Search NASA⌕ Search

SEARCH · Search NASA

Results for “safety certification”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 91 records · Page 5

Measurement System Analysis of a Novel Phase-Based Ultrasonic NDE Technique for Bond Strength Measurement

Fiber reinforced polymer parts have shown tremendous benefits in aerospace structural applications, but their qualification and certification for use in safety critical areas are currently hindered by the lack of a capable non-destructive evaluation (NDE) method or technique for the inspection of these adhesively bonded parts. Conventional NDE methods and techniques typically detect gross bond defects in a qualitative (Pass/Fail) manner. These techniques struggle to detect weak or kissing bonds. Also, there are no widely adopted NDE methods or techniques for measuring interfacial bond strength or detecting kissing bonds. Bond strength is currently ensured by process control and semi-destructive testing. Results from recent research from other authors, including but not limited to mechanical testing, have shown an excellent correlation between interfacial stiffness of an adhesively bonded joint and the adhesive bond strength of that joint. In this paper, a measurement system analysis (MSA) of a novel phase-based ultrasonic NDE Technique, developed at NASA Langley Research Center, is presented for bond strength measurement to assess at an increased level the measurement process and identify components of variation in that measurement process.

Ultrasound↗

International Space Station Acoustics – A Status Report

It is important to control acoustic noise aboard the International Space Station (ISS) to provide a satisfactory environment for voice communications, alarm audibility, and restful sleep, and to minimize the risk for hearing loss. Acoustic monitoring is an important part of the noise control process on ISS, providing critical data for trend analysis, noise exposure analysis, validation of acoustic analyses and predictions, and to provide strong evidence for ensuring crew health and safety, thus allowing Flight Certification. And since the primary noise sources on ISS include the environmental control and life support system’s air revitalization system (fans and airflow) and active thermal control system (pumps and water flow), acoustic monitoring will indicate changes in hardware noise emissions that may indicate system degradation or performance issues. This paper provides the current acoustic levels in the ISS modules and sleep stations, and is an update to the status presented in 2018. Since this last status report, noise levels have remained consistent, but issues with stalled fan noise and unexplained low frequency spectral peaks have caused some exceedances to requirements. Noise levels in the Russian Segment have either remained consistent or have been reduced slightly, except for the new Multipurpose Laboratory Module, which has some significant noise exceedances.

Christopher S Allen↗

AI/ML Components in Safety-Critical Aviation Systems: Selected Concepts and Underlying Principles

The objective of the AI Roadmap meeting is to engage with all stakeholders in aviation in an open conversation about our approach and the guiding principles that can help us in moving forward in the technological landscape of AI/ML. The objective of the Technical Exchange Meeting is to identify categories of safety concerns associated with having an AI component in the aircraft we identified in the previous Technical Exchange Meetings. The speakers will bring their experience to the discussion to stimulate active participation with all stakeholders.

Design Safety↗

Preliminary Assessment of Operational Hazards and Safety Requirements for Airborne Trajectory Management (ABTM) Roadmap Applications

A set of five developmental steps building from the NASA TASAR (Traffic Aware Strategic Aircrew Requests) concept are described, each providing incrementally more efficiency and capacity benefits to airspace system users and service providers, culminating in a Full Airborne Trajectory Management capability. For each of these steps, the incremental Operational Hazards and Safety Requirements are identified for later use in future formal safety assessments intended to lead to certification and operational approval of the equipment and the associated procedures. Two established safety assessment methodologies that are compliant with the FAA's Safety Management System were used leading to Failure Effects Classifications (FEC) for each of the steps. The most likely FEC for the first three steps, Basic TASAR, Digital TASAR, and 4D TASAR, is "No effect". For step four, Strategic Airborne Trajectory Management, the likely FEC is "Minor". For Full Airborne Trajectory Management (Step 5), the most likely FEC is "Major".

Cotton, William B.↗

Flight Testing and Real-Time System Identification Analysis of a UH-60A Black Hawk Helicopter with an Instrumented External Sling Load

Helicopter external air transportation plays an important role in today's world. For both military and civilian helicopters, external sling load operations offer an efficient and expedient method of handling heavy, oversized cargo. With the ability to reach areas otherwise inaccessible by ground transportation, helicopter external load operations are conducted in industries such as logging, construction, and fire fighting, as well as in support of military tactical transport missions. Historically, helicopter and load combinations have been qualified through flight testing, requiring considerable time and cost. With advancements in simulation and flight test techniques there is potential to substantially reduce costs and increase the safety of helicopter sling load certification. Validated simulation tools make possible accurate prediction of operational flight characteristics before initial flight tests. Real time analysis of test data improves the safety and efficiency of the testing programs. To advance these concepts, the U.S. Army and NASA, in cooperation with the Israeli Air Force and Technion, under a Memorandum of Agreement, seek to develop and validate a numerical model of the UH-60 with sling load and demonstrate a method of near real time flight test analysis. This thesis presents results from flight tests of a U.S. Army Black Hawk helicopter with various external loads. Tests were conducted as the U.S. first phase of this MOA task. The primary load was a container express box (CONEX) which contained a compact instrumentation package. The flights covered the airspeed range from hover to 70 knots. Primary maneuvers were pitch and roll frequency sweeps, steps, and doublets. Results of the test determined the effect of the suspended load on both the aircraft's handling qualities and its control system's stability margins. Included were calculations of the stability characteristics of the load's pendular motion. Utilizing CIFER(R) software, a method for near-real time system identification was also demonstrated during the flight test program.

McCoy, Allen H.↗

End User Acceptance - Requirements or Specifications, Certification, Testing

NASA follows top level safety requirement of two-failure tolerance (t hree levels of controls or design for minimum risk) to all catastroph ic hazards in the design of safe li-ion batteries for space use. ? R igorous development testing at appropriate levels to credible offnominal conditions and review of test data. ? Implement robust design con trols based on test results and test again to confirm safety at the a ppropriate levels. ? Stringent testing of all (100%) flight batteries (from button cells to large batteries).

Jeevarajan, Judith↗

A Program Certification Assistant Based on Fully Automated Theorem Provers

We describe a certification assistant to support formal safety proofs for programs. It is based on a graphical user interface that hides the low-level details of first-order automated theorem provers while supporting limited interactivity: it allows users to customize and control the proof process on a high level, manages the auxiliary artifacts produced during this process, and provides traceability between the proof obligations and the relevant parts of the program. The certification assistant is part of a larger program synthesis system and is intended to support the deployment of automatically generated code in safety-critical applications.

Denney, Ewen↗

Overarching Properties as Means of Compliance: An Industrial Case Study

The Overarching Properties (OPs) have been created by an inter-national working group and are being evaluated by the National Aeronautics and Space Administration (NASA), the Federal Aviation Administration (FAA), industry, and other certifying agencies in an effort to streamline certification processes. Their intent is to facilitate the use of alternative approaches and to al-low flexibility to combine the system, software, and complex hardware certification. The hope is that the FAA may eventually establish an Advisory Circular that offers the OPs as a Means of Compliance (MoC) for software approval (and eventually systems and hardware) by showing the product possesses the three OPs: Intent (specification of the intended behavior), Correctness (implementation of the intended behavior) and Innocuity (safety of unintended behavior). In the certification community, there is still a concern about the practicability of using such high level properties in certification. This paper aims to address that concern by showing possession of the OPs in an industrial case study using assurance arguments. The two main contributions of this paper are: a certification process based on OPs as Means of Compliance, and a certification argument for an on-board physical model of an UAV, as industrial example. We pro-pose a hybrid approach for the certification process that combines OPs with existing certification standards. Thus, OPs can be used for parts of a system that uses technologies that are not supported by current standards or for which existing standards require additional effort without commensurate additional safety assurance.

certification↗

In-Time Safety Management for Part 139 Airports

Today’s airports are complex multi-faceted ecosystems. Currently, of the 517 certificated airports, 270 are required to use safety management systems (SMSs) to identify and mitigate known hazards and emergent risks and to voluntarily share safety data with commercial operators and tenants. Airports manage a wide variety of hazards. These traffic hubs have direct responsibilities, such as removing foreign object debris from runways and taxiways and configuring runways to help prevent against incursions and tail strikes during takeoff. To ensure safety in the future NAS, the National Academies recommended an In-time Aviation Safety Management System (IASMS). An IASMS will employ services, functions, and capabilities (SFCs) to identify and mitigate hazards that are proactively and predictively managed based on data analytics of detected anomalies, precursors, and trends. SFCs would scale with airport complexity and environmental conditions using increasingly automated systems to respond proactively to hazards and, by using integrated data sources and predictive safety analytical methods, discover new, never before seen risks.

IASMS↗

Assessment of Aircraft Electric Engine Regulatory Special Conditions

This report provides a regulatory gap assessment of the Federal Aviation Administration (FAA) and the European Union Aviation Safety Agency (EASA) Special Conditions (SC) for electric engines. This information is presented to support ongoing international harmonization efforts for electric engine certification, to establish a level of safety consistent across regulatory bodies and equivalent to that of existing combustion engines. HS Advanced Concepts LLC assembled a team of subject-matter experts to develop a comprehensive comparison of the regulatory text of EASA SC E-19 and the FAA special conditions for the certification of electric engines. The team included Mr. Chris Baczynski of BAC Aerospace Inc. and Mr. Zach Kaufman, formerly with magniX.

aircraft certification↗

Structures and materials technology for hypersonic aerospacecraft

Major considerations in structural design of a transatmospheric aerospacecraft are discussed. The general direction of progress in structures and materials technology is indicated, and technical areas in structures and materials where further research and development is necessary are indicated. Various structural concepts under study and materials which appear to be most applicable are discussed. Structural design criteria are discussed with particular attention to the factor-of-safety approach and the probabilistic approach. Structural certification requirements for the aerospacecraft are discussed. The kinds of analyses and tests which would be required to certify the structural integrity, safety, and durability of the aerospacecraft are discussed, and the type of test facility needed to perform structural certification tests is identified.

Mccomb, Harvey G., Jr.↗

Evidence Arguments for Using Formal Methods in Software Certification

We describe a generic approach for automatically integrating the output generated from a formal method/tool into a software safety assurance case, as an evidence argument, by (a) encoding the underlying reasoning as a safety case pattern, and (b) instantiating it using the data produced from the method/tool. We believe this approach not only improves the trustworthiness of the evidence generated from a formal method/tool, by explicitly presenting the reasoning and mechanisms underlying its genesis, but also provides a way to gauge the suitability of the evidence in the context of the wider assurance case. We illustrate our work by application to a real example-an unmanned aircraft system- where we invoke a formal code analysis tool from its autopilot software safety case, automatically transform the verification output into an evidence argument, and then integrate it into the former.

Argumentation↗

Human workload in aviation

The application of human-factors analysis techniques to the evaluation of aircraft-crew workloads is discussed in an introductory overview. Consideration is given to the importance of workload for safety, crew size, automation, and certification; the definition and measurement of workload, physical vs mental workloads, subjective ratings, secondary tasks, biocybernetic measures, and attention and workload. Recent studies of pilot and ATC workloads are reviewed, and typical data are presented in graphs. Future trends are discussed, and it is predicted that increased cockpit automation will eventually require new methods to maintain operator attention rather than reduce workload.

Kantowitz, Barry H.↗

High-speed civil transport flight- and propulsion-control technological issues

Technology advances required in the flight and propulsion control system disciplines to develop a high speed civil transport (HSCT) are identified. The mission and requirements of the transport and major flight and propulsion control technology issues are discussed. Each issue is ranked and, for each issue, a plan for technology readiness is given. Certain features are unique and dominate control system design. These features include the high temperature environment, large flexible aircraft, control-configured empennage, minimizing control margins, and high availability and excellent maintainability. The failure to resolve most high-priority issues can prevent the transport from achieving its goals. The flow-time for hardware may require stimulus, since market forces may be insufficient to ensure timely production. Flight and propulsion control technology will contribute to takeoff gross weight reduction. Similar technology advances are necessary also to ensure flight safety for the transport. The certification basis of the HSCT must be negotiated between airplane manufacturers and government regulators. Efficient, quality design of the transport will require an integrated set of design tools that support the entire engineering design team.

Ray, J. K.↗

A Tool for Verification and Validation of Neural Network Based Adaptive Controllers for High Assurance Systems

High reliability of mission- and safety-critical software systems has been identified by NASA as a high-priority technology challenge. We present an approach for the performance analysis of a neural network (NN) in an advanced adaptive control system. This problem is important in the context of safety-critical applications that require certification, such as flight software in aircraft. We have developed a tool to measure the performance of the NN during operation by calculating a confidence interval (error bar) around the NN's output. Our tool can be used during pre-deployment verification as well as monitoring the network performance during operation. The tool has been implemented in Simulink and simulation results on a F-15 aircraft are presented.

Gupta, Pramod↗

Closing the Certification Gaps in Adaptive Flight Control Software

Over the last five decades, extensive research has been performed to design and develop adaptive control systems for aerospace systems and other applications where the capability to change controller behavior at different operating conditions is highly desirable. Although adaptive flight control has been partially implemented through the use of gain-scheduled control, truly adaptive control systems using learning algorithms and on-line system identification methods have not seen commercial deployment. The reason is that the certification process for adaptive flight control software for use in national air space has not yet been decided. The purpose of this paper is to examine the gaps between the state-of-the-art methodologies used to certify conventional (i.e., non-adaptive) flight control system software and what will likely to be needed to satisfy FAA airworthiness requirements. These gaps include the lack of a certification plan or process guide, the need to develop verification and validation tools and methodologies to analyze adaptive controller stability and convergence, as well as the development of metrics to evaluate adaptive controller performance at off-nominal flight conditions. This paper presents the major certification gap areas, a description of the current state of the verification methodologies, and what further research efforts will likely be needed to close the gaps remaining in current certification practices. It is envisioned that closing the gap will require certain advances in simulation methods, comprehensive methods to determine learning algorithm stability and convergence rates, the development of performance metrics for adaptive controllers, the application of formal software assurance methods, the application of on-line software monitoring tools for adaptive controller health assessment, and the development of a certification case for adaptive system safety of flight.

Jacklin, Stephen A.↗

NASA-STD-6001B Test 1 Upward Flame Propagation; Sample Length Impact on MOC Investigation

Understanding the combustion behavior of materials in the elevated oxygen environments of habitable spacecraft is of utmost importance to crew safety and mission success. Currently, certification for unrestricted flight usage of a material with respect to flammability involves passing the Upward Flame Propagation Test of NASA-STD-6001B (Test 1). This test evaluates materials in a standardized test configuration for two failure criteria: self-extinguishment within 15 cm (6 in.) and the propensity of flame propagation by means of flaming material transfer. By the NASA standard, full-length samples are 30 cm (12 in.) in length; however, factors independent of the test method such as limited material availability or various nonstandard test configurations limit the full pretest sample lengths available for test. This paper characterizes the dependence, if any, of pretest sample length on NASA-STD-6001B Test 1 results. Testing was performed using the Maximum Oxygen Concentration (MOC) Threshold Method to obtain a data set for each sample length tested. In addition, various material types, including cloth (Nomex), foam (TA-301) and solids (Ultem), were tested to investigate potential effects of test specimen types. Though additional data needs to be generated to provide statistical confidence, preliminary findings are that use of variable sample lengths has minimal impact on NASA-STD-6001B flammability performance and MOC determination.

Harper, Susana Tapia↗