Search NASA⌕ Search

SEARCH · Search NASA

Results for “fail operational”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 73 records · Page 4
All sourcesNASA NTRSDOE OSTI
NASA NTRS2020

Evolution of the Preliminary Fault Management Architecture and Design for the Psyche Mission

The Psyche Mission presents the first opportunity toexplore the largest metal asteroid in the solar system, (16)Psyche, which is believed to be the exposed core of a largerplanetesimal that was stripped of its rocky mantle throughmultiple collisions during early solar system formation. Themission was selected in January 2017 for a 2022 launch as partof NASA’s Discovery Program and is uniquely enabled by theintegration of a Solar Electric Propulsion (SEP) Chassisdelivered by Maxar Space Solutions with JPL’s core deepspace avionics, flight software, and fault managementarchitectures. One of the key design tasks is the development ofa fault management system capable of being responsive to theunique elements of the combined JPL and Maxar spacecraftarchitecture. This new design leverages the strengths of eachorganization, with Maxar delivering its well-proven highvoltage power bus and low-thrust electric propulsionsubsystem from its GEO communications satellite product line,and JPL delivering its deep space mission expertise and thehardware and software most critical to deep space missiondesign. The development of a robust low-thrust mission andthe integration of design philosophies and hardware from twoorganizations is not without its challenges though.A key challenge in the development of the Psyche faultmanagement architecture and design is in the integration ofdesign philosophies and hardware from JPL and Maxar. Atthe architecture level, Maxar GEO communications satellitesare developed under the premise of highly responsive groundin the loop for the resolution of anomalies, and theimplementation takes a fail-operational approach to minimizedown time for its customers. In contrast, a deep space missionmust be able to maintain safety with long periods of groundcommunication outage. Additionally, with no time-criticalevents after launch, the Psyche spacecraft will generally failsafe in the presence of anomalous conditions; specialconsideration is being given to this approach, however, tominimize the loss of electric propulsion thrust time, which iscritical to low-thrust missions. At the hardware level, thedetailed definition of interfaces between JPL and Maxarhardware presents a unique challenge in the development andflowdown of fault management requirements, the developmentand implementation of fault monitors and responses, and thedevelopment and verification of fault containment boundaries.This paper describes the evolution of the Psyche faultmanagement architecture and design from the concept studyinto the preliminary design phase, with a focus on the uniquechallenges associated with flying GEO communicationssatellite hardware in deep space, implementing a robust lowthrust mission, and the integration of design philosophies andhardware from JPL and Maxar. Details regarding how thesechallenges are addressed in the fault management design inorder to maximize heritage, leverage the strengths of eachorganization, and minimize risk across the design are alsodiscussed.

Marsh, Danielle↗
NASA NTRS1980

Potential problems relative to TDRS/IUS tilt table elevation with failed VRCS

Operational concerns and preliminary solution alternatives related to elevating the inertial upper stage/tracking and data relay satellite (IUS/TDRS) with a failed orbiter vernier reaction control system (VRCS) are presented. Problems arise from the combination of TDRS thermal constraints and tilt table constraints (the primary reaction control system (PRCS) cannot be used to hold attitude while the tilt table is being elevated), and the problems are compounded by the minimum PRCS attitude deadband. The potential solution options are affected by the launch window, flight profile, crew procedures, vehicle capability and constraints, and flight rules.

Bell, J.↗
NASA NTRS2004

Improved Electromagnetic Brake

A proposed design for an electromagnetic brake would increase the reliability while reducing the number of parts and the weight, relative to a prior commercially available electromagnetic brake. The reductions of weight and the number of parts could also lead to a reduction of cost. A description of the commercial brake is prerequisite to a description of the proposed electromagnetic brake. The commercial brake (see upper part of figure) includes (1) a permanent magnet and an electromagnet coil on a stator and (2) a rotor that includes a steel contact plate mounted, with tension spring loading, on an aluminum hub. The stator is mounted securely on a stationary object, which would ordinarily be the housing of a gear drive or a motor. The rotor is mounted on the shaft of the gear drive or motor. The commercial brake nominally operates in a fail-safe (in the sense of normally braking) mode: In the absence of current in the electromagnet coil, the permanent magnet pulls the contact plate, against the spring tension, into contact with the stator. To release the brake, one excites the electromagnet with a current of the magnitude and polarity chosen to cancel the magnetic flux of the permanent magnet, thereby enabling the spring tension to pull the contact plate out of contact with the stator. The fail-safe operation of the commercial brake depends on careful mounting of the rotor in relation to the stator. The rotor/stator gap must be set with a tolerance between 10 and 15 mils (between about 0.25 and about 0.38 mm). If the gap or the contact pad is thicker than the maximum allowable value, then the permanent magnetic field will not be strong enough to pull the steel plate across the gap. (For this reason, any contact pad between the contact plate and the stator must also be correspondingly thin.) If the gap exceeds the maximum allowable value because of shaft end play, it becomes impossible to set the brake by turning off the electromagnet current. Although it may still be possible to set the brake by applying an electromagnet current to aid the permanent magnetic field instead of canceling it, this action can mask an out-of-tolerance condition in the brake and it does not restore the fail-safe function of setting the brake when current is lost.

Martin, Toby B.↗
NASA NTRS1996

Performance of a spacecraft DC-DC converter breadboard modified for low temperature operation

A 1OW 3OV/5.OV push-pull dc-dc converter breadboard, designed by the Jet Propulsion Laboratory (JPL) with a +50 C to +5 C operating range for the Cassini space probe, was characterized for lower operating temperatures. The breadboard converter which failed to operate for temperatures below -125 C was then modified to operate at temperatures approaching that of liquid nitrogen (LN2). Associated with this low operating temperature range (greater than -196 C) was a variety of performance problems such as significant change in output voltage, converter switching instability, and failure to restart at temperatures below -154 C. An investigation into these problems yielded additional modifications to the converter which improved low temperature performance even further.

Gerber, Scott S.↗
NASA NTRS1997

28,000 Hour Xenon Hollow Cathode LifeTest Results

The International Space Station Plasma Contactor System requires a hollow cathode assembly (HCA) with a lifetime of at least 18,000 hours. Critical components of the HCA include the hollow cathode and electron emitter. A series of hollow cathode wear tests was performed which included a life test operated at the maximum current of the HCA. This test sought to verify the hollow cathode design and contamination control protocols. The life test accumulated 27,800 hours of operation before failing to ignite. The hollow cathode exhibited relatively small changes in operating parameters over the course of the test. This life test is the longest duration test of a high current xenon hollow cathode reported to date.

Sarver-Verhey, Timothy R.↗
DOE OSTI2025

Enhanced Component Performance Study: Motor-Operated Valves 1998-2024

This report presents an enhanced performance evaluation of motor-operated valves (MOVs) at U.S. commercial nuclear power plants. The data used in this study are based on the operating experience failure reports from calendar year 1998 through 2024 as reported in the Institute of Nuclear Power Operations (INPO) Industry Reporting and Information System (IRIS). The MOV failure modes considered are fail to open or close (FTOC), fail to operate or control (FTOP), and spurious operation (SO). The component reliability estimates and the reliability data are trended for the most recent 10-year period while yearly estimates for reliability are provided for the entire study period. The following increasing trend was identified for MOVs for the most recent 10-year period: • Low-demand MOV frequency of FTOC demands (demands per reactor year). The following decreasing trends were identified for MOVs for the most recent 10-year period: • Low-demand MOV FTOC failure probability • High-demand MOV SO failure rate • Low-demand MOV frequency of FTOC events (failures per reactor year) • High-demand MOV frequency of SO events (failures per reactor year).

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2026

Studying the Impact of Momentary Cessation of IBRs Compliant With IEEE Std. 2800-2022 on Transmission Line Protection Elements

This paper examines the impact of inverter-based resource (IBR) momentary cessation timing on transmission system protection relays. IEEE Std. 2800 mandates voltage ride-through, requiring IBRs to remain online during voltage disturbances. However, for severe voltage dips (|V| = 0.1 p.u.), the standard permits current blocking. In practice, vendors implement momentary cessation with varying delays, potentially affecting relay operation if IBRs cease too early. This article studies the impact of the time IBRs enter momentary cessation on transmission line protective relays. Using an electromagnetic transient (EMT) simulation, this study models IBR momentary cessation with tunable delays in a realistic transmission network. COMTRADE files generated from EMT simulations are analyzed in MATLAB using detailed protective relay models. Results indicate that IBRs must sustain operation for at least one cycle to ensure proper relay response; otherwise, relays may fail to oper- ate. These findings guide IBR vendors in optimizing momentary cessation settings to enhance transmission line protection.

24 POWER TRANSMISSION AND DISTRIBUTION↗
NASA NTRS2009

Failure of Pyrotechnic Operated Valves with Dual Initiators

Investigation of recent pyrovalve failures reveals timing of redundant initiator firings is crucial for reliable operation of pyrovalves. Simultaneous firing, i.e., within a very narrow time frame, was found to be the primary cause of the valve failing to operate. Testing of both single and dual initiators revealed important design characteristics affecting pyrovalve device performance. They include Primer Chamber Assembly (PCA) geometry and material properties, as well as operational effects on combustion product flow, and resulting energy transfer to the booster. The CONAX PCA design has evolved slowly over time undergoing incremental changes to correct known issues. These piecewise changes were verified by limited test, without a full understanding of the overall system impact or effect on margins. Adequate system performance margins may be adversely affected in existing or future systems incorporating a pyrovalve actuated by simultaneous firing of dual initiators.

Failure of Pyrotechnic Operated Valves↗
NASA NTRS1996

Shape Control of Solar Collectors Using Shape Memory Alloy Actuators

Solar collectors that are focused on a central receiver are designed with a mechanism for defocusing the collector or disabling it by turning it out of the path of the sun's rays. This is required to avoid damaging the receiver during periods of inoperability. In either of these two cases a fail-safe operation is very desirable where during power outages the collector passively goes to its defocused or deactivated state. This paper is principally concerned with focusing and defocusing the collector in a fail-safe manner using shape memory alloy actuators. Shape memory alloys are well suited to this application in that once calibrated the actuators can be operated in an on/off mode using a minimal amount of electric power. Also, in contrast to other smart materials that were investigated for this application, shape memory alloys are capable of providing enough stroke at the appropriate force levels to focus the collector. Design and analysis details presented, along with comparisons to test data taken from an actual prototype, demonstrate that the collector can be repeatedly focused and defocused within accuracies required by typical solar energy systems. In this paper the design, analysis and testing of a solar collector which is deformed into its desired shape by shape memory alloy actuators is presented. Computations indicate collector shapes much closer to spherical and with smaller focal lengths can be achieved by moving the actuators inward to a radius of approximately 6 inches. This would require actuators with considerably more stroke and some alternate SMA actuators are currently under consideration. Whatever SMA actuator is finally chosen for this application, repeatability and fatigue tests will be required to investigate the long term performance of the actuator.

Lobitz, D. W.↗
NASA NTRS2018

Lessons Learned During the Transition of SORCE Science Operations to Daylight Only Operations

In July 2013, NASA's Solar Radiation and Climate Experiment experienced a battery anomaly which placed it into safemode halting all science observations. Initial attempts to recover the spacecraft to an operational configuration failed due to the reduced capacity of the battery. As the keystone mission for measuring total solar irradiance, and the cornerstone mission for measuring the solar spectral irradiance there was a strong motivation for developing a new operations concept that would allow SORCE to resume daily measurements of the Sun. The operations team faced many challenges over the next several months. For a five-day period in late 2013 the operations team was able resume science observations to cross-calibrate SORCE data with a new instrument launched in November 2013. After the cross-calibration campaign was completed a new operations concept was deployed which allowed SORCE to perform daylight only operations. In this mode of operations all non-essential components are powered off at each eclipse entry and then turned back on at sunrise. In March 2014 SORCE resumed making daily measurements of the Sun. This paper will review the events and lessons learned from the six-month recovery effort.

Spacecraft Anomaly↗
NASA NTRS2004

Temperature Distributions in Hollow Cathode Emitters

Life-limiting processes in hollow cathodes are determined largely by the temperature of the emitter. To support development of cathode life models we have developed a noncontact temperature measurement technique which employs a stepper motor-driven fiber optic probe. The probe is driven inside the hollow cathode and collects light radiated by the hot interior surface of the emitter. Ratio pyrometry is used determine the axial temperature profile. Thermocouples on the orifice plate provide measurements ofthe external temperature during cathode operation and are used to calibrate the pyrometer system in situ with a small oven enclosing the externally heated cathode. Initial measurements of the temperature distribution in a hollow cathode with the same geometry as a cathode that failed after operating at 12 A emission current for 27800 hours are discussed.

ratio pyrometer system↗
NASA NTRS2010

NASA Engineering and Safety Center Technical Bulletin No. 10-02: Potential Failure of Dual Simultaneously Initiated Pyrotechnic Operated Valves

The NASA Engineering and Safety Center (NESC) Technical Bulletin No. 09-01 reported an independent investigation of four pyrovalve failures that occurred while using aluminum (Al) pyrovalve primer chamber assemblies (PCAs) during ground testing. The investigation revealed that simultaneous firing (within a few microseconds) of the NASA Standard Initiators (NSIs) was the primary reason why the booster charge failed to ignite and the pyrovalves subsequently failed to operate. A second investigation of a new stainless steel (SS) PCA design with separate flame channels was completed in 2010. The new SS configuration was found to be improved in most respects; however, no improvement was noted in the temperature delivered to ignite the booster during dual simultaneous NSI firings. Simultaneous firings should be avoided when using either the Al or the SS PCA design.

Potential Failure↗
NASA NTRS1978

The 200-kilowatt wind turbine project

The three 200 kilowatt wind turbines described, compose the first of three separate systems. Proposed wind turbines of the two other systems, although similar in design, are larger in both physical size and rated power generation. The overall objective of the project is to obtain early operation and performance data while gaining initial experience in the operation of large, horizontal-axis wind turbines in typical utility environments. Several of the key issues addressed include the following: (1) impact of the variable power output (due to varying wind speeds) on the utility grid (2) compatibility with utility requirements (voltage and frequency control of generated power) (3) demonstration of unattended, fail-safe operation (4) reliability of the wind turbine system (5) required maintenance and (6) initial public reaction and acceptance.

Source record↗
NASA NTRS2019

Towards Resilient Autonomous Navigation of Drones

Robots and particularly drones are especially useful in exploring extreme environments that pose hazards to humans. To ensure safe operations in these situations, usually perceptually degraded and without good GNSS, it is critical to have a reliable and robust state estimation solution. The main body of literature in robot state estimation focuses on developing complex algorithms favoring accuracy. Typically, these approaches rely on a strong underlying assumption: the main estimation engine will not fail during operation. In contrast, we propose an architecture that pursues robustness in state estimation by considering redundancy and heterogeneity in both sensing and estimation algorithms. The architecture is designed to expect and detect failures and adapt the behavior of the system to ensure safety. To this end, we present HeRO (Heterogeneous Redundant Odometry): a stack of estimation algorithms running in parallel supervised by a resiliency logic. This logic carries out three main functions: a) perform confidence tests both in data quality and algorithm health; b) re-initialize those algorithms that might be malfunctioning; c) generate a smooth state estimate by multiplexing the inputs based on their quality. The state and quality estimates are used by the guidance and control modules to adapt the mobility behaviors of the system. The validation and utility of the approach are shown with real experiments on a ying robot for the use case of autonomous exploration of subterranean environments, with particular results from the STIX event of the DARPA Subterranean Challenge.

Agha-mohammadi, Ali-akbar↗
NASA NTRS2010

Use of Drying Technologies for Resource Recovery from Solid Wastes and Brines

Long term storage of unprocessed biological wastes and human wastes can present major health issues and a loss of potential resources. Space vehicles and planetary habitats are typically resource-scarce or resource-limited environments for long-term human habitation. To-date, most of the resources will need to be supplied from Earth, but this may not be possible for long duration human exploration. Based on present knowledge, there is only very limited in-situ resources on planetary habitats. Hence, the opportunity to "live off the land" in a planetary habitat is limited. However, if we assume that wastes generated by human explorers are viewed as resources, there is great potential to utilize and recycle them, thereby reducing the requirements for supply Earth and enabling the "live off the land" exploration scenario. Technologies used for the recovery of resources from wastes should be reliable, safe, easy to operate, fail-proof, modular, automated and preferably multifunctional in being capable of handling mixed solid and liquid wastes. For a lunar habitat, energy does not appear to be the major driving factor amongst the technologies studied. Instead, reliability appears to be more important[1] . This paper reports studies to date on drying technologies to remove water from solid wastes and brines. Experimental performance data obtained for recovery water from wastes and brine are presented. Simplicity of operation of hardware and energy efficiency are discussed. Some improvements and modifications to hardware were performed. Hopefully, this information will assist in future efforts in the "downselection" of technologies for recovery of water and resources from solid wastes and brines.

Wignarajah, Kanapathipillai↗
NASA NTRS2003

ISS FPP Ionospheric Electron Density and Temperature Measurements: Results, Comparison with the IRI-90 Model, and Implications for ISS Charging

We give measurement results of electron temperature and electron density from the Floating Potential Probe (FPP) on the International Space Station (ISS), and relate them to the electron current collection of the ISS solar arrays and the degree of charging of ISS when its Plasma Contacting Units (PCUs) are not operating. We show that on days of high solar activity index Kp, high levels of ISS charging are significantly more probable than on days of low solar activity, due to some abnormally low morning electron temperatures. Although the FPP electron temperatures measured are almost always higher than predicted by the International Reference Ionosphere 90 model (IRI-90), it is shown that the CHAMP satellite Langmuir Probe (PLP) also shows low dawn electron temperatures on the same day as those found by FPP. It is further shown that similar high levels of predicted charging, accompanied by vxB charging on the ISS structure, could exceed the -40 V specification on ISS charging, and could be dangerous to ISS astronauts if the PCUs fail to operate.

Ferguson, D. C.↗
NASA NTRS1986

Cosmic Background Explorer (COBE) transfer orbit attitude control system

The Cosmic Background Explorer (COBE) spacecraft will be launched by the Shuttle from Vandenberg AFB into a 300 km altitude, 99 deg inclination, 6 a.m. or 6 p.m. ascending node orbit. After release from the Remote Manipulator System (RMS) arm, an on-board monopropellant hydrazine propulsion system will raise the orbit altitude to 900 km. The spacecraft continuously spins during transfer orbit operations with the spin axis nominally horizontal and in or near the orbit plane. The blowdown propulsion system consists of twelve 5 lb thrusters (3 'spin', 3 'despin', and 6 'axial') with the latter providing initially 30 lb of force parallel to the spin axis for orbit raising. The spin/despin jets provide a constant roll rate during the transfer orbit phase of the mission and the axials control pitch and yaw. The axial thrusters are pulsed on for attitude control during coast periods and are normally on- and off-modulated for control during orbit raising. Attitude sensors employed in the control loops include an array of two-axis digital sun sensors and three planar earth scanners for position measurements, as well as six gyroscopes for rate information. System redundancy is achieved by means of unique three-axes-in-a-plane geometry. This triaxial concept results in a fail-safe operational system with no performance degradation for many different component failure modes.

Placanica, Samuel J.↗
NASA NTRS2016

Tethered Space Satellite-1 (TSS-1): Technical Roundabouts

In the early 1990's US and Italian scientists collaborated to study the electrodynamics of dragging a satellite on a tether through the electrically charged portion of Earth's atmosphere called the ionosphere. An electrical current induced in the long wire could be used for power and thrust generation for a satellite. Other tether uses include momentum exchange, artificial gravity, deployment of sensors or antennas, and gravity-gradient stabilization for satellites. Before the Tethered Space Satellite (TSS-1), no long tether had ever been flown, so many questions existed on how it would actually behave. The TSS consisted of a satellite with science experiments attached to a 12.5 mile long, very thin (0.10 inch diameter) copper wire assembly wound around a spool in the deployer reel mechanism. With the Space Shuttle at an altitude of 160 nautical miles above earth, the satellite was to be deployed by raising it from the Shuttle bay on a boom facing away from Earth. Once cleared of the bay, the deployer mechanism was to slowly feed out the 12-plus miles of tether. Scientific data would be collected throughout the operation, after which the satellite would be reeled back in. Pre-flight testing system level tests involved setting up a tether receiver to catch the 12.5 mile tether onto another reel as it was being unwound by the deployer reel mechanism. Testing only the reel mechanism is straightforward. This test becomes more complicated when the TSS is mounted on the flight pallet at Kennedy Space Center (KSC). The system level tests must be passed before the pallet can be installed into the Space Shuttle cargo bay. A few months before flight, the TSS payload had been integrated onto the Spacelab pallet and system level tests, including unreeling and reeling the tether, had been successfully completed. Some of this testing equipment was then shipped back to the contractor Martin Marietta. Systems-level load analyses, which cannot be run until all information about each payload is finalized, was run in parallel with the physical integration of the hardware into the Shuttle payload bay. The coupled loads analysis, as it is called, incorporates any updates to the model due to system level tests, and any changes that were found during integration. The coupled loads analysis revealed that a single bolt attaching the deployer reel mechanism to the support structure had a "negative margin" - which is an indication that it might fail during operation. Hardware certification rules do not allow for hardware to fly with negative margins, so this issue had to be resolved before the flight. Since there is conservatism in engineering analysis, there is an option to "waive" the margin requirement, and fly the experiment as is. On the other hand, a structural failure of one payload could have serious or catastrophic consequences to other payloads and possibly the mission. Minor design changes or fixes might be feasible within the payload bay prior to launch. Any major design changes that required the spooling test to validate the hardware, or for the pallet to be removed, would cause TSS not to be ready for the Shuttle launch.

O'Connor, Brian↗