Search NASA⌕ Search

SEARCH · Search NASA

Results for “ENGINE FAILURE INDICATOR”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 91 records · Page 5
All sourcesNASA NTRSDOE OSTI
NASA NTRS1993

STS-51 pad abort. OV103-engine 2033 (ME-2) fuel flowmeter sensor open circuit

The STS-51 initial launch attempt of Discovery (OV-103) was terminated on KSC launch pad 39B on 12 Aug. 1993 at 9:12 AM E.S.T. due to a sensor redundancy failure in the liquid hydrogen system of ME-2 (Engine 2033). The event description and time line are summarized. Propellant loading was initiated on 12 Aug. 1993 at 12:00 AM EST. All space shuttle main engine (SSME) chill parameters and Launch Commit Criteria (LCC) were nominal. At engine start plus 1.34 seconds a Failure Identification (FID) was posted against Engine 2033 for exceeding the 1800 spin intra-channel (A1-A2) Fuel Flowrate sensor channel qualification limit. The engine was shut down at 1.50 seconds followed by Engines 2032 and 2030. All shut down sequences were nominal and the mission was safely aborted. SSME Avionics hardware and software performed nominally during the incident. A review of vehicle data table (VDT) data and controller software logic revealed no failure indications other than the single FID 111-101, Fuel Flowrate Intra-Channel Test Channel A disqualification. Software logic was executed according to requirements and there was no anomalous controller software operation. Immediately following the abort, a Rocketdyne/NASA failure investigation team was assembled. The team successfully isolated the failure cause to an open circuit in a Fuel Flowrate Sensor. This type of failure has occurred eight previous times in ground testing. The sensor had performed acceptably on three previous flights of the engine and SSME flight history shows 684 combined fuel flow rate sensor channel flights without failure. The disqualification of an Engine 2 (SSME No. 2033) Fuel Flowrate sensor channel was a result of an instrumentation failure and not engine performance. All other engine operations were nominal. This disqualification resulted in an engine shutdown and safe sequential shutdown of all three engines prior to ignition of the solid boosters.

Source record↗
NASA NTRSDate not supplied

What Went Wrong: A Survey of Wildfire UAS Mishaps through Named Entity Recognition

Increasingly, unmanned aircraft systems (UAS) are being applied to wildfire incidents for tasks such as mapping, aerial ignition, and delivery. As a result, aviation incident reporting systems for wildfires are beginning to accumulate data related to UAS mishaps in wildfire response. In this research, we apply state-of-the-art natural language processing (NLP) techniques to develop a custom Named Entity Recognition (NER) model which extracts entities relevant to safety analysts. The custom NER model is built by fine-tuning an existing Bidirectional Encoder Representations from Transformers (BERT) model, resulting in a generalizable NER model that can extract engineering relevant entities including failure modes, causes, effects, control processes, and recommendations from failure-relevant text. This model performs passably, with a weighted average f1 score of 0.33 across entity types, indicating more labeled training data is needed. Extracted entities are used to form a Failure Modes and Effects Analysis (FMEA)-style survey of wildfire UAS mishaps reported using the SAFECOM system. Similar mishaps are manually clustered and reported as single rows within an FMEA. Foreach cluster, we compute frequency, severity, and overall riskin accordance with FAA standards. This methodology can beapplied as part of a broader safety management system totrack trends in mishaps (e.g., likelihood, severity) and discoverknowledge (e.g., causes, effects) that can be utilized to improvesafety outcomes and system performance.

Machine Learning↗
NASA NTRS1994

Develop advanced nonlinear signal analysis topographical mapping system

The Space Shuttle Main Engine (SSME) has been undergoing extensive flight certification and developmental testing, which involves some 250 health monitoring measurements. Under the severe temperature, pressure, and dynamic environments sustained during operation, numerous major component failures have occurred, resulting in extensive engine hardware damage and scheduling losses. To enhance SSME safety and reliability, detailed analysis and evaluation of the measurements signal are mandatory to assess its dynamic characteristics and operational condition. Efficient and reliable signal detection techniques will reduce catastrophic system failure risks and expedite the evaluation of both flight and ground test data, and thereby reduce launch turn-around time. The basic objective of this contract are threefold: (1) develop and validate a hierarchy of innovative signal analysis techniques for nonlinear and nonstationary time-frequency analysis. Performance evaluation will be carried out through detailed analysis of extensive SSME static firing and flight data. These techniques will be incorporated into a fully automated system; (2) develop an advanced nonlinear signal analysis topographical mapping system (ATMS) to generate a Compressed SSME TOPO Data Base (CSTDB). This ATMS system will convert tremendous amount of complex vibration signals from the entire SSME test history into a bank of succinct image-like patterns while retaining all respective phase information. High compression ratio can be achieved to allow minimal storage requirement, while providing fast signature retrieval, pattern comparison, and identification capabilities; and (3) integrate the nonlinear correlation techniques into the CSTDB data base with compatible TOPO input data format. Such integrated ATMS system will provide the large test archives necessary for quick signature comparison. This study will provide timely assessment of SSME component operational status, identify probable causes of malfunction, and indicate feasible engineering solutions. The final result of this program will yield an ATMS system of nonlinear and nonstationary spectral analysis software package integrated with the Compressed SSME TOPO Data Base (CSTDB) on the same platform. This system will allow NASA engineers to retrieve any unique defect signatures and trends associated with different failure modes and anomalous phenomena over the entire SSME test history across turbo pump families.

Source record↗
DOE OSTI2024

Physical Properties of Hilti HIT-RE 500 V3 After Irradiation: Slant Shear, Tensile, Flexural, and Compressive

There are various applications in which epoxy adhesives may be used within hot-cell environments. These epoxies currently see limited use within hot cells since it is known that organics see degradation after small doses even as low as 50 kilogray (kGy). These losses in physical property strengths limit the use of these epoxies to non-structural applications. In modern construction, however, the use of epoxies to bond structural components such as rebar or threaded anchors is becoming increasingly prevalent. To employ these types of materials the Idaho National Laboratory (INL) has begun investigating the specific degradation properties of epoxies for use in structural applications in environments where radiation is present. Hilti HIT-RE 500 V3 is used extensively in new construction and renovation projects across the world. The INL has conducted various tests on this epoxy for low dose environments. These tests include tensile, flexural, compression, and slant shear tests following the American Society for Testing Material International (ASTM) standards D638, D790, D695, and C882/882M respectively. Two sample sets for each test were created where the baseline specimens were not irradiated, and another set was irradiated to an accumulated dose of approximately 50-60 kGy. All the samples were destructively tested and analyzed focusing on the change in physical properties, examples of these tests are shown in Figures 1-4. Tensile testing results indicate a 0.9% loss in maximum load capacity, a 0.5% loss in tensile stress at maximum load, a 1.4% loss in tensile strain at break, and a 15% decrease in modulus of elasticity. Flexural testing results display an increase in all the following: 12% in strain at maximum load, 10% in maximum load capacity, 5% in stress at maximum load, and 3% in young’s modulus. The compressive physical properties after irradiation display a 1% increase in maximum load, a 3% decrease in stress at yield, and a 5% decrease in modulus of elasticity. The maximum compressive stress saw no measurable change after irradiation. The slant shear specimens after irradiation displayed a 2% increase in maximum load capacity and maximum compressive stress. Though a structural analysis would have to be completed as is normal for building design the increases and decreases in the measured physical properties indicate that this material may be used for structural applications in low dose hot-cell environments without adhesive failure.

36 MATERIALS SCIENCE↗
NASA NTRS1993

Develop advanced nonlinear signal analysis topographical mapping system

The SSME has been undergoing extensive flight certification and developmental testing, which involves some 250 health monitoring measurements. Under the severe temperature pressure, and dynamic environments sustained during operation, numerous major component failures have occurred, resulting in extensive engine hardware damage and scheduling losses. To enhance SSME safety and reliability, detailed analysis and evaluation of the measurements signal are mandatory to assess its dynamic characteristics and operational condition. Efficient and reliable signal detection techniques will reduce catastrophic system failure risks and expedite the evaluation of both flight and ground test data, and thereby reduce launch turn-around time. The basic objective of this contract are threefold: (1) Develop and validate a hierarchy of innovative signal analysis techniques for nonlinear and nonstationary time-frequency analysis. Performance evaluation will be carried out through detailed analysis of extensive SSME static firing and flight data. These techniques will be incorporated into a fully automated system. (2) Develop an advanced nonlinear signal analysis topographical mapping system (ATMS) to generate a Compressed SSME TOPO Data Base (CSTDB). This ATMS system will convert tremendous amounts of complex vibration signals from the entire SSME test history into a bank of succinct image-like patterns while retaining all respective phase information. A high compression ratio can be achieved to allow the minimal storage requirement, while providing fast signature retrieval, pattern comparison, and identification capabilities. (3) Integrate the nonlinear correlation techniques into the CSTDB data base with compatible TOPO input data format. Such integrated ATMS system will provide the large test archives necessary for a quick signature comparison. This study will provide timely assessment of SSME component operational status, identify probable causes of malfunction, and indicate feasible engineering solutions. The final result of this program will yield an ATMS system of nonlinear and nonstationary spectral analysis software package integrated with the Compressed SSME TOPO Data Base (CSTDB) on the same platform. This system will allow NASA engineers to retrieve any unique defect signatures and trends associated with different failure modes and anomalous phenomena over the entire SSME test history across turbo pump families.

Jong, Jen-Yi↗
NASA NTRS2006

Nitrile/Buna N Material Failure Assessment for an O-Ring used on the Gaseous Hydrogen Flow Control Valve (FCV) of the Space Shuttle Main Engine

After the rollout of Space Shuttle Discovery in April 2005 in preparation for return-to-flight, there was a failure of the Orbiter (OV-103) helium signature leak test in the gaseous hydrogen (GH2) system. Leakage was attributed to the Flow Control Valve (FCV) in Main Engine 3. The FCV determined to be the source of the leak for OV-103 is designated as LV-58. The nitrile/Buna N rubber O-ring seal was removed from LV-58, and failure analysis indicated radial cracks providing leak paths in one quadrant. Cracks were eventually found in 6 of 9 FCV O-rings among the three Shuttle Orbiters, though none were as severe as those for LV-58, OV-103. Testing by EM10 at MSFC on all 9 FCV O- rings included: laser dimensional, Shore A hardness and properties from a dynamic mechanical analyzer (DMA) and an Instron tensile machine. The following test data was obtained on the cracked quadrant of the LV-58, OV-103 O-ring: (1) the estimated compression set was only 9.5%, compared to none for the rest of the O-ring; (2) Shore A hardness for the O.D. was higher by almost 4 durometer points than for the rest of the O-ring; and (3) DMA data showed that the storage/elastic modulus E was almost 25% lower than for the rest of the O-ring. Of the 8 FCV O-rings tested on an Instron, 4 yielded tensile strengths that were below the MIL spec requirement of 1350 psi-a likely influence of rubber cracking. Comparisons were made between values of modulus determined by DNA (elastic) and Instron (Young s). Each nitrile/Buna N O-ring used in the FCV conforms to the MIL-P-25732C specification. A number of such O-rings taken from shelf storage at MSFC and Kennedy Space Center (KSC) were used to generate a reference curve of DMA glass transition temperature (Tg) vs. shelf storage time ranging from 8 to 26 years. A similar reference curve of TGA onset temperature (of rubber weight loss) vs. shelf storage time was also generated. The DMA and TGA data for the used FCV O-rings were compared to the reference curves. Correlations were also made between the DMA modulus (at 22 C) and Shore A hardness for all 9 of the FCV O-rings used among the three Shuttle Orbiters. The radial cracking in the FCV O-rings was determined to be due to ozone attack, as nitrile/Buna N rubber is susceptible to such attack. Nitrile/Buna N material under MIL-P25732C should be used in a hydraulic fluid environment to help protect it from cracking. However, the FCV O-rings were used in an air only environment. The FCV design has as much as a 9-mil gap that allows the O.D. of the O-ring to be directly exposed to ozone, pressurized air and some elevated temperatures, accelerating the weathering process that leads to O-ring cracking. Space Shuttle flights will likely not continue past 2010. Therefore, Shuttle management decided to continue using the nitrile/Buna N material for the FCVs, but have each O-ring replaced after 3 years to minimize any chances for crack initiation.

Wingard, Doug↗
NASA NTRS1985

Thermal barrier coating life prediction model development

A methodology was established to predict thermal barrier coating life in an environment simulative of that experienced by gas turbine airfoils. Specifically, work is being conducted to determine failure modes of thermal barrier coatings in the aircraft engine environment. Analytical studies coupled with appropriate physical and mechanical property determinations are being employed to derive coating life prediction model(s) on the important failure mode(s). An initial review of experimental and flight service components indicates that the predominant mode of TBC failure involves thermomechanical spallation of the ceramic coating layer. This ceramic spallation involves the formation of a dominant crack in the ceramic coating parallel to and closely adjacent to the metal-ceramic interface. Initial results from a laboratory test program designed to study the influence of various driving forces such as temperature, thermal cycle frequency, environment, and coating thickness, on ceramic coating spalling life suggest that bond coat oxidation damage at the metal-ceramic interface contributes significantly to thermomechanical cracking in the ceramic layer. Low cycle rate furnace testing in air and in argon clearly shows a dramatic increase of spalling life in the non-oxidizing environments.

Sheffler, K. D.↗
NASA NTRS1959

Performance of Two Boron-Modified S-816 Alloys in a Turbojet Engine Operated at 1650 F

S-816+B and modified S-816+B cast cobalt-base alloys were evaluated as turbine-bucket materials at 16500 F. Stress-rupture and tensile data obtained from these alloys had indicated satisfactory strength for engine operation at 1650 F. Although both alloys exhibited a limited ductility in room-temperature laboratory impact tests, there was a significant increase in impact resistance in the 1650 F tests. Bucket failures began after 10 hours of engine testing and continued at various intervals during the 107.5-hour test. Bucket lives were short relative to the predicted lives based on stress-rupture considerations (280 hr for S-816+B and 1750 hr for modified S-816+B). No significant difference was apparent in the performance of the two alloy groups. The primary cause of bucket failures in both alloys was mechanical fatigue. Impact damage occurred as a direct result of bucket tip fatigue failures and was a secondary cause of bucket failures. The impact of small pieces of fractured bucket tips on surrounding buckets caused a relatively large amount of impact damage to buckets of both alloys. The amount of impact damage from induced fractures at the bucket midspan, which provided relatively large failed fragments, was no greater than that which occurred as a result of tip failures.

Waters, William J.↗
NASA NTRS2008

Algorithms for Spectral Decomposition with Applications to Optical Plume Anomaly Detection

The analysis of spectral signals for features that represent physical phenomenon is ubiquitous in the science and engineering communities. There are two main approaches that can be taken to extract relevant features from these high-dimensional data streams. The first set of approaches relies on extracting features using a physics-based paradigm where the underlying physical mechanism that generates the spectra is used to infer the most important features in the data stream. We focus on a complementary methodology that uses a data-driven technique that is informed by the underlying physics but also has the ability to adapt to unmodeled system attributes and dynamics. We discuss the following four algorithms: Spectral Decomposition Algorithm (SDA), Non-Negative Matrix Factorization (NMF), Independent Component Analysis (ICA) and Principal Components Analysis (PCA) and compare their performance on a spectral emulator which we use to generate artificial data with known statistical properties. This spectral emulator mimics the real-world phenomena arising from the plume of the space shuttle main engine and can be used to validate the results that arise from various spectral decomposition algorithms and is very useful for situations where real-world systems have very low probabilities of fault or failure. Our results indicate that methods like SDA and NMF provide a straightforward way of incorporating prior physical knowledge while NMF with a tuning mechanism can give superior performance on some tests. We demonstrate these algorithms to detect potential system-health issues on data from a spectral emulator with tunable health parameters.

Srivastava, Askok N.↗
DOE OSTI2022

Experiments and modelling of adhesive failure initiation of an epoxy underfill: a study of electronic packaging survivability

Epoxy underfills can be implemented in electronic packaging to enhance solder joint reliability of surface mounted components. However, it is important for an engineer to have a failure criterion that can be used for failure predictions and redesign of electronic assemblies. For this study, data from epoxy bond failure in mock electronic part assemblies were correlated to finite element analyses to predict adhesive failure initiation. Experiments were performed to determine failure loads for various loading locations and nonlinear viscoelastic analyses were performed for the same loading locations to determine a maximum principal strain failure parameter. Predictions showed that a maximum principal strain failure parameter defined from one test could be used as an indicator of adhesive failure of an epoxy bond undergoing other modes of loading. Failure initiation predictions matched experimental data using a maximum principal strain failure parameter for an epoxy bond undergoing mixed modes of loading for both unfilled and alumina oxide filled 828DEA epoxy. Such experimental setup is deemed appropriate for future epoxy testing.

42 ENGINEERING↗
NASA NTRS2006

Analysis of Aircraft Control Performance using a Fuzzy Rule Base Representation of the Cooper-Harper Aircraft Handling Quality Rating

The Cooper-Harper rating of Aircraft Handling Qualities has been adopted as a standard for measuring the performance of aircraft since it was introduced in 1966. Aircraft performance, ability to control the aircraft, and the degree of pilot compensation needed are three major key factors used in deciding the aircraft handling qualities in the Cooper- Harper rating. We formulate the Cooper-Harper rating scheme as a fuzzy rule-based system and use it to analyze the effectiveness of the aircraft controller. The automatic estimate of the system-level handling quality provides valuable up-to-date information for diagnostics and vehicle health management. Analyzing the performance of a controller requires a set of concise design requirements and performance criteria. Ir, the case of control systems fm a piloted aircraft, generally applicable quantitative design criteria are difficult to obtain. The reason for this is that the ultimate evaluation of a human-operated control system is necessarily subjective and, with aircraft, the pilot evaluates the aircraft in different ways depending on the type of the aircraft and the phase of flight. In most aerospace applications (e.g., for flight control systems), performance assessment is carried out in terms of handling qualities. Handling qualities may be defined as those dynamic and static properties of a vehicle that permit the pilot to fully exploit its performance in a variety of missions and roles. Traditionally, handling quality is measured using the Cooper-Harper rating and done subjectively by the human pilot. In this work, we have formulated the rules of the Cooper-Harper rating scheme as fuzzy rules with performance, control, and compensation as the antecedents, and pilot rating as the consequent. Appropriate direct measurements on the controller are related to the fuzzy Cooper-Harper rating system: a stability measurement like the rate of change of the cost function can be used as an indicator if the aircraft is under control; the tracking error is a good measurement for performance needed in the rating scheme. Finally, the change of the control amount or the output of a confidence tool, which has been developed by the authors, can be used as an indication of pilot compensation. We use a number of known aircraft flight scenarios with known pilot ratings to calibrate our fuzzy membership functions. These include normal flight conditions and situations in which partial or complete failure of tail, aileron, engine, or throttle occurs.

Tseng, Chris↗
NASA NTRS1977

Failure detection and correction for turbofan engines

In this paper, a failure detection and correction strategy for turbofan engines is discussed. This strategy allows continuing control of the engines in the event of a sensor failure. An extended Kalman filter is used to provide the best estimate of the state of the engine based on currently available sensor outputs. Should a sensor failure occur the control is based on the best estimate rather than the sensor output. The extended Kalman filter consists of essentially two parts, a nonlinear model of the engine and up-date logic which causes the model to track the actual engine. Details on the model and up-date logic are presented. To allow implementation, approximations are made to the feedback gain matrix which result in a single feedback matrix which is suitable for use over the entire flight envelope. The effect of these approximations on stability and response is discussed. Results from a detailed nonlinear simulation indicate that good control can be maintained even under multiple failures.

Corley, R. C.↗
DOE OSTI2021

Effects of Electron Irradiation on Candidate Materials for Target Window in Accelerator-Driven Mo-99 Production

Room-temperature (RT) axial tensile tests were conducted in 2018 and 2021 with flat, sub-sized, dog-boned samples of non-irradiated and irradiated Inconel 718 and irradiated beryllium (Be). The sample gauge length was 7.62 mm. Tensile properties of interest are the engineering yield stress (YS), ultimate tensile stress (UTS), uniform elongation (UE) and total elongation (TE). The electron dose of the 2021 samples was ≈2 times the dose of samples tested in 2018. Relative dose rates of 0, 1 (2018), and 2 (2021) are assigned to these samples. The 2021 electron-irradiated Be samples were brittle with a low failure stress of 338±64 MPa based on two samples. The failures occurred in the gauge section. The 2018 results for electron-irradiated Be indicated a slight decrease in ductility and strength for the one electron-irradiated sample that failed in the gauge section.

38 RADIATION CHEMISTRY, RADIOCHEMISTRY, AND NUCLEA↗
DOE OSTI2022

A functional global sensitivity measure and efficient reliability sensitivity analysis with respect to statistical parameters

Sensitivity analysis and reliability assessment are two important aspects of structural and system safety. Epistemic uncertainty with respect to probabilistic model of input parameters due to lack of knowledge is present in many scarce-data applications and complicates the characterization of uncertainty in model response. In this article, we present two importance measures to evaluate the impact of distribution parameters on the probability distribution function (PDF) of the output and the failure probability. The epistemic uncertainty associated with the distribution parameters is modeled as random variables. Additionally, a modified extended polynomial chaos expansion (MEPCE) approach is introduced in which aleatory and epistemic random variables are modeled and propagated simultaneously while allowing the separate assessment for any single epistemic variable. A MEPCE-based kernel density estimation (KDE) construction provides a composite map from each epistemic variable to the response PDF. The functional global sensitivity index of the PDF with respect to the distribution parameters is thus derived, as a function of output, which is both more informative and more efficient than standard scalar sensitivity measures. Reliability sensitivity indices can be readily evaluated by integrating the global sensitivity index function over the failure zone. Three illustrative examples are used to demonstrate the proposed methodology.

42 ENGINEERING↗
NASA NTRS2000

U.S. Civil Rotorcraft Accidents, 1963 Through 1997

Narrative summary data produced by the U.S. National Transportation Safety Board (NTSB) has been obtained and analyzed for all 8,436 U.S. civil registered rotorcraft accidents which occurred from mid-1963 through 1997. This analysis was based on the NTSB's assignment of each mishap into one of 21 "first event" categories. The number of U.S. civil registered rotorcraft as recorded by the Federal Aviation Administration (FAA) for the same period has also been obtained. Taken together, these data indicate the civil rotorcraft accident rate (on a per 1,000 registered rotorcraft basis) has decreased by almost a factor of 10 (i.e., from 130 accidents per 1,000 rotorcraft in 1964 to 13.4 per 1,000 in 1997). Analysis of the mishap data indicates over 70% of the rotorcraft accidents were associated with one of the following four NTSB "first event" categories: 2408 Loss of engine power (28.5%); 1,322 In-flight collisions with objects (15.7%); 1,114 Loss of control (13.2%); 1,083 Airframe/component/system failure or malfunction (12.8%).

Harris, Franklin D.↗
NASA NTRS2012

Mars Science Laboratory Rover Integrated Pump Assembly Bellows Jamming Failure

The Mars Science Laboratory rover and spacecraft utilize two mechanically pumped fluid loops for heat transfer to and from the internal electronics assemblies and the Radioisotope Thermo-Electric Generator (RTG). The heat transfer fluid is Freon R-11 (CFC-11) which has a large coefficient of thermal expansion. The Freon within the heat transfer system must have a volume for safe expansion of the fluid as the system temperature rises. The device used for this function is a gas-over-liquid accumulator. The accumulator uses a metal bellows to separate the fluid and gas sections. During expansion and contraction of the fluid in the system, the bellows extends and retracts to provide the needed volume change. During final testing of a spare unit, the bellows would not extend the full distance required to provide the needed expansion volume. Increasing the fluid pressure did not loosen the jammed bellows either. No amount of stroking the bellows back and forth would get it to pass the jamming point. This type of failure, if it occurred during flight, would result in significant overpressure of the heat transfer system leading to a burst failure at some point in the system piping. A loss of the Freon fluid would soon result in a loss of the mission. The determination of the source of the jamming of the bellows was quite elusive, leading to an extensive series of tests and analyses. The testing and analyses did indicate the root cause of the failure, qualitatively. The results did not provide a set of dimensional limits for the existing hardware design that would guarantee proper operation of the accumulator. In the end, a new design was developed that relied on good engineering judgment combined with the test results to select a reliable enough solution that still met other physical constraints of the hardware, the schedule, and the rover system.

bellows↗
NASA NTRS1990

Simulated fault injection - A methodology to evaluate fault tolerant microprocessor architectures

A simulation-based fault-injection method for validating fault-tolerant microprocessor architectures is described. The approach uses mixed-mode simulation (electrical/logic analysis), and injects transient errors in run-time to assess the resulting fault impact. As an example, a fault-tolerant architecture which models the digital aspects of a dual-channel real-time jet-engine controller is used. The level of effectiveness of the dual configuration with respect to single and multiple transients is measured. The results indicate 100 percent coverage of single transients. Approximately 12 percent of the multiple transients affect both channels; none result in controller failure since two additional levels of redundancy exist.

Choi, Gwan S.↗
NASA NTRS2010

JANNAF Lessons Learned Panel Discussion

The difference between the AS-510 observed and predicted separation distance is attributed to a greater F-1 engine "tail off" impulse than that used in the separation distance prediction. . The F-1 thrust decay was normal and not appreciably different from previous (AS-505 through 509) flights. . Analysis indicates that with an S-IC stage having only four retro motors, failure of one retro motor to ignite would result in marginal separation distances and, in the 3-sigma case, re-contact of the two stages. . S-IC-11 and subsequent flight stages were equipped with eight retro motors rather than the planned four.

Richards, Steve↗