SEARCH · Search NASA

Results for “certification testing”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 811 records · Page 45

All sources NASA NTRS DOE OSTI

DOE OSTI2025

Securing Solar for the Grid (S2G) (Final Project Report) [Slides]

This is the final technical report for the SETO-funded project Securing Solar for the Grid (S2G) from FY22-24. The project scope included development and dissemination of standards' requirements, best practices, equipment testing procedures, assessment tools, as well as education and training materials for cyber defense, posture and maturity tailored to solar technologies. The outcomes for this work include: co-led the development of cybersecurity certification standard (UL2941), co-led the development of cybersecurity guide (IEEE1547.3), development of recommendations for supply chain cybersecurity, and development of cybersecurity risk profiles and recommendations for DERMS.

14 SOLAR ENERGY↗

NASA NTRS1981

Space Shuttle main engine performance assessment - Columbia's first flight

Design features and performance of the Shuttle main engines first flight are presented. Each of the three engines produces 470,000 lb of thrust, operates at 3,012 psia, and has a 77.5 to 1 nozzle expansion ratio. The engines are designed for a 7.5 hr operational life, and will be tested at 109% capacity in future Shuttle flights. The developmental program is outlined, and includes 127,000 sec of operational testing on 19 engines. Engine operations and components are described, noting 100% burning of the hydrogen and oxidizer, high pressure fuel turbopumps, the controller assembly, etc.; details of solutions to fatigue failures and subsequent certification are provided. The nine minute first flight firing revealed a radiant heating of a control sensor transducer, which was shielded for succeeding flights. Alternatives are given for thrust augmentation, for which each 1% yields an additional 800 lb payload increase capability, and can be implemented by 1987.

Thompson, J. R., Jr.↗

NASA NTRS2001

Coverage Metrics for Model Checking

When using model checking to verify programs in practice, it is not usually possible to achieve complete coverage of the system. In this position paper we describe ongoing research within the Automated Software Engineering group at NASA Ames on the use of test coverage metrics to measure partial coverage and provide heuristic guidance for program model checking. We are specifically interested in applying and developing coverage metrics for concurrent programs that might be used to support certification of next generation avionics software.

Penix, John↗

NASA NTRS2005

Development of Advanced Verification and Validation Procedures and Tools for the Certification of Learning Systems in Aerospace Applications

Adaptive control technologies that incorporate learning algorithms have been proposed to enable automatic flight control and vehicle recovery, autonomous flight, and to maintain vehicle performance in the face of unknown, changing, or poorly defined operating environments. In order for adaptive control systems to be used in safety-critical aerospace applications, they must be proven to be highly safe and reliable. Rigorous methods for adaptive software verification and validation must be developed to ensure that control system software failures will not occur. Of central importance in this regard is the need to establish reliable methods that guarantee convergent learning, rapid convergence (learning) rate, and algorithm stability. This paper presents the major problems of adaptive control systems that use learning to improve performance. The paper then presents the major procedures and tools presently developed or currently being developed to enable the verification, validation, and ultimate certification of these adaptive control systems. These technologies include the application of automated program analysis methods, techniques to improve the learning process, analytical methods to verify stability, methods to automatically synthesize code, simulation and test methods, and tools to provide on-line software assurance.

Jacklin, Stephen↗

NASA NTRS1992

An improved approach for flight readiness certification: Methodology for failure risk assessment and application examples. Volume 3: Structure and listing of programs

An improved methodology for quantitatively evaluating failure risk of spaceflight systems to assess flight readiness and identify risk control measures is presented. This methodology, called Probabilistic Failure Assessment (PFA), combines operating experience from tests and flights with engineering analysis to estimate failure risk. The PFA methodology is of particular value when information on which to base an assessment of failure risk, including test experience and knowledge of parameters used in engineering analyses of failure phenomena, is expensive or difficult to acquire. The PFA methodology is a prescribed statistical structure in which engineering analysis models that characterize failure phenomena are used conjointly with uncertainties about analysis parameters and/or modeling accuracy to estimate failure probability distributions for specific failure modes. These distributions can then be modified, by means of statistical procedures of the PFA methodology, to reflect any test or flight experience. Conventional engineering analysis models currently employed for design of failure prediction are used in this methodology. The PFA methodology is described and examples of its application are presented. Conventional approaches to failure risk evaluation for spaceflight systems are discussed, and the rationale for the approach taken in the PFA methodology is presented. The statistical methods, engineering models, and computer software used in fatigue failure mode applications are thoroughly documented.

Moore, N. R.↗

NASA NTRS2018

Demonstration of Probabilistic Sensitivity Analyses Tools on the Structural Response of a Representative Inflatable Space Structure

This work provides an initial step toward demonstrating a probabilistic numerical simulation capability to support trade studies and the development of a certification plan for inflatable space habitats. This study concentrates on interpreting the results from probabilistic analysis and numerical simulation tools to identify parameter sensitivities for a novel inflatable airlock concept, specifically the Non‐Axisymmetric Inflatable Pressure Structure (NAIPS) that was designed and tested under NASA's Minimalistic Advanced Softgoods Hatch (MASH) Program. A brief overview of the finite element model is provided along with the probabilistic sensitivity analysis approach. The sensitivity studies required a model that was numerically stable and efficient enough that hundreds of simulations could be completed in the allotted time. Therefore, the existing full model was simplified by: extracting a quarter symmetry section of the dome; focusing on a single inflation pressure; and replacing the non‐linear material stress‐strain curves with linear, isotropic materials defined by elastic moduli. Responses of interest include the sensitivity of various structural component loads to material properties, cord lengths, inflation pressure and friction. Multiple sensitivity studies were completed and three are reported here. The first study focused on utilizing wide input parameter ranges to provide an opportunity to assess numerical robustness. The next two studies narrowed the parameter ranges to enable focus on understanding uncertainty at a fixed operating condition. The completion of the sensitivity studies improved understanding of the interdependence of multiple inputs on the responses. In addition, numerical stability of the simulations over wide parameter ranges, shows the feasibility of incorporating uncertainty‐based methods in the design and certification of inflatable space habitats. With the experience and trust gained, it is anticipated that these same methods will be applied to nonlinear, orthotropic models in the future.

Lyle, Karen H.↗

NASA NTRS2018

Establishing and Monitoring an Aseptic Workspace

When are aseptic operations necessary? In order to meet certain bioburden requirements, some components must undergo dry heat microbial reduction (DHMR) or other sterilizing procedures. If sensitive surfaces must be re-exposed after DHMR, this could compromise the bioburden levels. Recontaminating sterilized surfaces could be costly both in time by requiring repeated DHMR and risk to the hardware, which may not be compatible with repeated high temperature bakes. In order to prevent recontamination of the sensitive surfaces, an aseptic environment and sterile technique must be employed. Aseptic environments mean working in a space with almost no detectable bioburden in the air or on surfaces. Ideally, DHMR happens as late as possible to avoid requiring aseptic operations, as it can be considered a high-risk operations. Preparing the cleanroom for aseptic operations Establishing an ISO (International Organization for Standardization) class 5 space to minimize airborne particles. Maintain low bioburden in the cleanroom by using biocidal cleaners. Using multiple biocidal techniques decreases the likelihood of selecting for resistant microorganisms. 70% Isopropyl Alcohol (IPA) denatures the proteins in a microorganism (note: 70% IPA is better at killing microorganisms than 100% IPA) 7% hydrogen peroxide: damages DNA and proteins through oxygen radical damage. Ultraviolet-C (UV-C) lamps: causes crosslinking in DNA which prevents replication. Monitor cleanroom regularly for bioburden trending: Standard bioassay: Swab or wipe samples of cleanroom surfaces processed for colony forming unity (viable or spore selected); Rapid bioassay: Adenosine triphosphate (ATP) or Limulus amebocyte lysate (LAL) for a bioburden snapshot. High levels can signal an immediate re-cleaning before standard bioassay samples are taken. Airborne monitoring: Active (pulling air through a filter) or passive (particle fallout) for bioburden. Verify bioburden levels just before aseptic operation. Test hardware and cleanroom surfaces and air 3 days before the planned aseptic operation. Rapid bioburden just before aseptic operation to ensure room was not re-contaminated. Preparing personnel and tools: Personnel training. Everyone in the cleanroom: Standard cleanroom certification Everyone on the team: 1 day Planetary Protection overview. Aseptic operators only: Half-day aseptic operations training. Covers sterile garmenting/gloves, Sterile handling with a focus on contact transfer risk, tool/GSE preparation, and two-operator system for opening sterilized tools/components. Tool sterilization: All tools to be used during an aseptic operation need to be identified. Compatible tools are sterilized by DHMR or Autoclave. Double wrapped so that the exterior bag can be handled by a non-sterile operator, and the sterile. Tools that are not compatible with high heat do not come in contact with sensitive surfaces: either substitutes are found, or tools are isolated by wrapping in sterile foil. During an aseptic operation. Pre-task to make sure everyone understands the operations, who is handling what, and when the most critical surfaces will be exposed. Monitoring during the operation. Bioburden: active and passive airborne bioburden sampling, glove-tip dabs onto a plate after completion of operation (3 days for results). Particles: real time particle counter constantly running, with alarm for exceeding ISO 5 conditions.

aseptic processing↗

DOE OSTI2020

Module-OT: A Hardware Security Module for Operational Technology

Increased penetration levels of renewable energy and other types of distributed energy resources (DERs) on the modern electric grid-combined with technological advancements for electric system monitoring and control-introduce new cyberattack vectors and increase the cyberattack surface of energy systems. According to the IEEE Std. 1547-2018, DERs must use Modbus, Distributed Network Protocol 3 (DNP3), or Smart Energy Profile 2.0 (SEP2) as their communication protocol. Previous research identified several vulnerabilities and security breaches in each one of these communication protocols; despite this, existing standards for DERs do not recommend cybersecurity measures. In order to reduce vulnerabilities in power distribution systems, this paper presents a novel open-source hardware security module that improves both information and operational security to better protect data and communications on the distribution grid. The security hardware is called “module for operational technology,” or simply Module-OT, and it has been validated and tested in an emulated distribution system application. Module-OT is integrated within a communication system in the transport layer of the Open Systems Interconnection (OSI) model. It improves system security through encryption, authentication, authorization, certificate management, and user access control. The main advancement of Module-OT is the addition of hardware cryptographic acceleration that improves the overall communication performance in terms of end-to-end latency.

70 PLASMA PHYSICS AND FUSION TECHNOLOGY↗

DOE OSTI2026

Cybersecurity Standards for Distributed Energy Resources: Gaps and Harmonization Strategy

This report examines cybersecurity standards for Distributed Energy Resources (DERs) in light of their rapid growth and increasing integration into energy systems. It identifies critical gaps in existing frameworks, including inadequate coverage of DER-specific challenges, complexities in implementing comprehensive standards, integration issues with legacy systems, adoption hurdles for newer standards, and a lack of harmonization across regulatory landscapes. The analysis highlights vulnerabilities such as data integrity risks, unauthorized device control, and denial-of-service attacks across various DER technologies like solar PV, wind turbines, energy storage systems, and hydrogen fuel cells. The report proposes a harmonization strategy to address these deficiencies by developing unified cybersecurity requirements, certification programs, and training resources while fostering collaboration among stakeholders such as government agencies, industry groups, DER operators, manufacturers, and research institutions. A phased roadmap is outlined to refine and implement these measures through pilot testing and widespread adoption. Ultimately, the report underscores the urgent need for coordinated efforts to enhance DER cybersecurity and ensure the reliable operation of future energy systems.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

DOE OSTI2026

Cyber Halo Innovation Research Program (CHIRP) Student Research Report: Program Analysis

The Cybersecurity and Space Systems Research Program (CHIRP) conducted multi-year, mission-focused research addressing emerging cybersecurity challenges affecting space and ground systems. Students from California State University San Bernardino (CSUSB), University of Texas El Paso (UTEP), and California State University Dominguez Hills (CSUDH) conducted structured research, developed proof-of-concept demonstrations, participated in applied cybersecurity training, and collaborated with Space Systems Command (SSC), academic, and industry partners. This report documents the research questions, methodologies, findings, demonstrations, and student contributions associated with each cohort. It also summarizes the program’s workforce-development outcomes, including applied cybersecurity training, professional certifications, technical credentials, and partnerships with organizations such as CT Cubed, Inc. and ISC2. Collectively, CHIRP strengthened the space-cybersecurity workforce pipeline and produced research and prototype efforts that may inform future cybersecurity assessments, test and evaluation activities, cyber-range development, acquisition planning, operational training, and mission-assurance initiatives.

McKenzie, Penny L.↗

NASA NTRS1975

Apollo Soyuz Test Project photographic processing control plan

The laboratory controls to be used within the photographic technology division (PTD) for processing original space flight films exposed on the Apollo Soyuz Test Project mission are specified. The sensitometric exposures to be used by PTD for certifying processes, for exposing Houston Controls, and for preflight and postflight exposures on original films as well as procedures for film certification are described. Processing conditions used to achieve each control and processing machine operating parameters are included.

Lockwood, H. E.↗

NASA NTRS1986

Digital avionics systems - Overview of FAA/NASA/industry-wide briefing

The effects of incorporating digital technology into the design of aircraft on the airworthiness criteria and certification procedures for aircraft are investigated. FAA research programs aimed at providing data for the functional assessment of aircraft which use digital systems for avionics and flight control functions are discussed. The need to establish testing, assurance assessment, and configuration management technologies to insure the reliability of digital systems is discussed; consideration is given to design verification, system performance/robustness, and validation technology.

Larsen, William E.↗

NASA NTRS2000

Flying Qualities Evaluation of a Commuter Aircraft With an Ice Contaminated Tailplane

During the NASA/FAA (Federal Aviation Administration) Tailplane Icing Program, pilot evaluations of aircraft flying qualities were conducted with various ice shapes attached to the horizontal tailplane of the NASA Twin Otter Icing Research Aircraft. Initially, only NASA pilots conducted these evaluations, assessing the differences in longitudinal flight characteristics between the baseline or clean aircraft, and the aircraft configured with an Ice Contaminated Tailplane (ICT). Longitudinal tests included Constant Airspeed Flap Transitions, Constant Airspeed Thrust Transitions, zero-G Pushovers, Repeat Elevator Doublets, and Simulated Approach and Go-Around tasks. Later in the program, guest pilots from government and industry were invited to fly the NASA Twin Otter configured with a single full-span artificial ice shape attached to the leading edge of the horizontal tailplane. This shape represented ice formed due to a 'Failed Boot' condition, and was generated from tests in the Glenn Icing Research Tunnel on a full-scale tailplane model. Guest pilots performed longitudinal handling tests, similar to those conducted by the NASA pilots, to evaluate the ICT condition. In general, all pilots agreed that longitudinal flying qualities were degraded as flaps were lowered, and further degraded at high thrust settings. Repeat elevator doublets demonstrated reduced pitch damping effects due to ICT, which is a characteristic that results in degraded flying qualities. Pilots identified elevator control force reversals (CFR) in zero-G pushovers at a 20 deg flap setting, a characteristic that fails the FAR 25 no CFR certification requirement. However, when the same pilots used the Cooper-Harper rating scale to perform a simulated approach and go-around task at the 20 deg flap setting, they rated the airplane as having Level I and Level II flying qualities respectively. By comparison, the same task conducted at the 30 deg flap setting, resulted in Level II flying qualities for the approach portion, and Level III for the go-around portion.The results of this program indicate that safe and acceptable flying qualities with an ICT condition, can be effectively assessed by task-oriented pilot maneuvers. In addition, other maneuvers such as repeat elevator doublets provide good qualitative and quantitative assessments of pitch damping and elevator effectiveness, which are characteristics that correlate well with pilot task ratings. The results of this testing indicate that the FAR 25 zero-G pushover maneuver, which requires no CFR during its execution, may be an overly conservative pass/fail criteria for aircraft certification.

Ranaudo, Richard J.↗

NASA NTRS2018

A Persistent Simulation Environment for Autonomous Systems

The age of Autonomous Unmanned Aircraft Systems (AUAS) is creating new challenges for the accreditation and certification requiring new standards, policies and procedures that sanction whether a UAS is safe to fly. Establishing a basis for certification of autonomous systems via research into trust and trustworthiness is the focus of Autonomy Teaming and TRAjectories for Complex Trusted Operational Reliability (ATTRACTOR), a new NASA Convergent Aeronautics Solution (CAS) project. Simulation Environments to test and evaluate AUAS decision making may be a low-cost solution to help certify that various AUAS systems are trustworthy enough to be allowed to fly in current general and commercial aviation airspace. NASA is working to build a peer-to-peer persistent simulation (P3 Sim) environment. The P3 Sim will be a Massively Multiplayer Online (MMO) environment were AUAS avatars can interact with a complex dynamic environment and each other. The focus of the effort is to provide AUAS researchers a low-cost intuitive testing environment that will aid training for and assessment of decisions made by autonomous systems such as AUAS. This presentation focuses on the design approach and challenges faced in development of the P3 Sim Environment is support of investigating trustworthiness of autonomous systems.

Kelley, Benjamin N.↗

NASA NTRSDate not supplied

Soyuz Landing Reconstructions

Introduction: Recent data show a landing-attributed injury rate among Soyuz crew members to be higher than predicted in original certification analysis. New vehicles being developed for NASA are being certified using analytical tools to quantify injury risk. This assessment will provide data to allow the Agency to evaluate whether these tools are able to capture true injury risk and allow a comparison between Soyuz landings and upcoming vehicles. Methods: A finite element model (FEM) of the Soyuz descent module (DM) and its landing environment were developed to recreate Soyuz landing conditions. Occupant breakout models composed of the Soyuz seat and Sokol helmet were then developed to evaluate occupant response. These models included both anthropomorphic test device (ATD) and human body model (HBM) surrogates in three anthropometric sizes. A generalized distribution analysis of the Soyuz landing environment was performed using landing variable distributions from available literature. Results were used to identify trends in vehicle landing acceleration with landing conditions and to compare landing model injury risk predictions with those estimated in vehicle certification analysis. Next, historic Soyuz landings identified as inducing occupant injury during were reconstructed using the developed landing model and estimated landing conditions. Results and Discussion: This assessment demonstrated the capability of certification metrics, which include a combination of vehicle- and occupant-level injury risk analysis, to identify elevated injury risk landing conditions. However, the developed landing load predictions were limited by available vehicle and landing condition data. Additional data, particularly landing acceleration data specific to historic Soyuz landing conditions, would greatly enhance this assessment’s findings.

Preston Greenhalgh↗

DOE OSTI2023

Ventilation: Fume Hoods Self-Study Course # 48002

This course presents an overview of the requirements and safe work practices for the use of engineered ventilation controls (EVCs) at Los Alamos National Laboratory (LANL). EVCs addressed in this manual include fume hoods, local exhaust ventilation (LEV) systems other than fume hoods, portable and in-place high-efficiency particulate air (HEPA) filtration systems. Requirements from LANL Procedure P101-16, Industrial Ventilation (non-HVACR) that address EVC certification and use, along with responsibilities of workers who use EVCs and the responsible line managers (RLMs) of such workers, are also presented. Per 101-16, 6.1, workers who use, maintain, or certify (i.e., inspect and test) fume hoods, or Persons in Charge (PICs) who oversee others in those tasks, must complete this course.

42 ENGINEERING↗

DOE OSTI2023

CYVET: A Cyber-Physical Assurance Framework Based on a Semi-Supervised Vetting Approach

The project is designed to directly address the needs described in the Topic Area 4 (“Cybersecurity Verification and Validation”) of the CEDS’19 Research Call. The proposed CYVET system directly addresses the need to elevate the current industry capabilities to verify and validate OT cybersecurity and associated control system infrastructure. Currently, there is a significant gap in the energy sector’s capability in that regard during infrastructure improvement, equipment procurement, and compliance certification. CYVET provides that needed capability. CYVET is device and architecture agnostic and thus broadly applicable across the energy sector. The goal of this project is to develop and deliver a cybersecurity verification and validation framework testing capability to verify and validate OT equipment, software, and the underlying control system architecture. The primary project objectives are (i) Verification: the synthesis and reconciliation of standards and vendor supplied features, (ii) Validation: the generation, execution, and presentation of testing scripts of verified security features, and (3) Demonstration: apply the developed technology capabilities for verification and validation at a relevant end-user facility in the energy sector.

Lopez Jr, Juan↗

NASA NTRS2017

Assessment of Intralaminar Progressive Damage and Failure Analysis Using an Efficient Evaluation Framework

Reducing the timeline for development and certification for composite structures has been a long standing objective of the aerospace industry. This timeline can be further exacerbated when attempting to integrate new fiber-reinforced composite materials due to the large number of testing required at every level of design. computational progressive damage and failure analysis (PDFA) attempts to mitigate this effect; however, new PDFA methods have been slow to be adopted in industry since material model evaluation techniques have not been fully defined. This study presents an efficient evaluation framework which uses a piecewise verification and validation (V&V) approach for PDFA methods. Specifically, the framework is applied to evaluate PDFA research codes within the context of intralaminar damage. Methods are incrementally taken through various V&V exercises specifically tailored to study PDFA intralaminar damage modeling capability. Finally, methods are evaluated against a defined set of success criteria to highlight successes and limitations.

Hyder, Imran↗