Search NASASearch

SEARCH · Search NASA

Results for “certification coding”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 91 records · Page 5

Evidence Arguments for Using Formal Methods in Software Certification

We describe a generic approach for automatically integrating the output generated from a formal method/tool into a software safety assurance case, as an evidence argument, by (a) encoding the underlying reasoning as a safety case pattern, and (b) instantiating it using the data produced from the method/tool. We believe this approach not only improves the trustworthiness of the evidence generated from a formal method/tool, by explicitly presenting the reasoning and mechanisms underlying its genesis, but also provides a way to gauge the suitability of the evidence in the context of the wider assurance case. We illustrate our work by application to a real example-an unmanned aircraft system- where we invoke a formal code analysis tool from its autopilot software safety case, automatically transform the verification output into an evidence argument, and then integrate it into the former.

Argumentation

Close out the Critical Commitment for System Wide Safety’s Technical Challenge 3 (TC 3)

- Deliver validated methods and recommended practices to reduce certification costs for ground and onboard vehicle guidance and control systems through expanded acceptability of analysis as evidence for certification FY 2022. - Communicate results to maximize public awareness of the research and transfer capabilities via a set of on-demand training seminars and supporting materials including reports, publications and open source software codes where applicable.

Joseph C Coughlan

ASME Section VIII Recertification of a 33,000 Gallon Vacuum-jacketed LH2 Storage Vessel for Densified Hydrogen Testing at NASA Kennedy Space Center

The Ground Operations Demonstration Unit for Liquid Hydrogen (GODU-LH2) has been developed at NASA Kennedy Space Center in Florida. GODU-LH2 has three main objectives: zero-loss storage and transfer, liquefaction, and densification of liquid hydrogen. A cryogenic refrigerator has been integrated into an existing, previously certified, 33,000 gallon vacuum-jacketed storage vessel built by Minnesota Valley Engineering in 1991 for the Titan program. The dewar has an inner diameter of 9.5 and a length of 71.5; original design temperature and pressure ranges are -423 F to 100 F and 0 to 95 psig respectively. During densification operations the liquid temperature will be decreased below the normal boiling point by the refrigerator, and consequently the pressure inside the inner vessel will be sub-atmospheric. These new operational conditions rendered the original certification invalid, so an effort was undertaken to recertify the tank to the new pressure and temperature requirements (-12.7 to 95 psig and -433 F to 100 F respectively) per ASME Boiler and Pressure Vessel Code, Section VIII, Division 1. This paper will discuss the unique design, analysis and implementation issues encountered during the vessel recertification process.

Liquefaction

International Space Station Electric Power System Performance Code-SPACE

The System Power Analysis for Capability Evaluation (SPACE) software analyzes and predicts the minute-by-minute state of the International Space Station (ISS) electrical power system (EPS) for upcoming missions as well as EPS power generation capacity as a function of ISS configuration and orbital conditions. In order to complete the Certification of Flight Readiness (CoFR) process in which the mission is certified for flight each ISS System must thoroughly assess every proposed mission to verify that the system will support the planned mission operations; SPACE is the sole tool used to conduct these assessments for the power system capability. SPACE is an integrated power system model that incorporates a variety of modules tied together with integration routines and graphical output. The modules include orbit mechanics, solar array pointing/shadowing/thermal and electrical, battery performance, and power management and distribution performance. These modules are tightly integrated within a flexible architecture featuring data-file-driven configurations, source- or load-driven operation, and event scripting. SPACE also predicts the amount of power available for a given system configuration, spacecraft orientation, solar-array-pointing conditions, orbit, and the like. In the source-driven mode, the model must assure that energy balance is achieved, meaning that energy removed from the batteries must be restored (or balanced) each and every orbit. This entails an optimization scheme to ensure that energy balance is maintained without violating any other constraints.

Hojnicki, Jeffrey

Ice Roughness in Short Duration SLD Icing Events

Ice accretion codes depend on models of roughness parameters to account for the enhanced heat transfer during the ice accretion process. While mitigating supercooled large droplet (SLD or Appendix O) icing is a significant concern for manufacturers seeking future vehicle certification due to the pending regulation, historical ice roughness studies have been performed using Appendix C icing clouds which exhibit mean volumetric diameters (MVD) much smaller than SLD clouds. Further, the historical studies of roughness focused on extracting parametric representations of ice roughness using multiple images of roughness elements. In this study, the ice roughness developed on a 21-in. NACA 0012 at 0deg angle of attack exposed to short duration SLD icing events was measured in the Icing Research Tunnel at the NASA Glenn Research Center. The MVD's used in the study ranged from 100 micrometer to 200 micrometers, in a 67 m/s flow, with liquid water contents of either 0.6 gm/cubic meters or 0.75 gm/cubic meters. The ice surfaces were measured using a Romer Absolute Arm laser scanning system. The roughness associated with each surface point cloud was measured using the two-dimensional self-organizing map approach developed by McClain and Kreeger (2013) resulting in statistical descriptions of the ice roughness.

Icing

Analysis of Near Simultaneous Jimsphere and AMPS High Resolution Wind Profiles

The high-resolution wind profile of the Automated Meteorological Profiling System (HRAMPS) is the proposed replacement for the Jimsphere measurement system used to support NASA Shuttle launches from the Eastern Test Range (ETR). Samples of twenty-six ETR near simultaneous Jimsphere and HRAMPS wind profiles were obtained for Shuttle program HRAMPS certification studies. Shuttle systems engineering certification is to ensure that spacecraft and launch vehicle systems performance and safety evaluations for each launch (derived from flight simulations with Jimsphere wind profile data bases) retain their validity when HRAMPS profiles are used on day-of-launch (DOL) in trajectory and loads simulations to support the commit-to-launch decision. This paper describes a statistical analysis of the near simultaneous profiles. In principle the differences between a Jimsphere profile and an HRAMPS profile should be attributed to tracking technology (radar versus GPS tracking of a Jimsphere flight element) and the method for derivation of wind vectors from the raw tracking data. In reality, it is not technically feasible to track the same Jimsphere balloon with the two systems. The aluminized Mylar surface of the standard Jimsphere flight element facilitates radar tracking, but it interferes with HRAMPS during simultaneous tracking. Suspending a radar reflector from an HRAMPS flight element (Jimsphere without aluminized coating) does not produce satisfactory Jimsphere profiles because of intermittent radar returns. Thus, differences between the Jimsphere and HRAMPS profiles are also attributed to differences in the trajectories of separate flight elements. Because of small sample size and a test period limited to one winter season, test measurements during extreme high winds aloft could not have been expected and did not occur. It is during the highest winds that the largest differences between Jimsphere and HRAMPS would occur because the distance between flight elements would be larger. Jimsphere radar tracking noise increases as a function of balloon displacement downrange. The Jimsphere data processing compensates for tracking signal/noise degradation by increasing the smoothing interval. The Jimsphere wind profile effective resolution is a function of downrange distance and altitude, whereas the effective resolution of the HRAMPS should be independent of those variables. The procedure used for editing Jimsphere spikes in Shuttle DOL profiles was not implemented for the Jimsphere profile measurements during the AMPS field tests. For this analysis a code was developed that essentially mimics DOL Jimsphere spike editing. Jimsphere profiles have somewhat more noise in the wavelength range less than 200m defined as the noise floor. No differences between Jimsphere and HRAMPS wind profile pairs have been found that would support denial of HRAMPS certification for application in Shuttle DOL applications. The reliability of the HRAMPS system, which is an important certification issue, is not addressed in this study.

Adelfang, S. I.

Comparison of Inlet Broadband Acoustic Liner Predictions to Quiet Technology Demonstrator 3 Flight Data

Companion acoustic liner attenuation predictions and flight data representative of certification conditions are analyzed to determine the validation quality and gain an understanding of current prediction shortcomings. These comparisons are limited to the inlet broadband component of fan noise. Two prediction methods are assessed: a traditional, semiempirical model, and a computational approach with a parabolic duct propagation code coupled with a Ffowcs Williams-Hawkings solver for free-field propagation. The semiempirical method is widely used for aircraft system noise predictions, but does not explicitly account for several physical parameters important for sound attenuation. The computational approach includes these effects, but requires a significant increase in cycle time. For the three-degree-of-freedom (3DOF) liner tested, both methods have a bias error less than 0.5 dB for cutback and takeoff power settings, and a much larger 3–4 dB bias for approach power setting. The standard deviation of each method varies between 1–2 dB for different conditions. The similar performance of both approaches illustrates that, in this instance, the additional complexity of the computational approach does not provide a clear improvement over the semiempirical method. Planned improvements to the numerical grid and source assumptions may result in reevaluation of this conclusion in later work.

aircraft system noise

Minimum Climb to Cruise Noise Trajectories Modeled for the High Speed Civil Transport

The proposed U.S. High Speed Civil Transport (HSCT) will revolutionize commercial air travel by providing economical supersonic passenger service to destinations worldwide. Unlike the high-bypass turbofan engines that propel today's subsonic airliners, HSCT engines will have much higher jet exhaust speeds. Jet noise, caused by the turbulent mixing of high-speed exhaust with the surrounding air, poses a significant challenge for HSCT engine designers. To resolve this challenge, engineers have designed advanced mixer rejector nozzles that reduce HSCT jet noise to airport noise certification levels by entraining and mixing large quantities of ambient air with the engines' jet streams. Although this works well during the first several minutes of flight, far away from the airport, as the HSCT gains speed and climbs, poor ejector inlet recovery and ejector ram drag contribute to poor thrust, making it advantageous to turn off the ejector. Doing so prematurely, however, can cause unacceptable noise levels to propagate to the ground, even when the aircraft is many miles from the airport. This situation lends itself ideally to optimization, where the aircraft trajectory, throttle setting, and ejector setting can be varied (subject to practical aircraft constraints) to minimize the noise propagated to the ground. A method was developed at the NASA Lewis Research Center that employs a variation of the classic energy state approximation: a trajectory analysis technique historically used to minimize climb time or fuel burned in many aircraft problems. To minimize the noise on the ground at any given throttle setting, high aircraft altitudes are desirable; but the HSCT may either climb quickly to high altitudes using a high, noisy throttle setting or climb more slowly at a lower, quieter throttle setting. An optimizer has been programmed into NASA's existing aircraft and noise analysis codes to balance these options by dynamically choosing the best altitude-velocity path and throttle setting history. The noise level standard, or metric, used in the optimizer should be one that accurately reflects the subjective annoyance levels of ground-based observers under the flight path. A variety of noise metrics are available, many of which are practical for airport-vicinity noise certification. Unlike airport noise, however, the HSCT's climb noise will be characterized by relatively low noise levels, long durations, and low-frequency spectra. The noise metrics used in these calculations are based on the recommendations of researchers at the NASA Langley Research Center, who have correlated the flyover noise annoyance levels of actual laboratory subjects with a variety of measurements. Analysis of data from this optimizer has shown that significant reductions in noise may be obtained with trajectory optimization. And since throttling operations are performed in the subsonic portion of the climb path (where thrust is plentiful), only small penalties in HSCT range or fuel performance occur.

Berton, Jeffrey J.

IKOS: A Framework for Static Analysis based on Abstract Interpretation (Tool Paper)

The RTCA standard (DO-178C) for developing avionic software and getting certification credits includes an extension (DO-333) that describes how developers can use static analysis in certification. In this paper, we give an overview of the IKOS static analysis framework that helps developing static analyses that are both precise and scalable. IKOS harnesses the power of Abstract Interpretation and makes it accessible to a larger class of static analysis developers by separating concerns such as code parsing, model development, abstract domain management, results management, and analysis strategy. The benefits of the approach is demonstrated by a buffer overflow analysis applied to flight control systems.

Abstract Interpretation

GCS programmer's manual

A variety of instructions to be used in the development of implementations of software for the Guidance and Control Software (GCS) project is described. This document fulfills the Radio Technical Commission for Aeronautics RTCA/DO-178A guidelines, 'Software Considerations in Airborne Systems and Equipment Certification' requirements for document No. 4, which specifies the information necessary for understanding and programming the host computer, and document No. 12, which specifies the software design and implementation standards that are applicable to the software development and testing process. Information on the following subjects is contained: activity recording, communication protocol, coding standards, change management, error handling, design standards, problem reporting, module testing logs, documentation formats, accuracy requirements, and programmer responsibilities.

Lowman, Douglas S.

A Requirements-Driven Optimization Method for Acoustic Liners Using Analytic Derivatives

More than ever, there is flexibility and freedom in acoustic liner design. Subject to practical considerations, liner design variables may be manipulated to achieve a target attenuation spectrum. But characteristics of the ideal attenuation spectrum can be difficult to know. Many multidisciplinary system effects govern how engine noise sources contribute to community noise. Given a hardwall fan noise source to be suppressed, and using an analytical certification noise model to compute a community noise measure of merit, the optimal attenuation spectrum can be derived using multidisciplinary systems analysis methods. In a previous paper on this subject, a method deriving the ideal target attenuation spectrum that minimizes noise perceived by observers on the ground was described. A simple code-wrapping approach was used to evaluate a community noise objective function for an external optimizer. Gradients were evaluated using a finite difference formula. The subject of this paper is an application of analytic derivatives that supply precise gradients to an optimization process. Analytic derivatives improve the efficiency and accuracy of gradient-based optimization methods and allow consideration of more design variables. In addition, the benefit of variable impedance liners is explored using a multi-objective optimization.

Aircraft Noise

Computational Icing Analysis on NASA’s SIDRM Geometry to Investigate Collection Efficiency

Computational icing analysis results were compared to experimental icing tunnel data including aerothermal (e.g. dry air) and supercooled water droplet rime-ice conditions from tests conducted in early 2022 at the NASA Icing Research Tunnel (IRT). The Simulated Intercompressor Duct Research Model (SIDRM) test article was used in this study, and its geometry represents the inter-compressor duct region of a turbofan engine. The test article’s purpose is to study the physics of supercooled water icing and ice crystal icing. This study compared three different icing codes: FENSAP-ICE (Eulerian approach), LEWICE3D (Lagrangian approach), and GlennICE (Lagrangian approach). All three icing codes were conducted on SIDRM’s complex body flow-field and compared to different experimental supercooled water rime runs. The test article instrumentation (pressure taps, thermocouples, etc.) and 3D laser scans of final ice shapes were used to compare against the different icing code simulations. The overall objectives are to understand how the icing codes handle capturing collection efficiency on the complex test article’s unheated surfaces. In the aerothermal cases, pressure tap readings matched the CFD results, but dry air CFD underpredicted thermocouple readings. Collection efficiency results from all three icing codes matched well together on the main body leading edge, main body slope, and the strut leading edges. All three icing codes underpredicted the final ice shape using a single-shot constant ice density approach, with more difficulty coming from the strut leading edge ice shape due to the swept wing like flow field. NASA’s overall goal for this effort is to develop computational icing tools to assist in the design and certification of engines for flight in icing conditions.

Supercooled icing, SIDRM, aerodynamics, computatio

Calculated X-ray Intensities Using Monte Carlo Algorithms: A Comparison to Experimental EPMA Data

Monte Carlo (MC) modeling has been used extensively to simulate electron scattering and x-ray emission from complex geometries. Here are presented comparisons between MC results and experimental electron-probe microanalysis (EPMA) measurements as well as phi(rhoz) correction algorithms. Experimental EPMA measurements made on NIST SRM 481 (AgAu) and 482 (CuAu) alloys, at a range of accelerating potential and instrument take-off angles, represent a formal microanalysis data set that has been widely used to develop phi(rhoz) correction algorithms. X-ray intensity data produced by MC simulations represents an independent test of both experimental and phi(rhoz) correction algorithms. The alpha-factor method has previously been used to evaluate systematic errors in the analysis of semiconductor and silicate minerals, and is used here to compare the accuracy of experimental and MC-calculated x-ray data. X-ray intensities calculated by MC are used to generate a-factors using the certificated compositions in the CuAu binary relative to pure Cu and Au standards. MC simulations are obtained using the NIST, WinCasino, and WinXray algorithms; derived x-ray intensities have a built-in atomic number correction, and are further corrected for absorption and characteristic fluorescence using the PAP phi(rhoz) correction algorithm. The Penelope code additionally simulates both characteristic and continuum x-ray fluorescence and thus requires no further correction for use in calculating alpha-factors.

Carpenter, P. K.

Computational Evaluation of Inlet Distortion on an Ejector Powered Hybrid Wing Body at Takeoff and Landing Conditions

Due to the aft, upper surface engine location on the Hybrid Wing Body (HWB) planform, there is potential to shed vorticity and separated wakes into the engine when the vehicle is operated at off-design conditions and corners of the envelope required for engine and airplane certification. CFD simulations were performed of the full-scale reference propulsion system, operating at a range of inlet flow rates, flight speeds, altitudes, angles of attack, and angles of sideslip to identify the conditions which produce the largest distortion and lowest pressure recovery. Pretest CFD was performed by NASA and Boeing, using multiple CFD codes, with various turbulence models. These data were used to make decisions regarding model integration, characterize inlet flow distortion patterns, and help define the wind tunnel test matrix. CFD was also performed post-test; when compared with test data, it was possible to make comparisons between measured model-scale and predicted full-scale distortion levels. This paper summarizes these CFD analyses.

Wind Tunnel Testing

SPACE: Three Decades of Spacecraft Power Systems Analysis with Fortran

The SPACE (System Power Analysis for Capability Evaluation) Fortran program developed at NASA Glenn Research Center has enabled power generation predictions and energy balance analyses for spacecraft electrical power systems (EPS) since 1988. SPACE was originally designed to analyze the EPS of the Space Station Freedom and continues to support certifications for visiting vehicles and extravehicular activities on the International Space Station today. Another version of SPACE currently supports design and mission planning operations for the Orion and Gateway vehicles as part of NASA’s Artemis program. In total, over 50 engineers have contributed to the development and use of SPACE on various platforms throughout its history. Ongoing code modernization efforts aim to generalize the program for use with different vehicles and configurations. While SPACE team analysts currently interact with the program via the command line, future development work also includes the creation of a graphical user interface for use by flight operations personnel. The SPACE code thus has a long legacy in spacecraft EPS analysis and will continue to play a critical role in future human spaceflight missions by leveraging the computational power of Fortran.

Fortran

Framework for Small-Scale Experiments in Software Engineering: Guidance and Control Software Project: Software Engineering Case Study

Software is becoming increasingly significant in today's critical avionics systems. To achieve safe, reliable software, government regulatory agencies such as the Federal Aviation Administration (FAA) and the Department of Defense mandate the use of certain software development methods. However, little scientific evidence exists to show a correlation between software development methods and product quality. Given this lack of evidence, a series of experiments has been conducted to understand why and how software fails. The Guidance and Control Software (GCS) project is the latest in this series. The GCS project is a case study of the Requirements and Technical Concepts for Aviation RTCA/DO-178B guidelines, Software Considerations in Airborne Systems and Equipment Certification. All civil transport airframe and equipment vendors are expected to comply with these guidelines in building systems to be certified by the FAA for use in commercial aircraft. For the case study, two implementations of a guidance and control application were developed to comply with the DO-178B guidelines for Level A (critical) software. The development included the requirements, design, coding, verification, configuration management, and quality assurance processes. This paper discusses the details of the GCS project and presents the results of the case study.

Hayhurst, Kelly J.

Verification Benchmarks and Validation of MAT261 for High Energy Dynamic Impact Applications

Advanced computational methods for composite structures can enable smarter testing and potentially certification by analysis. These methods, known as progressive damage and failure analysis (PDFA) methods, can predict lamina level mechanics including failure and subsequent propagation. When introduced into a commercial off the shelf finite element solver such as ABAQUS, LS-DYNA, or ANSYS, it enables end users to effectively exercise PDFA methods; however, it requires an understanding of the assumed mechanics and underlying coded response. In this paper, verification benchmarks developed under the NASA Advanced Composite Consortium for a class of PDFA methods known as continuum damage mechanics approaches are applied to the native LS-DYNA material model MAT261. As a result of the verification, an instability was discovered and subsequently corrected with an engineering solution. The results of the preliminary MAT261 simulations for high energy dynamic impact and the engineering solution are compared and a discussion about the significance is presented.

Molitor, Matthew

Fracture Mechanics for Composites: State of the Art and Challenges

Interlaminar fracture mechanics has proven useful for characterizing the onset of delaminations in composites and has been used with limited success primarily to investigate onset in fracture toughness specimens and laboratory size coupon type specimens. Future acceptance of the methodology by industry and certification authorities however, requires the successful demonstration of the methodology on the structural level. In this paper, the state-of-the-art in fracture toughness characterization, and interlaminar fracture mechanics analysis tools are described. To demonstrate the application on the structural level, a panel was selected which is reinforced with stringers. Full implementation of interlaminar fracture mechanics in design however remains a challenge and requires a continuing development effort of codes to calculate energy release rates and advancements in delamination onset and growth criteria under mixed mode conditions.

Krueger, Ronald