the Web-based Procedure Display (WebPD) provides a novel approach to the issues of procedure display and execution tracking. WebPD is a web based application that serves as the user interface for electronic procedure execution. It incorporates several aspects of the HTML5 standard. Procedures are written in a dialect of XML called Procedure Representation Language (PRL). WebPD tracks execution status in the procedure or procedures being displayed. WebPD aggregates and simplifies the auto-sequence execution status information, and formatted to be easily followed and understood by an operator who is not dedicated to actively monitoring the task. WebPD also provides an integrated data and control interface to pause or halt the execution in order to provide a check point of operation and to examine progress before starting the next sequence of activities. For this demonstration, the procedure was initiated and monitored from the ground. As the Timeliner sequences executed, their high-level execution status was written to PLMDM memory. This memory is read and downlinked via Ku-Band at a 1 Hz rate. The data containing the high-level execution status is de-commutated on the ground, and rebroadcast for WebPD consumption. A future demonstration will be performed onboard, with ISS astronauts initiating the operations instead of ground controllers. The AMO EXPRESS experiment demonstrated activation and de-activation of EXPRESS rack 7, providing the capability of future single button activations and deactivations of facility class racks. The experiment achieved numerous technical and operations 'firsts' for the ISS

Stetson, Howard K.↗
NASA NTRS1977

Study of a close-grid geodynamic measurement system

The Clogeos (Close-Grid Geodynamic Measurement System) concept, a complete range or range-rate measurement terminal installed in a satellite in a near-polar orbit with a network of relatively simple transponders or retro-reflectors on the ground at intervals of 0.1 to 10 km was reviewed. The distortion of the grid was measured in three dimensions to accuracies of + or - 1 cm with important applications to geodynamics, glaciology, and geodesy. User requirements are considered, and a typical grid, designed for earthquake prediction, was laid out along the San Andreas, Hayward, and Calaceras faults in southern California. The sensitivity of both range and range-rate measurements to small grid motions was determined by a simplified model. Variables in the model are satellite altitude and elevation angle plus grid displacements in latitude, and height.

Source record↗
NASA NTRS1982

An application of distributed processing - In the TDRSS ground communication fault isolation and monitoring system

A computer interface has been designed for the Fault Isolation and Monitoring System, a system providing qualitative and quantitative assessment of the communications between the Tracking and Data Relay Satellite System Ground Segment and NASA's Network Control Center. The functional requirements for the interface and the design philosophy are discussed, as are the methods and protocol used to implement the operator support software required to configure the monitoring system and to display and report the results of the analysis. The system relies on the use of intelligent terminals, with the human interface removed from the host computer.

Waddell, R. L., Jr.↗
NASA NTRS1987

Scheduling periodic jobs using imprecise results

One approach to avoid timing faults in hard, real-time systems is to make available intermediate, imprecise results produced by real-time processes. When a result of the desired quality cannot be produced in time, an imprecise result of acceptable quality produced before the deadline can be used. The problem of scheduling periodic jobs to meet deadlines on a system that provides the necessary programming language primitives and run-time support for processes to return imprecise results is discussed. Since the scheduler may choose to terminate a task before it is completed, causing it to produce an acceptable but imprecise result, the amount of processor time assigned to any task in a valid schedule can be less than the amount of time required to complete the task. A meaningful formulation of the scheduling problem must take into account the overall quality of the results. Depending on the different types of undesirable effects caused by errors, jobs are classified as type N or type C. For type N jobs, the effects of errors in results produced in different periods are not cumulative. A reasonable performance measure is the average error over all jobs. Three heuristic algorithms that lead to feasible schedules with small average errors are described. For type C jobs, the undesirable effects of errors produced in different periods are cumulative. Schedulability criteria of type C jobs are discussed.

Chung, Jen-Yao↗
NASA NTRS2004

Mangala Valles, Mars: Investigations of the Source of Flood Water and Early Stages of Flooding

Mangala Valles, an approx. 900 km long north-south trending outflow channel located southwest of the Tharsis rise, extends northward from one of the Memnonia Fossae graben across the southern highlands, terminating at the dichotomy boundary. Previous Viking-based analyses suggest that the water that carved the channel was expelled from the graben, possibly during two distinct flood events, one in the Late Hesperian and one in the Latest Hesperian/Early Amazonian. The mechanism by which the water was transported to the graben, and ultimately to the surface remained ambiguous, although two general scenarios were proposed: melting of near surface ground ice via nearby Tharsis lava flows, and tapping of a near surface aquifer via faulting associated with the graben. Here we use MOLA altimetric data and MOC and THEMIS images to reexamine Mangala Valles and the surrounding region. Further, we develop a new model for the production and transport of the floodwater.

Ghatan, Gil J.↗
NASA NTRS1983

Flight test validation of a design procedure for digital autopilots

Commercially available general aviation autopilots are currently in transition from an analogue circuit system to a computer implemented digital flight control system. Well known advantages of the digital autopilot include enhanced modes, self-test capacity, fault detection, and greater computational capacity. A digital autopilot's computational capacity can be used to full advantage by increasing the sophistication of the digital autopilot's chief function, stability and control. NASA's Langley Research Center has been pursuing the development of direct digital design tools for aircraft stabilization systems for several years. This effort has most recently been directed towards the development and realization of multi-mode digital autopilots for GA aircraft, conducted under a SPIFR-related program called the General Aviation Terminal Operations Research (GATOR) Program. This presentation focuses on the implementation and testing of a candidate multi-mode autopilot designed using these newly developed tools.

Bryant, W. H.↗
NASA NTRS2000

Navigation Strategy for the Mars 2001 Lander Mission

The Mars Surveyor Program (MSP) is an ongoing series of missions designed to robotically study, map and search for signs of life on the planet Mars. The MSP 2001 project will advance the effort by sending an orbiter, a lander and a rover to the red planet in the 2001 opportunity. Each vehicle will carry a science payload that will Investigate the Martian environment on both a global and on a local scale. Although this mission will not directly search for signs of life, or cache samples to be returned to Earth, it will demonstrate certain enabling technologies that will be utilized by the future Mars Sample Return missions. One technology that is needed for the Sample Return mission is the capability to place a vehicle on the surface within several kilometers of the targeted landing site. The MSP'01 Lander will take the first major step towards this type of precision landing at Mars. Significant reduction of the landed footprint will be achieved through two technology advances. The first, and most dramatic, is hypersonic aeromaneuvering; the second is improved approach navigation. As a result, the guided entry will produce in a footprint that is only tens of kilometers, which is an order of magnitude improvement over the Pathfinder and Mars Polar Lander ballistic entries. This reduction will significantly enhance scientific return by enabling the potential selection of otherwise unreachable landing sites with unique geologic interest and public appeal. A landed footprint reduction from hundreds to tens of kilometers is also a milestone on the path towards human exploration of Mars, where the desire is to place multiple vehicles within several hundred meters of the planned landing site. Hypersonic aeromaneuvering is an extension of the atmospheric flight goals of the previous landed missions, Pathfinder and Mars Polar Lander (MPL), that utilizes aerodynamic lift and an autonomous guidance algorithm while in the upper atmosphere. The onboard guidance algorithm will control the direction of the lift vector, via bank angle modulation, to keep the vehicle on the desired trajectory. While numerous autonomous guidance algorithms have been developed for use during hypersonic flight at Earth, this will be the first flight of an autonomously directed lifting entry vehicle at Mars. However, without sufficient control and knowledge of the atmospheric entry conditions, the guidance algorithm will not perform effectively. The goal of the interplanetary navigation strategy is to deliver the spacecraft to the desired entry condition with sufficient accuracy and knowledge to enable satisfactory guidance algorithm performance. Specifically, the entry flight path angle must not exceed 0.27 deg. to a 3 sigma confidence level. Entry errors will contribute directly to the size of the landed footprint and the most significant component is entry flight path angle. The size of the entry corridor is limited on the shallow side by integrated heating constraints, and on the steep side by deceleration (g-load) and terminal descent propellant. In order to meet this tight constraint it is necessary to place a targeting maneuver seven hours prior to the time of entry. At this time the trajectory knowledge will be quite accurate, and the effects of maneuver execution errors will be small. The drawback is that entry accuracy is dependent on the success of this final late maneuver. Because propulsive maneuvers are critical events, it is desirable to minimize their occurrence and provide the flight team with as much response time as possible in the event of a spacecraft fault. A mission critical maneuver at Entry - 7 hours does not provide much fault tolerance, and it is desirable to provide a strategy that minimizes reliance on this maneuver. This paper will focus on the Improvements in interplanetary navigation that will decrease entry errors and will reduce the landed footprint, even in the absence of aeromaneuvering. The easiest to take advantage of are Improvements In the knowledge of the Mars ephemeris and gravity field due to the MGS and MSP'98 missions. Improvements In data collection and reduction techniques such as "precislon ranging' and near-simultaneous tracking will also be utilized. In addition to precise trajectory control, a robust strategy for communications and flight operations must also be demonstrated. The result Is a navigation and communications strategy on approach that utilizes optimal maneuver placement to take advantage of trajectory knowledge, minimizes risk for the flight operations team, is responsive to spacecraft hardware limitations, and achieves the entry corridor. The MSP2001 mission Is managed at JPL under the auspices of the Mars Exploration Directorate. The spacecraft flight elements are built and managed by Lockheed-Martin Astronautics in Denver, Colorado.

Mase, Robert A.↗
NASA NTRS1990

Fault-tolerant, embedded CLIPS applications

The enhancements to CLIPS4.3 presented in this paper provide an embedded CLIPS application with the ability to continue operation with minimal to no loss of information in the event of a hardware or a software failure. Given an arbitrary failure, the CLIPS application's environment (fact-list, agenda, and pattern matching network) will be reconstructed to the point at which the failure was experienced. The environment reconstruction is based on state files to which the application periodically checks environment information (fact-list and agenda). The routine for checkpointing the state of the application is as efficient as possible so that the overhead introduced to normal execution of the application is minimal. The only assumptions made by the CLIPS application are that it is running under an operating system that guarantees it access to uncorrupt state files and that the application will be automatically restarted should it terminate abnormally.

Hicks, Jaye↗
NASA NTRS1975

Flight experience with time-of-arrival control for STOL aircraft in the terminal area

A research program on STOL operating systems is underway at the Ames Research Center. One investigation is concerned with design, analysis, and flight test of promising four-dimensional RNAV systems. One promising system generates a capture flight path from the present aircraft position to a waypoint on a selected fixed STOL approach route. It predicts arrival time at the runway and controls time and position along the path. The system was flight tested using a digital avionics system on a Convair 340 and on an experimental powered-lift STOL airplane. Flight tests in the flight director mode show that the pilot can choose and change the desired time of arrival, and meet this time within a few seconds, in spite of navigation errors and varying winds. Initial tests of the automatic mode using a flight simulator and the NASA Augmentor Wing Jet STOL Research Aircraft (AWJSRA) show that good time control was achieved at the cost of excess throttle activity. This fault was later corrected.

Neuman, F.↗
NASA NTRS2002

Impact Cratering Calculations

Many Martian craters are surrounded by ejecta blankets which appear to have been fluidized forming lobate and layered deposits terminated by one or more continuous distal scarps, or ramparts. One of the first hypotheses for the formation of so-called rampart ejecta features was shock-melting of subsurface ice, entrainment of liquid water into the ejecta blanket, and subsequent fluidized flow. Our work quantifies this concept. Rampart ejecta found on all but the youngest volcanic and polar regions, and the different rampart ejecta morphologies are correlated with crater size and terrain. In addition, the minimum diameter of craters with rampart features decreases with increasing latitude indicating that ice laden crust resides closer to the surface as one goes poleward on Mars. Our second goal in was to determine what strength model(s) reproduce the faults and complex features found in large scale gravity driven craters. Collapse features found in large scale craters require that the rock strength weaken as a result of the shock processing of rock and the later cratering shear flows. In addition to the presence of molten silicate in the intensely shocked region, the presence of water, either ambient, or the result of shock melting of ice weakens rock. There are several other mechanisms for the reduction of strength in geologic materials including dynamic tensile and shear induced fracturing. Fracturing is a mechanism for large reductions in strength. We found that by incorporating damage into the models that we could in a single integrated impact calculation, starting in the atmosphere produce final crater profiles having the major features found in the field measurements (central uplifts, inner ring, terracing and faulting). This was accomplished with undamaged surface strengths (0.1 GPa) and in depth strengths (1.0 GPa).

Ahrens, Thomas J.↗
NASA NTRS1983

On Why It Is Impossible to Prove that the BDX90 Dispatcher Implements a Time-sharing System

The Software Implemented Fault Tolerance SIFT system, is written in PASCAL except for about a page of machine code. The SIFT system implements a small time sharing system in which PASCAL programs for separate application tasks are executed according to a schedule with real time constraints. The PASCAL language has no provision for handling the notion of an interrupt such as the B930 clock interrupt. The PASCAL language also lacks the notion of running a PASCAL subroutine for a given amount of time, suspending it, saving away the suspension, and later activating the suspension. Machine code was used to overcome these inadequacies of PASCAL. Code which handles clock interrupts and suspends processes is called a dispatcher. The time sharing/virtual machine idea is completely destroyed by the reconfiguration task. After termination of the reconfiguration task, the tasks run by the dispatcher have no relation to those run before reconfiguration. It is impossible to view the dispatcher as a time-sharing system implementing virtual BDX930s running concurrently when one process can wipe out the others.

Boyer, R. S.↗
NASA NTRS2018

Modeling In-Space Aborts for NASA Human Exploration Missions

NASA is developing new capabilities to send humans beyond low Earth orbit (LEO) for the first time in several decades with the new Multi-purpose Crew Vehicle (MPCV) Orion spacecraft and Space Launch System (SLS) launch vehicle. As part of these capabilities, NASA is developing means to terminate missions prior to reaching mission destinations in order to save the crew in the event of critical life-threatening failures. This abort capability exists for both ascent and in-space operations. While the risk associated with ascent aborts has been modeled in detail, less has been done in the area of in-space aborts (e.g. Apollo 13). Recent efforts have started to better assess the risk associated with in-space aborts. This paper will describe these efforts. The in-space abort model described in this paper is part of a larger Cross-Program PRA (XPRA) model of exploration missions planned in the next few years to the vicinity of the Moon. The model consists of linked event trees and fault trees and associated rules built using the Systems Analysis Program for Hands-On Integrated Reliability Evaluations (SAPHIRE) tool. This model structure is being built with flexibility in mind in order to perform risk trades and further expansion of the model.

Bigler, Mark A.↗
NASA NTRS2010

COMPASS Final Report: Lunar Communications Terminal (LCT)

The Lunar Communications Terminal (LCT) COllaborative Modeling and Parametric Assessment of Space Systems (COMPASS) session designed a terminal to provide communications between lunar South Pole assets, communications relay to/from these assets through an orbiting Lunar Relay Satellite (LRS) and navigation support. The design included a complete master equipment list, power requirement list, configuration design, and brief risk assessment and cost analysis. The Terminal consists of a pallet containing the communications and avionics equipment, surrounded by the thermal control system (radiator), an attached, deployable 10-m tower, upon which were mounted locally broadcasting and receiving modems and a deployable 1 m diameter Ka/S band dish which provides relay communications with the lunar relay satellites and, as a backup, Earth when it is in view. All power was assumed to come from the lunar outpost Habitat. Three LCT design options were explored: a stand-alone LCT servicing the manned outpost, an integrated LCT (into the Habitat or Lunar Lander), and a mini-LCT which provides a reduced level of communication for primarily robotic areas dealing as in situ resource utilization (ISRU) and remote science. Where possible all the designs assumed single fault tolerance. Significant mass savings were found when integrating the LCT into the Habitat or Lander but increases in costs occurred depending upon the level of man rating required for such designs.

Oleson, Steven R.↗
NASA NTRS1994

Spatial and temporal relations between coronae and extensional belts, northern Lada Terra, Venus

Preliminary studies of the distribution of coronae and volcanic rises on Venus show that many of these features tend to cluster along zones of rifting and extension. The plains north of Lada Terra are crossed by two such extensional belts. Each belt is composed of grabens, ridges, faults, volcanic flows, coronae and coronalike features. The longer and more prominent belt is the NW trending Alpha-Lada extensional belt, which is over 6000 km long and 50-200 km wide, and includes the coronae Eve, Tamfana, Carpo, Selu, Derceto, Otygen, and an unnamed corona south of Otygen. The second belt is the NNE trending Derceto-Quetzalpetlatl extensional belt, which is about 2000 km long and in places over 300 km wide, and includes the coronae Sarpanitum, Eithinoha, and Quetzalpetlatl. The two belts intersect at the 1600 x 600 km wide Derceto volcanic plateau. It is apparent that deformation along the two belts overlapped in time, though deformation along the Alpha-Lada extensional belt probably continued after the deformation along the Derceto-Quetzalpetlatl extensional belt terminated. In certain areas, volcanism originated in grabens within the extensional belts, whereas in other areas, such as in Eve, Selu, Derceto, and Quetzalpetlatl, volcanism originated in the coronae and flowed into the lower parts of the extensional belts. Regional extension has affected the evolution of all the coronae at some stage of their development. Regional deformation occurred before the initiation of Derceto and Eithinoha of their development. Regional deformation occurred before the initiation of Derceto and Eithinoha and after the initiation of Carpo, Tamfana, Otygen, and Sarpanitum. It is thus unlikely that coronae formation along the belts is solely a consequence of the regional extension, and it is also unlikely that regional extension has been caused solely by the coronae. No corona along the belts was formed subsequent to the cessation of the regional extension. We therefore suggest that the regional extension and the coronae are interrelated. Some of the coronae may have determined the location of the surface expression of the regional extension, whereas the locations of other coronae may have been influenced by the concentration of regional extensional stresses.

Baer, Gidon↗
NASA NTRS2024

Considerations for Using Autonomous Flight Termination Software in Crewed Launch Vehicles

Autonomous flight termination systems (AFTS) are being progressively employed onboard launch vehicles to replace ground personnel and infrastructure needed to terminate flight or destruct the vehicle should an anomaly occur. This automation uses on-board real-time data and encoded logic to determine if the flight should be self-terminated. For uncrewed launch vehicles, FTS systems are required to protect the public and governed by the United States Space Force (USSF). For crewed missions, NASA must augment range AFTS requirements for crew safety and certify each flight according to human rating standards, thus adding unique requirements for reuse of software originally intended for uncrewed missions. This bulletin summarizes new information relating to AFTS to raise awareness of key distinctions, summarize considerations and outline best practices for incorporating AFTS into human-rated systems.

Avionics↗