Search NASASearch

SEARCH · Search NASA

Results for “certification coding”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 91 records · Page 5

Structural dynamics: Probabilistic structural analysis methods. Program overview

A brief description is provided of the fundamental aspects of a quantification process. Progress since the last structural durability conference in 1989 is summarized. The methodology to date and that to be developed during the life of the program is presented. The uncertain factors are presented. The approach is outlined that is required to achieve component and/or system certification in the shortest possible time for affordable reliability risk. Two new elements appear in a block diagram: (1) uncertainties in human factor, and (2) uncertainties in the computer code. Research to quantify the uncertainties in the human factor was initiated and is discussed.

Chamis, Christos C.

Simulation of Aircraft Engine Blade-Out Structural Dynamics

A primary concern of aircraft structure designers is the accurate simulation of the blade-out event and the subsequent windmilling of the engine. Reliable simulations of the blade-out event are required to insure structural integrity during flight as well as to guarantee successful blade-out certification testing. The system simulation includes the lost blade loadings and the interactions between the rotating turbomachinery and the remaining aircraft structural components. General-purpose finite element structural analysis codes such as MSC NASTRAN are typically used and special provisions are made to include transient effects from the blade loss and rotational effects resulting from the engine's turbomachinery. The present study provides the equations of motion for rotordynamic response including the effect of spooldown speed and rotor unbalance and examines the effects of these terms on a cantilevered rotor. The effect of spooldown speed is found to be greater with increasing spooldown rate. The parametric term resulting from the mass unbalance has a more significant effect on the rotordynamic response than does the spooldown term. The parametric term affects both the peak amplitudes as well as the resonant frequencies of the rotor.

Lawrence, Charles

Simulation of Aircraft Engine Blade-Out Structural Dynamics

A primary concern of aircraft structure designers is the accurate simulation of the blade-out event and the subsequent windmilling of the engine. Reliable simulations of the blade-out event are required to insure structural integrity during flight as well as to guarantee successful blade-out certification testing. The system simulation includes the lost blade loadings and the interactions between the rotating turbomachinery and the remaining aircraft structural components. General-purpose finite element structural analysis codes such as MSC NASTRAN are typically used and special provisions are made to include transient effects from the blade loss and rotational effects resulting from the engine's turbomachinery. The present study provides the equations of motion for rotordynamic response including the effect of spooldown speed and rotor unbalance and examines the effects of these terms on a cantilevered rotor. The effect of spooldown speed is found to be greater with increasing spooldown rate. The parametric term resulting from the mass unbalance has a more significant effect on the rotordynamic response than does the spooldown term. The parametric term affects both the peak amplitudes as well as the resonant frequencies of the rotor.

Lawrence, Charles

Group Capability Model

The Group Capability Model (GCM) is a software tool that allows an organization, from first line management to senior executive, to monitor and track the health (capability) of various groups in performing their contractual obligations. GCM calculates a Group Capability Index (GCI) by comparing actual head counts, certifications, and/or skills within a group. The model can also be used to simulate the effects of employee usage, training, and attrition on the GCI. A universal tool and common method was required due to the high risk of losing skills necessary to complete the Space Shuttle Program and meet the needs of the Constellation Program. During this transition from one space vehicle to another, the uncertainty among the critical skilled workforce is high and attrition has the potential to be unmanageable. GCM allows managers to establish requirements for their group in the form of head counts, certification requirements, or skills requirements. GCM then calculates a Group Capability Index (GCI), where a score of 1 indicates that the group is at the appropriate level; anything less than 1 indicates a potential for improvement. This shows the health of a group, both currently and over time. GCM accepts as input head count, certification needs, critical needs, competency needs, and competency critical needs. In addition, team members are categorized by years of experience, percentage of contribution, ex-members and their skills, availability, function, and in-work requirements. Outputs are several reports, including actual vs. required head count, actual vs. required certificates, CGI change over time (by month), and more. The program stores historical data for summary and historical reporting, which is done via an Excel spreadsheet that is color-coded to show health statistics at a glance. GCM has provided the Shuttle Ground Processing team with a quantifiable, repeatable approach to assessing and managing the skills in their organization. They now have a common frame of reference across NASA/contractor lines to communicate and mitigate any critical skills concerns.

Olejarski, Michael

Development of Advanced Verification and Validation Procedures and Tools for the Certification of Learning Systems in Aerospace Applications

Adaptive control technologies that incorporate learning algorithms have been proposed to enable automatic flight control and vehicle recovery, autonomous flight, and to maintain vehicle performance in the face of unknown, changing, or poorly defined operating environments. In order for adaptive control systems to be used in safety-critical aerospace applications, they must be proven to be highly safe and reliable. Rigorous methods for adaptive software verification and validation must be developed to ensure that control system software failures will not occur. Of central importance in this regard is the need to establish reliable methods that guarantee convergent learning, rapid convergence (learning) rate, and algorithm stability. This paper presents the major problems of adaptive control systems that use learning to improve performance. The paper then presents the major procedures and tools presently developed or currently being developed to enable the verification, validation, and ultimate certification of these adaptive control systems. These technologies include the application of automated program analysis methods, techniques to improve the learning process, analytical methods to verify stability, methods to automatically synthesize code, simulation and test methods, and tools to provide on-line software assurance.

Jacklin, Stephen

INL High-Performance and Sustainable Building Strategy

High-performance buildings are reliable, cost effective, and sustainable structures that minimize energy and water use, reduce solid waste and pollutant emissions, and limit the depletion of natural resources. High-performance buildings also provide a thermally and visually comfortable working environment that increases productivity for building occupants. As Idaho National Laboratory (INL) is the nation’s premier nuclear energy research laboratory, the physical infrastructure requires continual updating and repurposing to help accomplish that mission. INL’s infrastructure must incorporate high-performance sustainable design features to be fiscally responsible and reflect an image of innovation to the public and prospective employees. INL is a large consumer of energy with annual energy costs exceeding $16M. This High-Performance and Sustainable Building Strategy will help engineering and construction project teams design sustainable facilities, reduce life cycle operating costs, and support the INL net-zero plan while providing INL employees with a safe and healthy working environment. With these goals in mind, the recommendations described in this document are intended to form INL’s foundation for sustainable and high-performance building standards. This strategy incorporates the latest federal and Department of Energy (DOE) orders and directives, including DOE Order 436.1A, “Departmental Sustainability,” the DOE Sustainability Plan (SP), the INL Site Sustainability Plan (SSP), and Code of Federal Regulations (CFR). This document identifies the requirements of the “Guiding Principles for Sustainable Federal Buildings” (Guiding Principles) and briefly highlights the Leadership in Energy and Environmental Design (LEED) Gold certification. LEED Gold certification can be used to meet many of the requirements of the Guiding Principles.

29 ENERGY PLANNING, POLICY, AND ECONOMY

Evidence Arguments for Using Formal Methods in Software Certification

We describe a generic approach for automatically integrating the output generated from a formal method/tool into a software safety assurance case, as an evidence argument, by (a) encoding the underlying reasoning as a safety case pattern, and (b) instantiating it using the data produced from the method/tool. We believe this approach not only improves the trustworthiness of the evidence generated from a formal method/tool, by explicitly presenting the reasoning and mechanisms underlying its genesis, but also provides a way to gauge the suitability of the evidence in the context of the wider assurance case. We illustrate our work by application to a real example-an unmanned aircraft system- where we invoke a formal code analysis tool from its autopilot software safety case, automatically transform the verification output into an evidence argument, and then integrate it into the former.

Argumentation

Close out the Critical Commitment for System Wide Safety’s Technical Challenge 3 (TC 3)

- Deliver validated methods and recommended practices to reduce certification costs for ground and onboard vehicle guidance and control systems through expanded acceptability of analysis as evidence for certification FY 2022. - Communicate results to maximize public awareness of the research and transfer capabilities via a set of on-demand training seminars and supporting materials including reports, publications and open source software codes where applicable.

Joseph C Coughlan

ASME Section VIII Recertification of a 33,000 Gallon Vacuum-jacketed LH2 Storage Vessel for Densified Hydrogen Testing at NASA Kennedy Space Center

The Ground Operations Demonstration Unit for Liquid Hydrogen (GODU-LH2) has been developed at NASA Kennedy Space Center in Florida. GODU-LH2 has three main objectives: zero-loss storage and transfer, liquefaction, and densification of liquid hydrogen. A cryogenic refrigerator has been integrated into an existing, previously certified, 33,000 gallon vacuum-jacketed storage vessel built by Minnesota Valley Engineering in 1991 for the Titan program. The dewar has an inner diameter of 9.5 and a length of 71.5; original design temperature and pressure ranges are -423 F to 100 F and 0 to 95 psig respectively. During densification operations the liquid temperature will be decreased below the normal boiling point by the refrigerator, and consequently the pressure inside the inner vessel will be sub-atmospheric. These new operational conditions rendered the original certification invalid, so an effort was undertaken to recertify the tank to the new pressure and temperature requirements (-12.7 to 95 psig and -433 F to 100 F respectively) per ASME Boiler and Pressure Vessel Code, Section VIII, Division 1. This paper will discuss the unique design, analysis and implementation issues encountered during the vessel recertification process.

Liquefaction

International Space Station Electric Power System Performance Code-SPACE

The System Power Analysis for Capability Evaluation (SPACE) software analyzes and predicts the minute-by-minute state of the International Space Station (ISS) electrical power system (EPS) for upcoming missions as well as EPS power generation capacity as a function of ISS configuration and orbital conditions. In order to complete the Certification of Flight Readiness (CoFR) process in which the mission is certified for flight each ISS System must thoroughly assess every proposed mission to verify that the system will support the planned mission operations; SPACE is the sole tool used to conduct these assessments for the power system capability. SPACE is an integrated power system model that incorporates a variety of modules tied together with integration routines and graphical output. The modules include orbit mechanics, solar array pointing/shadowing/thermal and electrical, battery performance, and power management and distribution performance. These modules are tightly integrated within a flexible architecture featuring data-file-driven configurations, source- or load-driven operation, and event scripting. SPACE also predicts the amount of power available for a given system configuration, spacecraft orientation, solar-array-pointing conditions, orbit, and the like. In the source-driven mode, the model must assure that energy balance is achieved, meaning that energy removed from the batteries must be restored (or balanced) each and every orbit. This entails an optimization scheme to ensure that energy balance is maintained without violating any other constraints.

Hojnicki, Jeffrey

Ice Roughness in Short Duration SLD Icing Events

Ice accretion codes depend on models of roughness parameters to account for the enhanced heat transfer during the ice accretion process. While mitigating supercooled large droplet (SLD or Appendix O) icing is a significant concern for manufacturers seeking future vehicle certification due to the pending regulation, historical ice roughness studies have been performed using Appendix C icing clouds which exhibit mean volumetric diameters (MVD) much smaller than SLD clouds. Further, the historical studies of roughness focused on extracting parametric representations of ice roughness using multiple images of roughness elements. In this study, the ice roughness developed on a 21-in. NACA 0012 at 0deg angle of attack exposed to short duration SLD icing events was measured in the Icing Research Tunnel at the NASA Glenn Research Center. The MVD's used in the study ranged from 100 micrometer to 200 micrometers, in a 67 m/s flow, with liquid water contents of either 0.6 gm/cubic meters or 0.75 gm/cubic meters. The ice surfaces were measured using a Romer Absolute Arm laser scanning system. The roughness associated with each surface point cloud was measured using the two-dimensional self-organizing map approach developed by McClain and Kreeger (2013) resulting in statistical descriptions of the ice roughness.

Icing

Analysis of Near Simultaneous Jimsphere and AMPS High Resolution Wind Profiles

The high-resolution wind profile of the Automated Meteorological Profiling System (HRAMPS) is the proposed replacement for the Jimsphere measurement system used to support NASA Shuttle launches from the Eastern Test Range (ETR). Samples of twenty-six ETR near simultaneous Jimsphere and HRAMPS wind profiles were obtained for Shuttle program HRAMPS certification studies. Shuttle systems engineering certification is to ensure that spacecraft and launch vehicle systems performance and safety evaluations for each launch (derived from flight simulations with Jimsphere wind profile data bases) retain their validity when HRAMPS profiles are used on day-of-launch (DOL) in trajectory and loads simulations to support the commit-to-launch decision. This paper describes a statistical analysis of the near simultaneous profiles. In principle the differences between a Jimsphere profile and an HRAMPS profile should be attributed to tracking technology (radar versus GPS tracking of a Jimsphere flight element) and the method for derivation of wind vectors from the raw tracking data. In reality, it is not technically feasible to track the same Jimsphere balloon with the two systems. The aluminized Mylar surface of the standard Jimsphere flight element facilitates radar tracking, but it interferes with HRAMPS during simultaneous tracking. Suspending a radar reflector from an HRAMPS flight element (Jimsphere without aluminized coating) does not produce satisfactory Jimsphere profiles because of intermittent radar returns. Thus, differences between the Jimsphere and HRAMPS profiles are also attributed to differences in the trajectories of separate flight elements. Because of small sample size and a test period limited to one winter season, test measurements during extreme high winds aloft could not have been expected and did not occur. It is during the highest winds that the largest differences between Jimsphere and HRAMPS would occur because the distance between flight elements would be larger. Jimsphere radar tracking noise increases as a function of balloon displacement downrange. The Jimsphere data processing compensates for tracking signal/noise degradation by increasing the smoothing interval. The Jimsphere wind profile effective resolution is a function of downrange distance and altitude, whereas the effective resolution of the HRAMPS should be independent of those variables. The procedure used for editing Jimsphere spikes in Shuttle DOL profiles was not implemented for the Jimsphere profile measurements during the AMPS field tests. For this analysis a code was developed that essentially mimics DOL Jimsphere spike editing. Jimsphere profiles have somewhat more noise in the wavelength range less than 200m defined as the noise floor. No differences between Jimsphere and HRAMPS wind profile pairs have been found that would support denial of HRAMPS certification for application in Shuttle DOL applications. The reliability of the HRAMPS system, which is an important certification issue, is not addressed in this study.

Adelfang, S. I.

Comparison of Inlet Broadband Acoustic Liner Predictions to Quiet Technology Demonstrator 3 Flight Data

Companion acoustic liner attenuation predictions and flight data representative of certification conditions are analyzed to determine the validation quality and gain an understanding of current prediction shortcomings. These comparisons are limited to the inlet broadband component of fan noise. Two prediction methods are assessed: a traditional, semiempirical model, and a computational approach with a parabolic duct propagation code coupled with a Ffowcs Williams-Hawkings solver for free-field propagation. The semiempirical method is widely used for aircraft system noise predictions, but does not explicitly account for several physical parameters important for sound attenuation. The computational approach includes these effects, but requires a significant increase in cycle time. For the three-degree-of-freedom (3DOF) liner tested, both methods have a bias error less than 0.5 dB for cutback and takeoff power settings, and a much larger 3–4 dB bias for approach power setting. The standard deviation of each method varies between 1–2 dB for different conditions. The similar performance of both approaches illustrates that, in this instance, the additional complexity of the computational approach does not provide a clear improvement over the semiempirical method. Planned improvements to the numerical grid and source assumptions may result in reevaluation of this conclusion in later work.

aircraft system noise

Minimum Climb to Cruise Noise Trajectories Modeled for the High Speed Civil Transport

The proposed U.S. High Speed Civil Transport (HSCT) will revolutionize commercial air travel by providing economical supersonic passenger service to destinations worldwide. Unlike the high-bypass turbofan engines that propel today's subsonic airliners, HSCT engines will have much higher jet exhaust speeds. Jet noise, caused by the turbulent mixing of high-speed exhaust with the surrounding air, poses a significant challenge for HSCT engine designers. To resolve this challenge, engineers have designed advanced mixer rejector nozzles that reduce HSCT jet noise to airport noise certification levels by entraining and mixing large quantities of ambient air with the engines' jet streams. Although this works well during the first several minutes of flight, far away from the airport, as the HSCT gains speed and climbs, poor ejector inlet recovery and ejector ram drag contribute to poor thrust, making it advantageous to turn off the ejector. Doing so prematurely, however, can cause unacceptable noise levels to propagate to the ground, even when the aircraft is many miles from the airport. This situation lends itself ideally to optimization, where the aircraft trajectory, throttle setting, and ejector setting can be varied (subject to practical aircraft constraints) to minimize the noise propagated to the ground. A method was developed at the NASA Lewis Research Center that employs a variation of the classic energy state approximation: a trajectory analysis technique historically used to minimize climb time or fuel burned in many aircraft problems. To minimize the noise on the ground at any given throttle setting, high aircraft altitudes are desirable; but the HSCT may either climb quickly to high altitudes using a high, noisy throttle setting or climb more slowly at a lower, quieter throttle setting. An optimizer has been programmed into NASA's existing aircraft and noise analysis codes to balance these options by dynamically choosing the best altitude-velocity path and throttle setting history. The noise level standard, or metric, used in the optimizer should be one that accurately reflects the subjective annoyance levels of ground-based observers under the flight path. A variety of noise metrics are available, many of which are practical for airport-vicinity noise certification. Unlike airport noise, however, the HSCT's climb noise will be characterized by relatively low noise levels, long durations, and low-frequency spectra. The noise metrics used in these calculations are based on the recommendations of researchers at the NASA Langley Research Center, who have correlated the flyover noise annoyance levels of actual laboratory subjects with a variety of measurements. Analysis of data from this optimizer has shown that significant reductions in noise may be obtained with trajectory optimization. And since throttling operations are performed in the subsonic portion of the climb path (where thrust is plentiful), only small penalties in HSCT range or fuel performance occur.

Berton, Jeffrey J.

IKOS: A Framework for Static Analysis based on Abstract Interpretation (Tool Paper)

The RTCA standard (DO-178C) for developing avionic software and getting certification credits includes an extension (DO-333) that describes how developers can use static analysis in certification. In this paper, we give an overview of the IKOS static analysis framework that helps developing static analyses that are both precise and scalable. IKOS harnesses the power of Abstract Interpretation and makes it accessible to a larger class of static analysis developers by separating concerns such as code parsing, model development, abstract domain management, results management, and analysis strategy. The benefits of the approach is demonstrated by a buffer overflow analysis applied to flight control systems.

Abstract Interpretation

GCS programmer's manual

A variety of instructions to be used in the development of implementations of software for the Guidance and Control Software (GCS) project is described. This document fulfills the Radio Technical Commission for Aeronautics RTCA/DO-178A guidelines, 'Software Considerations in Airborne Systems and Equipment Certification' requirements for document No. 4, which specifies the information necessary for understanding and programming the host computer, and document No. 12, which specifies the software design and implementation standards that are applicable to the software development and testing process. Information on the following subjects is contained: activity recording, communication protocol, coding standards, change management, error handling, design standards, problem reporting, module testing logs, documentation formats, accuracy requirements, and programmer responsibilities.

Lowman, Douglas S.

A Requirements-Driven Optimization Method for Acoustic Liners Using Analytic Derivatives

More than ever, there is flexibility and freedom in acoustic liner design. Subject to practical considerations, liner design variables may be manipulated to achieve a target attenuation spectrum. But characteristics of the ideal attenuation spectrum can be difficult to know. Many multidisciplinary system effects govern how engine noise sources contribute to community noise. Given a hardwall fan noise source to be suppressed, and using an analytical certification noise model to compute a community noise measure of merit, the optimal attenuation spectrum can be derived using multidisciplinary systems analysis methods. In a previous paper on this subject, a method deriving the ideal target attenuation spectrum that minimizes noise perceived by observers on the ground was described. A simple code-wrapping approach was used to evaluate a community noise objective function for an external optimizer. Gradients were evaluated using a finite difference formula. The subject of this paper is an application of analytic derivatives that supply precise gradients to an optimization process. Analytic derivatives improve the efficiency and accuracy of gradient-based optimization methods and allow consideration of more design variables. In addition, the benefit of variable impedance liners is explored using a multi-objective optimization.

Aircraft Noise

Computational Icing Analysis on NASA’s SIDRM Geometry to Investigate Collection Efficiency

Computational icing analysis results were compared to experimental icing tunnel data including aerothermal (e.g. dry air) and supercooled water droplet rime-ice conditions from tests conducted in early 2022 at the NASA Icing Research Tunnel (IRT). The Simulated Intercompressor Duct Research Model (SIDRM) test article was used in this study, and its geometry represents the inter-compressor duct region of a turbofan engine. The test article’s purpose is to study the physics of supercooled water icing and ice crystal icing. This study compared three different icing codes: FENSAP-ICE (Eulerian approach), LEWICE3D (Lagrangian approach), and GlennICE (Lagrangian approach). All three icing codes were conducted on SIDRM’s complex body flow-field and compared to different experimental supercooled water rime runs. The test article instrumentation (pressure taps, thermocouples, etc.) and 3D laser scans of final ice shapes were used to compare against the different icing code simulations. The overall objectives are to understand how the icing codes handle capturing collection efficiency on the complex test article’s unheated surfaces. In the aerothermal cases, pressure tap readings matched the CFD results, but dry air CFD underpredicted thermocouple readings. Collection efficiency results from all three icing codes matched well together on the main body leading edge, main body slope, and the strut leading edges. All three icing codes underpredicted the final ice shape using a single-shot constant ice density approach, with more difficulty coming from the strut leading edge ice shape due to the swept wing like flow field. NASA’s overall goal for this effort is to develop computational icing tools to assist in the design and certification of engines for flight in icing conditions.

Supercooled icing, SIDRM, aerodynamics, computatio