Search NASA⌕ Search

SEARCH · Search NASA

Results for “SAFETY STANDARDS”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 91 records · Page 5

Wallops Ship Surveillance System

Approved as a Wallops control center backup system, the Wallops Ship Surveillance Software is a day-of-launch risk analysis tool for spaceport activities. The system calculates impact probabilities and displays ship locations relative to boundary lines. It enables rapid analysis of possible flight paths to preclude the need to cancel launches and allow execution of launches in a timely manner. Its design is based on low-cost, large-customer- base elements including personal computers, the Windows operating system, C/C++ object-oriented software, and network interfaces. In conformance with the NASA software safety standard, the system is designed to ensure that it does not falsely report a safe-for-launch condition. To improve the current ship surveillance method, the system is designed to prevent delay of launch under a safe-for-launch condition. A single workstation is designated the controller of the official ship information and the official risk analysis. Copies of this information are shared with other networked workstations. The program design is divided into five subsystems areas: 1. Communication Link -- threads that control the networking of workstations; 2. Contact List -- a thread that controls a list of protected item (ocean vessel) information; 3. Hazard List -- threads that control a list of hazardous item (debris) information and associated risk calculation information; 4. Display -- threads that control operator inputs and screen display outputs; and 5. Archive -- a thread that controls archive file read and write access. Currently, most of the hazard list thread and parts of other threads are being reused as part of a new ship surveillance system, under the SureTrak project.

Smith, Donna C.↗

Space Radiation Cancer, Circulatory Disease and CNS Risks for Near Earth Asteroid and Mars Missions: Uncertainty Estimates for Never-Smokers

The uncertainties in estimating the health risks from galactic cosmic rays (GCR) and solar particle events (SPE) are a major limitation to the length of space missions and the evaluation of potential risk mitigation approaches. NASA limits astronaut exposures to a 3% risk of exposure induced cancer death (REID), and protects against uncertainties in risks projections using an assessment of 95% confidence intervals after propagating the error from all model factors (environment and organ exposure, risk coefficients, dose-rate modifiers, and quality factors). Because there are potentially significant late mortality risks from diseases of the circulatory system and central nervous system (CNS) which are less well defined than cancer risks, the cancer REID limit is not necessarily conservative. In this report, we discuss estimates of lifetime risks from space radiation and new estimates of model uncertainties are described. The key updates to the NASA risk projection model are: 1) Revised values for low LET risk coefficients for tissue specific cancer incidence, with incidence rates transported to an average U.S. population to estimate the probability of Risk of Exposure Induced Cancer (REIC) and REID. 2) An analysis of smoking attributable cancer risks for never-smokers that shows significantly reduced lung cancer risk as well as overall cancer risks from radiation compared to risk estimated for the average U.S. population. 3) Derivation of track structure based quality functions depends on particle fluence, charge number, Z and kinetic energy, E. 4) The assignment of a smaller maximum in quality function for leukemia than for solid cancers. 5) The use of the ICRP tissue weights is shown to over-estimate cancer risks from SPEs by a factor of 2 or more. Summing cancer risks for each tissue is recommended as a more accurate approach to estimate SPE cancer risks. 6) Additional considerations on circulatory and CNS disease risks. Our analysis shows that an individual s history of smoking exposure has a larger impact on GCR risk estimates than amounts of radiation shielding or age at exposure (amongst adults). Risks for never-smokers compared to the average U.S. population are estimated to be reduced between 30% and 60% dependent on model assumptions. Lung cancer is the major contributor to the reduction for never-smokers, with additional contributions from circulatory diseases and cancers of the stomach, liver, bladder, oral cavity and esophagus, and leukemia. The relative contribution of CNS risks to the overall space radiation detriment is potentially increased for never-smokers such as most astronauts. Problems in estimating risks for former smokers and the influence of second-hand smoke are discussed. Compared to the LET approximation, the new track structure derived radiation quality functions lead to a reduced risk for relativistic energy particles and increased risks for intermediate energy particles. Revised estimates for the number of safe days in space at solar minimum for heavy shielding conditions are described for never-smokers and the average U.S. population. Results show that missions to near Earth asteroids (NEA) or Mars violate NASA's radiation safety standards with the current levels of uncertainties. Greater improvements in risk estimates for never-smokers are possible, and would be dependent on improved understanding of risk transfer models, and elucidating the role of space radiation on the various stages of disease formation (e.g. initiation, promotion, and progression).

Cucinotta, Francis A.↗

Using the Design for Demise Philosophy to Reduce Casualty Risk Due to Reentering Spacecraft

Recently the reentry of a number of vehicles has garnered public attention due to their risk of human casualty due to fragments surviving reentry. In order to minimize this risk for their vehicles, a number of NASA programs have actively sought to minimize the number of components likely to survive reentry at the end of their spacecraft's life in order to meet and/or exceed NASA safety standards for controlled and uncontrolled reentering vehicles. This philosophy, referred to as "Design for Demise" or D4D, has steadily been adopted, to at least some degree, by numerous programs. The result is that many programs are requesting evaluations of components at the early stages of vehicle design, as they strive to find ways to reduce the number surviving components while ensuring that the components meet the performance requirements of their mission. This paper will discuss some of the methods that have been employed to ensure that the consequences of the vehicle s end-of-life are considered at the beginning of the design process. In addition this paper will discuss the technical challenges overcome, as well as some of the more creative solutions which have been utilized to reduce casualty risk.

Kelley, R. L.↗

Improved Whole-Blood-Staining Device

Dramatic improvements have been made in NASA s Whole Blood Staining Device (WBSD) since it was last described in "Whole-Blood-Staining Device," NASA Tech Briefs, Vol. 23, No. 10 (October 1999), page 64. The new system has a longer shelf life, a simpler and more effective operational procedure, improved interface with instrumentation, and shorter processing time. More specifically, the improvements have targeted bag and locking clip materials, sampling ports, and air pocket prevention. The WBSD stains whole blood collected during spaceflight for subsequent flow cytometric analysis. In short, the main device stains white blood cells by use of monoclonal antibodies conjugated to various fluorochromes, followed by lysing and fixing of the cells by use of a commercial reagent that has been diluted according to NASA safety standards. This system is compact, robust, and does not require electric power, precise mixing, or precise incubation times. Figure 1 depicts the present improved version for staining applications, which is a poly(tetrafluoroethylene) bag with a Luer-lock port and plastic locking clips. An InterLink (or equivalent) intravenous- injection port screws into the Luer-lock port. The inflatable/collapsible nature of the bag facilitates loading and helps to minimize the amount of air trapped in the fully loaded bag. Some additional uses have been identified for the device beyond whole blood staining. The WBSD has been configured for functional assays that require culture of live cells by housing sterile culture media, mitogens, and fixatives prior to use [Figure 2(a)]. Simple injection of whole blood allows cell-stimulation culture to be performed in reduced gravity conditions, and product stabilization prior to storage, while protecting astronauts from liquid biohazardous materials. Also, the improved WBSD has reconstituted powdered injectable antibiotics by mixing them with diluent liquids [Figure 2(b)]. Although such mixing can readily be performed on Earth by shaking in glass vials, it cannot readily be performed this way in outer space without entraining air bubbles. The present device can be preloaded with the powder and diluent(s) in separate compartments. The powder and diluent( s) can be mixed, without introducing air bubbles, by removing the clip(s), then shaking. This use of the device could also be advantageous in terrestrial applications because it maintains the isolation of the constituents until the time of use.

Sams, Clarence F.↗

Software Safety Risk in Legacy Safety-Critical Computer Systems

Safety-critical computer systems must be engineered to meet system and software safety requirements. For legacy safety-critical computer systems, software safety requirements may not have been formally specified during development. When process-oriented software safety requirements are levied on a legacy system after the fact, where software development artifacts don't exist or are incomplete, the question becomes 'how can this be done?' The risks associated with only meeting certain software safety requirements in a legacy safety-critical computer system must be addressed should such systems be selected as candidates for reuse. This paper proposes a method for ascertaining formally, a software safety risk assessment, that provides measurements for software safety for legacy systems which may or may not have a suite of software engineering documentation that is now normally required. It relies upon the NASA Software Safety Standard, risk assessment methods based upon the Taxonomy-Based Questionnaire, and the application of reverse engineering CASE tools to produce original design documents for legacy systems.

Hill, Janice↗

Product Engineering Class in the Software Safety Risk Taxonomy for Building Safety-Critical Systems

When software safety requirements are imposed on legacy safety-critical systems, retrospective safety cases need to be formulated as part of recertifying the systems for further use and risks must be documented and managed to give confidence for reusing the systems. The SEJ Software Development Risk Taxonomy [4] focuses on general software development issues. It does not, however, cover all the safety risks. The Software Safety Risk Taxonomy [8] was developed which provides a construct for eliciting and categorizing software safety risks in a straightforward manner. In this paper, we present extended work on the taxonomy for safety that incorporates the additional issues inherent in the development and maintenance of safety-critical systems with software. An instrument called a Software Safety Risk Taxonomy Based Questionnaire (TBQ) is generated containing questions addressing each safety attribute in the Software Safety Risk Taxonomy. Software safety risks are surfaced using the new TBQ and then analyzed. In this paper we give the definitions for the specialized Product Engineering Class within the Software Safety Risk Taxonomy. At the end of the paper, we present the tool known as the 'Legacy Systems Risk Database Tool' that is used to collect and analyze the data required to show traceability to a particular safety standard

Hill, Janice↗

Application and Evaluation of Control Modes for Risk-Based Engine Performance Enhancements

The engine control system for civil transport aircraft imposes operational limits on the propulsion system to ensure compliance with safety standards. However, during certain emergency situations, aircraft survivability may benefit from engine performance beyond its normal limits despite the increased risk of failure. Accordingly, control modes were developed to improve the maximum thrust output and responsiveness of a generic high-bypass turbofan engine. The algorithms were designed such that the enhanced performance would always constitute an elevation in failure risk to a consistent predefined likelihood. This paper presents an application of these risk-based control modes to a combined engine/aircraft model. Through computer and piloted simulation tests, the aim is to present a notional implementation of these modes, evaluate their effects on a generic airframe, and demonstrate their usefulness during emergency flight situations. Results show that minimal control effort is required to compensate for the changes in flight dynamics due to control mode activation. The benefits gained from enhanced engine performance for various runway incursion scenarios are investigated. Finally, the control modes are shown to protect against potential instabilities during propulsion-only flight where all aircraft control surfaces are inoperable.

emergency operation↗

Application and Evaluation of Control Modes for Risk-Based Engine Performance Enhancements

The engine control system for civil transport aircraft imposes operational limits on the propulsion system to ensure compliance with safety standards. However, during certain emergency situations, aircraft survivability may benefit from engine performance beyond its normal limits despite the increased risk of failure. Accordingly, control modes were developed to improve the maximum thrust output and responsiveness of a generic high-bypass turbofan engine. The algorithms were designed such that the enhanced performance would always constitute an elevation in failure risk to a consistent predefined likelihood. This paper presents an application of these risk-based control modes to a combined engine/aircraft model. Through computer and piloted simulation tests, the aim is to present a notional implementation of these modes, evaluate their effects on a generic airframe, and demonstrate their usefulness during emergency flight situations. Results show that minimal control effort is required to compensate for the changes in flight dynamics due to control mode activation. The benefits gained from enhanced engine performance for various runway incursion scenarios are investigated. Finally, the control modes are shown to protect against potential instabilities during propulsion-only flight where all aircraft control surfaces are inoperable.

aircraft engine performance↗

Application and Evaluation of Control Modes for Risk-Based Engine Performance Enhancements

The engine control system for civil transport aircraft imposes operational limits on the propulsion system to ensure compliance with safety standards. However, during certain emergency situations, aircraft survivability may benefit from engine performance beyond its normal limits despite the increased risk of failure. Accordingly, control modes were developed to improve the maximum thrust output and responsiveness of a generic high-bypass turbofan engine. The algorithms were designed such that the enhanced performance would always constitute an elevation in failure risk to a consistent predefined likelihood. This paper presents an application of these risk-based control modes to a combined engine/aircraft model. Through computer and piloted simulation tests, the aim is to present a notional implementation of these modes, evaluate their effects on a generic airframe, and demonstrate their usefulness during emergency flight situations. Results show that minimal control effort is required to compensate for the changes in flight dynamics due to control mode activation. The benefits gained from enhanced engine performance for various runway incursion scenarios are investigated. Finally, the control modes are shown to protect against potential instabilities during propulsion-only flight where all aircraft control surfaces are inoperable.

emergency operation↗

NEO Test Stand Analysis

A project within SwampWorks is building a test stand to hold regolith to study how dust is ejected when exposed to the hot exhaust plume of a rocket engine. The test stand needs to be analyzed, finalized, and fabrication drawings generated to move forward. Modifications of the test stand assembly were made with Creo 2 modeling software. Structural analysis calculations were developed by hand to confirm if the structure will hold the expected loads while optimizing support positions. These calculations when iterated through MatLab demonstrated the optimized position of the vertical support to be 98'' from the far end of the stand. All remaining deflections were shown to be under the 0.6'' requirement and internal stresses to meet NASA Ground Support Equipment (GSE) Safety Standards. Though at the time of writing, fabrication drawings have yet to be generated, but are expected shortly after.

Internship↗

Understanding Current Safety Issues for Trajectory Based Operations

Increases in procedural complexity were investigated as a possible contributor to flight path deviations in airline operations. Understanding current operational issues and their causes must be embraced to maintain current safety standards while increasing future functionality. ASRS data and expert narratives were used to discover factors relating to pilot deviations. Our investigation pointed to ATC intervention, automation confusion, procedure design, and mixed equipment as primary issues. Future work will need to include objective data and mitigation strategies.

RNAV STAR↗

Assessment of lnternational Space Station (ISS) Lithium-ion Battery Thermal Runaway (TR)

This task was developed in the wake of the Boeing 787 Dreamliner lithium-ion battery TR incidents of January 2013 and January 2014. The Electrical Power Technical Discipline Team supported the Dreamliner investigations and has followed up by applying lessons learned to conduct an introspective evaluation of NASA's risk of similar incidents in its own lithium-ion battery deployments. This activity has demonstrated that historically NASA, like Boeing and others in the aerospace industry, has emphasized the prevention of TR in a single cell within the battery (e.g., cell screening) but has not considered TR severity-reducing measures in the event of a single-cell TR event. center dotIn the recent update of the battery safety standard (JSC 20793) to address this paradigm shift, the NASA community included requirements for assessing TR severity and identifying simple, low-cost severity reduction measures. This task will serve as a pathfinder for meeting those requirements and will specifically look at a number of different lithium-ion batteries currently in the design pipeline within the ISS Program batteries that, should they fail in a Dreamliner-like incident, could result in catastrophic consequences. This test is an abuse test to understand the heat transfer properties of the cell and ORU in thermal runaway, with radiant barriers in place in a flight like test in on orbit conditions. This includes studying the heat flow and distribution in the ORU. This data will be used to validate the thermal runaway analysis. This test does not cover the ambient pressure case. center dotThere is no pass/ fail criteria for this test.

Graika, Jason↗

UAS Autonomous Hazard Mitigation through Assured Compliance with Conformance Criteria

The behavior of a drone depends on the integrity of the data it uses and the reliability of the avionics systems that process that data to affect the operation of the aircraft. Commercial unmanned aircraft systems frequently rely on commercial-off-the-shelf and open source avionics components and data sources whose reliability and integrity are not easily assured. To mitigate failure events for aircraft that do not comply with conventional aviation safety standards, operational limitations are typically prescribed by regulators. Part 107 of the Federal Aviation Regulations serves as a good example of operational limitations that mitigate risk for small unmanned aircraft systems. These limitations, however, restrict growth possibilities for the industry. Any reasonable path toward achieving routine operation of all types of drones will have to address the need for assurance of avionics systems, especially their software. This paper discusses the possibility of strategically using assured systems as a stepping stone to routine operation of drones. A specimen system for assured geofencing, called Safeguard, is described as an example of such a stepping stone.

Dill, Evan, T.↗

Exploring Sustained Food Production in the Veggie Vegetable Production System

Since 2014, the Veggie vegetable production system on the International Space Station has intermittently supplied astronaut crews with fresh produce. To assess the potential for continuous crop production in Veggie and develop a baseline for future space crop production systems, a 120-day study was conducted to determine methodology for inputs, optimal yield, food safety standards, and crew involvement. ‘Amara’ mustard and ‘Red Russian’ kale were grown as initial crops, followed by ‘Extra Dwarf’ pakchoi and shungiku as final crops. Previous grow-outs in Veggie have included harvests at 28-35 days after initiation. In this study, a 56-day grow-out with multiple harvests from the same plants was compared to the conventional, single harvest Veggie schedule. Unlike previous Veggie studies which grew all plants simultaneously, this test staggered initiation and harvest, aiming for consistent and increased production. Plant pillows were initiated in pairs weekly and positioned to reduce shading. Completed pillows were immediately replaced with fresh ones. The multi-harvest scheme used fewer pillows, totaling 46% less pillow mass than the single harvest method. Yield varied by crop and harvest scheme, when compared as fresh edible biomass production across 56-day time increments. ‘Red Russian’ kale yielded similarly across harvest schemes. In the multiple-harvest schedule, ‘Amara’ mustard and shungiku yielded 23% to 25% higher, respectively, while ‘Extra Dwarf’ pakchoi had 43% lower yield. Microbial analysis of the plants indicated no culturable human pathogens. Microbial load of a given plant appeared to depend more on system age than plant age; across harvest methods, aerobic plate counts from final crops were higher than those of initial crops. This project also considered the complexity of crew involvement in a continuous production scenario. New crew procedures that periodically remove plant material from the Veggie root mat would be needed under continuous production to prevent potential pathogens and unpleasant odors. This study supports future space crop production scenarios and was funded by NASA’s Human Research Program.

Jess M Bunchek↗

Systems Health Monitoring: Integrating FMEA into Bayesian Networks

The foreseeable high traffic density suggests that a large number of electric propulsion systems will enter the airspace, and that they will also operate at high frequency, e.g., large number of take offs and landings per unit time. The reliability of such critical systems is therefore key to ensure high safety standards in the low-altitude airspace. Diagnostic systems, which aim at identifying incipient faults, can mitigate unexpected failures or lower-than-expected reliability by performing early fault detection by monitoring the systems. A key element of fault diagnosis is fault detection and isolation (FDI), which complexity increases with the complexity of the system itself, namely the number of subsystems and components, interactions among sub-systems, and the number of sensors available. The proposed approach leverages combination of failure mode and effect analysis (FMEA) integrated with Bayesian networks, thus introducing dependability structures into a diagnostic framework to aid FDI. Faults and failure events from the FMEA are mapped within a Bayesian network, where network edges replicate the links embedded within FMEAs. The integrated framework enables the fault isolation process by identifying the probability of occurrence of specific faults or root causes given evidence observed through sensor signals. In this work, sub systems of Urban Air Mobility (UAM) type vehicle like avionics, structures, power-train etc. are taken into account to show the approach at the system level. This work integrates early design phase in the development of UAM type vehicles with diagnostic tools, which are often developed later in the product life-cycle, or retrofitted at a later time on systems. Failure mode and effect analysis (FMEA) derived for the system in the design phase is embedded within a Bayesian network (BN).

UAM↗

Secure and Safe Assured Autonomy (S2A2)

Aviation’s future will likely see the integration of a wide variety of Advanced Air Mobility (AAM) systems including Unmanned Aerial Systems (UAS) for cargo/delivery, personal air vehicles, and commercial Urban Air Mobility (UAM)vehicles. However, substantial challenges exist that could delay (and possibly prevent) these developments and thus research is needed in a variety of areas to leverage technologies in autonomy, Air Traffic Management (ATM), multi-redundant flight systems architectures, and advanced wireless connectivity like 5G to meet these challenges. The goal of this ULI project is to develop new technologies and innovative operational concepts which will ensure safe, secure and robust integration of autonomous vehicles into Advanced Air Mobility-tailored transportation infrastructure. All this must be done while maintaining inter-operability with current civil air transportation systems and associated safety standards. The project is organized into four Technical Challenges (TCs) areas designed to provide unique UAM solutions and a transition roadmap for industry and government to utilize research product output.

Koushik Datta↗

Space Robot Operating System (Space ROS)

Space Robot Operating System (Space ROS) is an open-source software framework for flight-quality robotic and autonomous space systems. It combines the benefits of open-source software and flight software best-practices into a single framework. Space ROS is predicated on ROS2 and is therefore reusable, modular and adoptable. As an open-source framework, it is accessible to the global space community. Space ROS is intended to be compliant with NASA flight software engineering practices in order to facilitate meeting mission and safety standards. Space ROS has fault management and real-time capabilities at its core.

Will Chambers↗

Natural Language Understanding and Extraction of Flight Constraints Recorded in Letters of Agreement

This paper presents an automated information extraction and inference technique using natural language processing for extracting flight operational procedures and constraints embedded in heritage air traffic management documents. The extracted flight constraints can be digitized and fit into existing airspace information exchange models such as the Aeronautical Information Exchange Model (AIXM). This approach offers a digitized solution to disseminate airspace operating conditions to diverse air users and stakeholders in the National Airspace System (NAS). Furthermore, the digitized flight procedures can provide operational flexibility for emerging advanced air mobility providers and reduce traffic controller workload while maintaining current safety standards. To demonstrate this process, 1,972 Letters of Agreement (LOAs) have been selected for processing, named entity extraction, constraint identification and extraction. This dataset is derived from a subset of documents related to Air Route Traffic Control Centers (ARTCC) operations. We experimented with various traditional information extraction techniques, state-of-the-art machine learning and deep learning models to perform named entity recognition and pattern recognition on our dataset. We present the results from our experiments and demonstrate 99.0% F-1 score for named entity recognition, and a 96.6% accuracy for our entire workflow up to named entity recognition. We also discuss constraint definitions using generic patterned templates and extensions to this work in applying entity linking to digitally extracting relevant constraints.

Natural Language Processing↗