Search NASA⌕ Search

SEARCH · Search NASA

Results for “safeguarding”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 73 records · Page 4

Generalized seismic analysis

There is a constant need to be able to solve for enforced motion of structures. Spacecraft need to be qualified for acceleration inputs. Truck cargoes need to be safeguarded from road mishaps. Office buildings need to withstand earthquake shocks. Marine machinery needs to be able to withstand hull shocks. All of these kinds of enforced motions are being grouped together under the heading of seismic inputs. Attempts have been made to cope with this problem over the years and they usually have ended up with some limiting or compromise conditions. The crudest approach was to limit the problem to acceleration occurring only at a base of a structure, constrained to be rigid. The analyst would assign arbitrarily outsized masses to base points. He would then calculate the magnitude of force to apply to the base mass (or masses) in order to produce the specified acceleration. He would of necessity have to sacrifice the determination of stresses in the vicinity of the base, because of the artificial nature of the input forces. The author followed the lead of John M. Biggs by using relative coordinates for a rigid base in a 1975 paper, and again in a 1981 paper . This method of relative coordinates was extended and made operational as DMAP ALTER packets to rigid formats 9, 10, 11, and 12 under contract N60921-82-C-0128. This method was presented at the twelfth NASTRAN Colloquium. Another analyst in the field developed a method that computed the forces from enforced motion then applied them as a forcing to the remaining unknowns after the knowns were partitioned off. The method was translated into DMAP ALTER's but was never made operational. All of this activity jelled into the current effort. Much thought was invested in working out ways to unshakle the analysis of enforced motions from the limitations that persisted.

Butler, Thomas G.↗

Project Ares 3

The mission of Project Ares is to design and fabricate an Earth prototype, autonomous flying rover capable of flying on the Martian surface. The project was awarded to California State University, Northridge (CSUN) in 1989 where an in-depth paper study was completed. The second year's group, Project Ares 2, designed and fabricated a full-scale flight demonstration aircraft. Project Ares 3, the third and final group, is responsible for propulsion system design and installation, controls and instrumentation, and high altitude testing. The propulsion system consists of a motor and its power supply, geartrain, and propeller. The motor is a four-brush DC motor powered by a 50-V NiCd battery supply. A pulley and belt arrangement is used for the geartrain and includes light weight, low temperature materials. The propeller is constructed from composite materials which ensures high strength and light weight, and is specifically developed to provide thrust at extremely high altitudes. The aircraft is controlled with a ground-based radio control system and an autopilot which will activate in the event that the control signal is lost. A transponder is used to maintain radar contact for ground tracking purposes. The aircraft possesses a small, onboard computer for collecting and storing flight data. To safeguard the possibility of computer failure, all flight data is transmitted to a ground station via a telemetry system. An initial, unpowered, low-level test flight was completed in August of 1991. Testing of systems integration in the second low-level test flight resulted in loss of elevator control which caused considerable damage on landing. Complete failure analysis and repairs are scheduled for September of 1992.

Raymer, Dan↗

Economical ground data delivery

Data delivery in the Deep Space Network (DSN) involves transmission of a small amount of constant, high-priority traffic and a large amount of bursty, low priority data. The bursty traffic may be initially buffered and then metered back slowly as bandwidth becomes available. Today both types of data are transmitted over dedicated leased circuits. The authors investigated the potential of saving money by designing a hybrid communications architecture that uses leased circuits for high-priority network communications and dial-up circuits for low-priority traffic. Such an architecture may significantly reduce costs and provide an emergency backup. The architecture presented here may also be applied to any ground station-to-customer network within the range of a common carrier. The authors compare estimated costs for various scenarios and suggest security safeguards that should be considered.

Markley, Richard W.↗

The design and implementation of EPL: An event pattern language for active databases

The growing demand for intelligent information systems requires closer coupling of rule-based reasoning engines, such as CLIPS, with advanced data base management systems (DBMS). For instance, several commercial DBMS now support the notion of triggers that monitor events and transactions occurring in the database and fire induced actions, which perform a variety of critical functions, including safeguarding the integrity of data, monitoring access, and recording volatile information needed by administrators, analysts, and expert systems to perform assorted tasks; examples of these tasks include security enforcement, market studies, knowledge discovery, and link analysis. At UCLA, we designed and implemented the event pattern language (EPL) which is capable of detecting and acting upon complex patterns of events which are temporally related to each other. For instance, a plant manager should be notified when a certain pattern of overheating repeats itself over time in a chemical process; likewise, proper notification is required when a suspicious sequence of bank transactions is executed within a certain time limit. The EPL prototype is built in CLIPS to operate on top of Sybase, a commercial relational DBMS, where actions can be triggered by events such as simple database updates, insertions, and deletions. The rule-based syntax of EPL allows the sequences of goals in rules to be interpreted as sequences of temporal events; each goal can correspond to either (1) a simple event, or (2) a (possibly negated) event/condition predicate, or (3) a complex event defined as the disjunction and repetition of other events. Various extensions have been added to CLIPS in order to tailor the interface with Sybase and its open client/server architecture.

Giuffrida, G.↗

Lunar rover technology demonstrations with Dante and Ratler

Carnegie Mellon University has undertaken a research, development, and demonstration program to enable a robotic lunar mission. The two-year mission scenario is to traverse 1,000 kilometers, revisiting the historic sites of Apollo 11, Surveyor 5, Ranger 8, Apollo 17, and Lunokhod 2, and to return continuous live video amounting to more than 11 terabytes of data. Our vision blends autonomously safeguarded user driving with autonomous operation augmented with rich visual feedback, in order to enable facile interaction and exploration. The resulting experience is intended to attract mass participation and evoke strong public interest in lunar exploration. The encompassing program that forwards this work is the Lunar Rover Initiative (LRI). Two concrete technology demonstration projects currently advancing the Lunar Rover Initiative are: (1) The Dante/Mt. Spurr project, which, at the time of this writing, is sending the walking robot Dante to explore the Mt. Spurr volcano, in rough terrain that is a realistic planetary analogue. This project will generate insights into robot system robustness in harsh environments, and into remote operation by novices; and (2) The Lunar Rover Demonstration project, which is developing and evaluating key technologies for navigation, teleoperation, and user interfaces in terrestrial demonstrations. The project timetable calls for a number of terrestrial traverses incorporating teleoperation and autonomy including natural terrain this year, 10 km in 1995. and 100 km in 1996. This paper will discuss the goals of the Lunar Rover Initiative and then focus on the present state of the Dante/Mt. Spurr and Lunar Rover Demonstration projects.

Krotkov, Eric↗

A rose by any other name: Certification seen as process rather than content

Green (1990) believes that the two main factors safeguarding flying from human error are both related to certification and regulation. First is the increasingly proceduralized nature of flying whereby as much as possible is reduced to a rule-based activity. Second is the emphasis placed upon training and competency checking of aircrew in simulators and in the air, both generally and for all particular types of aircraft flown. This leaves, believes Green, other human factors that are relatively unaddressed as yet and which can give rise to human reliability problems. These include: hardware factors and especially pilot/co-pilot relationships; and system factors including fatigue and cost/safety trade-offs. He also, importantly, identifies problems with the integration of the 'electronic crew member' following increased automation. Human reliability failures with artificial intelligence and automation, due to over-reliance on the system fail-safe mechanisms, or to operator under- confidence in the integrity or self-regulating capacity of the system, or to out-of-loop effects, are widely accepted as being due to deficiencies in plant design, planning, management and maintenance more than to 'operator error' - Reason's (1990) latent error or organization pathogens argument. Reliability failures in complex systems are well enough documented to give cause for concern and at least promote a debate on the merits of a full certification program. The purpose of this short paper is to seek out and explore what is valuable in certification, at the least to show that the benefits outweigh the disadvantages and at best to identify positive outcomes perhaps not obtainable in other ways. On both sides of the debate on certification there is general agreement on the need for a better human factors perspective and effort in complex aviation systems design. What is at issue is how this is to be promoted. It is incumbent upon opponents of certification to say how else such promotion be enabled. This is an exploratory and philosophical review, not a focused and specific one, and it will draw upon much that is not firmly in the domain of complex aviation systems.

Wilson, John R.↗

Electrical short circuit and current overload tests on aircraft wiring

The findings of electrical short circuit and current overload tests performed on commercial aircraft wiring are presented. A series of bench-scale tests were conducted to evaluate circuit breaker response to overcurrent and to determine if the wire showed any visible signs of thermal degradation due to overcurrent. Three types of wire used in commercial aircraft were evaluated: MIL-W-22759/34 (150 C rated), MIL-W-81381/12 (200 C rated), and BMS 1360 (260 C rated). A second series of tests evaluated circuit breaker response to short circuits and ticking faults. These tests were also meant to determine if the three test wires behaved differently under these conditions and if a short circuit or ticking fault could start a fire. It is concluded that circuit breakers provided reliable overcurrent protection. Circuit breakers may not protect wire from ticking faults but can protect wire from direct shorts. These tests indicated that the appearance of a wire subjected to a current that totally degrades the insulation looks identical to a wire subjected to a fire; however the 'fire exposed' conductor was more brittle than the conductor degraded by overcurrent. Preliminary testing indicates that direct short circuits are not likely to start a fire. Preliminary testing indicated that direct short circuits do not erode insulation and conductor to the extent that ticking faults did. Circuit breakers may not safeguard against the ignition of flammable materials by ticking faults. The flammability of materials near ticking faults is far more important than the rating of the wire insulation material.

Cahill, Patricia↗

An object-oriented, technology-adaptive information model

The primary objective was to develop a computer information system for effectively presenting NASA's technologies to American industries, for appropriate commercialization. To this end a comprehensive information management model, applicable to a wide variety of situations, and immune to computer software/hardware technological gyrations, was developed. The model consists of four main elements: a DATA_STORE, a data PRODUCER/UPDATER_CLIENT and a data PRESENTATION_CLIENT, anchored to a central object-oriented SERVER engine. This server engine facilitates exchanges among the other model elements and safeguards the integrity of the DATA_STORE element. It is designed to support new technologies, as they become available, such as Object Linking and Embedding (OLE), on-demand audio-video data streaming with compression (such as is required for video conferencing), Worldwide Web (WWW) and other information services and browsing, fax-back data requests, presentation of information on CD-ROM, and regular in-house database management, regardless of the data model in place. The four components of this information model interact through a system of intelligent message agents which are customized to specific information exchange needs. This model is at the leading edge of modern information management models. It is independent of technological changes and can be implemented in a variety of ways to meet the specific needs of any communications situation. This summer a partial implementation of the model has been achieved. The structure of the DATA_STORE has been fully specified and successfully tested using Microsoft's FoxPro 2.6 database management system. Data PRODUCER/UPDATER and PRESENTATION architectures have been developed and also successfully implemented in FoxPro; and work has started on a full implementation of the SERVER engine. The model has also been successfully applied to a CD-ROM presentation of NASA's technologies in support of Langley Research Center's TAG efforts.

Anyiwo, Joshua C.↗

Environmental Projects: Biological Assessment, Opinion, and New 34-Meter Beam-Waveguide Antenna (DSS 24) at Apollo Site - Volume 17

This report deals with the Biological Assessment, Biological Opinion and Final Report on the construction of a high- efficiency 34-meter, multifrequency beam-waveguide antenna at the Apollo Site of the Goldstone Deep Space Communications Complex, operated by JPL. According to the Endangered Species Act of 1973, a Biological Assessment must be conducted and a Biological Opinion, with terms and conditions, rendered (the Opinion by the U.S. Department of the Interior) before construction of any federal project that may affect endangered or threatened flora or fauna. After construction, a final report is filed with the Department. The desert tortoise, designated "threatened" by the U.S. Fish and Wildlife Service, and the Mojave ground squirrel and the Lane Mountain milk vetch, both designated "candidate threatened," required the reporting specified by the Act. The Assessment found no significant danger to the animal species if workers are educated about them. No stands of the plant species were observed in the surveyed construction area. The Department issued a Biological Opinion to safeguard the two animal species. The Service and the California Department of Fish and Game both issued a Biological Concurrence that JPL had satisfied all environmental criteria for preserving threatened species.

Bengelsdorf, Irving↗

NASA Reactor Facility Hazards Summary

The Lewis Research Center of the National Aeronautics and Space Administration proposes to build a nuclear research reactor which will be located in the Plum Brook Ordnance Works near Sandusky, Ohio. The purpose of this report is to inform the Advisory Committee on Reactor Safeguards of the U. S. Atomic Energy Commission in regard to the design Lq of the reactor facility, the characteristics of the site, and the hazards of operation at this location. The purpose of this research reactor is to make pumped loop studies of aircraft reactor fuel elements and other reactor components, radiation effects studies on aircraft reactor materials and equipment, shielding studies, and nuclear and solid state physics experiments. The reactor is light water cooled and moderated of the MTR-type with a primary beryllium reflector and a secondary water reflector. The core initially will be a 3 by 9 array of MTR-type fuel elements and is designed for operation up to a power of 60 megawatts. The reactor facility is described in general terms. This is followed by a discussion of the nuclear characteristics and performance of the reactor. Then details of the reactor control system are discussed. A summary of the site characteristics is then presented followed by a discussion of the larger type of experiments which may eventually be operated in this facility. The considerations for normal operation are concluded with a proposed method of handling fuel elements and radioactive wastes. The potential hazards involved with failures or malfunctions of this facility are considered in some detail. These are examined first from the standpoint of preventing them or minimizing their effects and second from the standpoint of what effect they might have on the reactor facility staff and the surrounding population. The most essential feature of the design for location at the proposed site is containment of the maximum credible accident.

Source record↗

Autonomous Formation Flying from the Ground to Flight

The cost of on-orbit operations remains a significant and increasingly visible concern in the support of satellite missions. Headway has been made in automating some ground operations; however, increased mission complexity and more precise orbital constraints have compelled continuing human involvement in mission design and maneuver planning operations. AI Solutions, Inc. in cooperation with the National Aeronautics and Space Administration's (NASA) Goddard Space Flight Center (GSFC) has tackled these more complex problems through the development of AutoCon(TM) as a tool for an automated solution. NASA is using AutoCon(TM) to automate the maneuver planning for the Earth Orbiter-1 (EO-1) mission. AutoCon(TM) was developed originally as a ground system tool. The EO-1 mission will be using a scaled version of AutoCon(TM) on-board the EO-1 satellite to command orbit adjustment maneuvers. The flight version of AutoCon(TM) plans maneuvers based on formation flying algorithms developed by GSFC, JPL, and other industry partners. In its fully autonomous mode, an AutoCon(TM) planned maneuver will be executed on-board the satellite without intervention from the ground. This paper describes how AutoCon(TM) automates maneuver planning for the formation flying constraints of the EO-1 mission. AutoCon(TM) was modified in a number of ways to automate the maneuver planning on-board the satellite. This paper describes how the interface and functionality of AutoCon(TM) were modified to support the on-board system. A significant component of this modification was the implementation of a data smoother, based on a Kalman filter, that ensures that the spacecraft states estimated by an on-board GPS receiver are as accurate as possible for maneuver planning. This paper also presents the methodology used to scale the AutoCon(TM) functionality to fit and execute on the flight hardware. This paper also presents the modes built into the system that allow the incremental phasing in of autonomy. New technologies for autonomous operations are usually received with significant, and probably appropriate, trepidation. A number of safeguards have been designed in both AutoCon(TM) and the interfacing systems to alleviate the potential of mission-impacting anomalies from the on-board autonomous system. This paper describes the error checking, input data integrity validation, and limits set on maneuvers in AutoCon(TM) and the on-board system.

Chapman, Keith B.↗

Autonomous Formation Flying from Ground to Flight

The cost of on-orbit operations remains a significant and increasingly visible concern in the support of satellite missions. Headway has been made in automating some ground operations; however, increased mission complexity and more precise orbital constraints have compelled continuing human involvement in mission design and maneuver planning operations. AI Solutions, Inc. in cooperation with the National Aeronautics and Space Administration's (NASA) Goddard Space Flight Center (GSFC) has tackled these more complex problems through the development of AutoCon as a tool for an automated solution. NASA is using AutoCon to automate the maneuver planning for the Earth Orbiter-1 (EO-1) mission. AutoCon was developed originally as a ground system tool. The EO-1 mission will be using a scaled version of AutoCon on-board the EO-1 satellite to command orbit adjustment maneuvers. The flight version of AutoCon plans maneuvers based on formation flying algorithms developed by GSFC, JPL, and other industry partners. In its fully autonomous mode, an AutoCon planned maneuver will be executed on-board the satellite without intervention from the ground. This paper describes how AutoCon automates maneuver planning for the formation flying constraints of the EO-1 mission. AutoCon was modified in a number of ways to automate the maneuver planning on-board the satellite. This paper describes how the interface and functionality of AutoCon were modified to support the on-board system. A significant component of this modification was the implementation of a data smoother, based on a Kalman filter, that ensures that the spacecraft states estimated by an on-board GPS receiver are as accurate as possible for maneuver planning. This paper also presents the methodology use to scale the AutoCon functionality to fit and execute on the flight hardware. This paper also presents the modes built that allow the incremental phasing in of autonomy. New technologies for autonomous operations are usually received with significant, and probably appropriate trepidation. A number of safeguards have been designed in both AutoCon and the interfacing systems to alleviate the potential of mission-impacting anomalies from the on-board autonomous system. This paper describes the error checking, input data integrity validation and limits set on maneuvers in AutoCon and the on-board system.

Chapman, Keith B.↗

Simulator Studies of the Deep Stall

Simulator studies of the deep-stall problem encountered with modern airplanes are discussed. The results indicate that the basic deep-stall tendencies produced by aerodynamic characteristics are augmented by operational considerations. Because of control difficulties to be anticipated in the deep stall, it is desirable that adequate safeguards be provided against inadvertent penetrations.

White, Maurice D.↗

Flight Performance Evaluation of Three GPS Receivers for Sounding Rocket Tracking

In preparation for the European Space Agency Maxus-4 mission, a sounding rocket test flight was carried out at Esrange,, near Kiruna, Sweden on February 19, 2001 to validate existing ground facilities and range safety installations. Due to the absence of a dedicated scientific payload, the flight offered the opportunity to test multiple GPS receivers and assess their performance for the tracking of sounding rockets. The receivers included an Ashtech G12 HDMA receiver, a BAE (Canadian Marconi) Allstar receiver and a Mitel Orion receiver. All of them provide CIA code tracking on the L1 frequency to determine the user position and make use of Doppler measurements to derive the instantaneous velocity. Among the receivers, the G12 has been optimized for use under highly dynamic conditions and has earlier been flown successfully on NASA sounding rockets [Bull, ION-GPS-2000]. The Allstar is representative of common single frequency receivers for terrestrial applications and received no particular modification, except for the disabling of the common altitude and velocity constraints that would otherwise inhibit its use for space application. The Orion receiver, finally, employs the same Mitel chipset as the Allstar, but has received various firmware modifications by DLR to safeguard it against signal losses and improve its tracking performance [Montenbruck et al., ION-GPS-2000]. While the two NASA receivers were driven by a common wrap-around antenna, the DLR experiment made use of a switchable antenna system comprising a helical antenna in the tip of the rocket and two blade antennas attached to the body of the vehicle. During the boost a peak acceleration of roughly 17g's was achieved which resulted in a velocity of about 1100 m/s at the end of the burn. At apogee, the rocket reached a maximum altitude of over 80 km. A detailed analysis of the attained flight data will be given in the paper together with a evaluation of different receiver designs and antenna concepts.

Bull, Barton↗

Flight Performance Evaluation of Three GPS Receivers for Sounding Rocket Tracking

In preparation for the European Space Agency Maxus-4 mission, a sounding rocket test flight was carried out at Esrange, near Kiruna, Sweden on February 19, 2001 to validate existing ground facilities and range safety installations. Due to the absence of a dedicated scientific payload, the flight offered the opportunity to test multiple GPS receivers and assess their performance for the tracking of sounding rockets. The receivers included an Ashtech G12 HDMA receiver, a BAE (Canadian Marconi) Allstar receiver and a Mitel Orion receiver. All of them provide C/A code tracking on the L1 frequency to determine the user position and make use of Doppler measurements to derive the instantaneous velocity. Among the receivers, the G12 has been optimized for use under highly dynamic conditions and has earlier been flown successfully on NASA sounding rockets. The Allstar is representative of common single frequency receivers for terrestrial applications and received no particular modification, except for the disabling of the common altitude and velocity constraints that would otherwise inhibit its use for space application. The Orion receiver, finally, employs the same Mitel chipset as the Allstar, but has received various firmware modifications by DLR to safeguard it against signal losses and improve its tracking performance. While the two NASA receivers were driven by a common wrap-around antenna, the DLR experiment made use of a switchable antenna system comprising a helical antenna in the tip of the rocket and two blade antennas attached to the body of the vehicle. During the boost a peak acceleration of roughly l7g's was achieved which resulted in a velocity of about 1100 m/s at the end of the burn. At apogee, the rocket reached an altitude of over 80 km. A detailed analysis of the attained flight data is given together with a evaluation of different receiver designs and antenna concepts.

Bull, Barton↗

Mars Sample Handling Protocol Workshop Series: Workshop 2

Numerous NASA reports and studies have identified Planetary Protection (PP) as an important part of any Mars sample return mission. The mission architecture, hardware, on-board experiments, and related activities must be designed in ways that prevent both forward- and back-contamination and also ensure maximal return of scientific information. A key element of any PP effort for sample return missions is the development of guidelines for containment and analysis of returned sample(s). As part of that effort, NASA and the Space Studies Board (SSB) of the National Research Council (NRC) have each assembled experts from a wide range of scientific fields to identify and discuss issues pertinent to sample return. In 1997, the SSB released its report on recommendations for handling and testing of returned Mars samples. In particular, the NRC recommended that: a) samples returned from Mars by spacecraft should be contained and treated as potentially hazardous until proven otherwise, and b) rigorous physical, chemical, and biological analyses [should] confirm that there is no indication of the presence of any exogenous biological entity. Also in 1997, a Mars Sample Quarantine Protocol workshop was convened at NASA Ames Research Center to deal with three specific aspects of the initial handling of a returned Mars sample: 1) biocontainment, to prevent 'uncontrolled release' of sample material into the terrestrial environment; 2) life detection, to examine the sample for evidence of organisms; and 3) biohazard testing, to determine if the sample poses any threat to terrestrial life forms and the Earth's biosphere. In 1999, a study by NASA's Mars Sample Handling and Requirements Panel (MSHARP) addressed three other specific areas in anticipation of returning samples from Mars: 1) sample collection and transport back to Earth; 2) certification of the samples as non-hazardous; and 3) sample receiving, curation, and distribution. To further refine the requirements for sample hazard testing and the criteria for subsequent release of sample materials from quarantine, the NASA Planetary Protection Officer convened an additional series of workshops beginning in March 2000. The overall objective of these workshops was to develop comprehensive protocols to assess whether the returned materials contain any biological hazards, and to safeguard the purity of the samples from possible terrestrial contamination. This document is the report of the second Workshop in the Series. The information herein will ultimately be integrated into a final document reporting the proceedings of the entire Workshop Series along with additional information and recommendations.

Rummel, John D.↗

A Draft Protocol for Detecting Possible Biohazards in Martian Samples Returned to Earth

In preparation for missions to Mars that will involve the return of samples, it is necessary to prepare for the safe receiving, handling, testing, distributing, and archiving of martian materials here on Earth. Previous groups and committees have studied selected aspects of sample return activities, but a specific protocol for handling and testing of returned -=1 samples from Mars remained to be developed. To refine the requirements for Mars sample hazard testing and to develop criteria for the subsequent release of sample materials from precautionary containment, NASA Planetary Protection Officer, working in collaboration with CNES, convened a series of workshops to produce a Protocol by which returned martian sample materials could be assessed for biological hazards and examined for evidence of life (extant or extinct), while safeguarding the samples from possible terrestrial contamination. The Draft Protocol was then reviewed by an Oversight and Review Committee formed specifically for that purpose and composed of senior scientists. In order to preserve the scientific value of returned martian samples under safe conditions, while avoiding false indications of life within the samples, the Sample Receiving Facility (SRF) is required to allow handling and processing of the Mars samples to prevent their terrestrial contamination while maintaining strict biological containment. It is anticipated that samples will be able to be shipped among appropriate containment facilities wherever necessary, under procedures developed in cooperation with international appropriate institutions. The SRF will need to provide different types of laboratory environments for carrying out, beyond sample description and curation, the various aspects of the protocol: Physical/Chemical analysis, Life Detection testing, and Biohazard testing. The main principle of these tests will be described and the criteria for release will be discussed, as well as the requirements for the SRF and its personnel.

Viso, M.↗

NASA's Autonomous Formation Flying Technology Demonstration, Earth Observing-1(EO-1)

NASA's first autonomous formation flying mission, the New Millennium Program's (NMP) Earth Observing-1 (EO-1) spacecraft, recently completed its principal goal of demonstrating advanced formation control technology. This paper provides an overview of the evolution of an onboard system that was developed originally as a ground mission planning and operations tool. We discuss the Goddard Space Flight Center s formation flying algorithm, the onboard flight design and its implementation, the interface and functionality of the onboard system, and the implementation of a Kalman filter based GPS data smoother. A number of safeguards that allow the incremental phasing in of autonomy and alleviate the potential for mission-impacting anomalies from the on- board autonomous system are discussed. A comparison of the maneuvers planned onboard using the EO-1 autonomous control system to those from the operational ground-based maneuver planning system is presented to quantify our success. The maneuvers discussed encompass reactionary and routine formation maintenance. Definitive orbital data is presented that verifies all formation flying requirements.

Folta, David↗