Search NASA⌕ Search

SEARCH · Search NASA

Results for “Failure Tolerance”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 109 records · Page 6

Redundant Strapdown Laser Gyro Navigation System

For the last several years, NASA has pursued the development of low-cost high-reliability inertial navigation systems that would satisfy a broad spectrum of future space and avionics missions. Two specific programs have culminated in the construction of a Redundant Strapdown Laser Gyro Navigation System. These two programs were for development of a space ultrareliable modular computer (SUMC) and a redundant laser gyro inertial measurement unit (IMU). The SUMC is a digital computer that employs state-of-the-art large-scale integrated circuits configured in a functional modular breakdown. The redundant laser gyro IMU is a six-pack strapdown sensor package in a dodecahedron configuration which uses six laser gyros to provide incremental angular positions and six accelerometers for linear velocity outputs. The sensor arrangement allows automatic accommodation of two failures; a third failure can be tolerated provided it can be determined. The navigation system also includes redundant power supplies, built-in test-equipment (BITE) circuits for failure detection, and software which provides for navigation, redundancy management, and automatic calibration and alignment.

Mcpherson, B. W.↗

CORSSTOL: Cylinder Optimization of Rings, Skin, and Stringers with Tolerance sensitivity

Cylinder Optimization of Rings, Skin, and Stringers with Tolerance (CORSSTOL) sensitivity is a design optimization program incorporating a method to examine the effects of user-provided manufacturing tolerances on weight and failure. CORSSTOL gives designers a tool to determine tolerances based on need. This is a decisive way to choose the best design among several manufacturing methods with differing capabilities and costs. CORSSTOL initially optimizes a stringer-stiffened cylinder for weight without tolerances. The skin and stringer geometry are varied, subject to stress and buckling constraints. Then the same analysis and optimization routines are used to minimize the maximum material condition weight subject to the least favorable combination of tolerances. The adjusted optimum dimensions are provided with the weight and constraint sensitivities of each design variable. The designer can immediately identify critical tolerances. The safety of parts made out of tolerance can also be determined. During design and development of weight-critical systems, design/analysis tools that provide product-oriented results are of vital significance. The development of this program and methodology provides designers with an effective cost- and weight-saving design tool. The tolerance sensitivity method can be applied to any system defined by a set of deterministic equations.

Finckenor, J.↗

NDE Technology Engineering Program for Hanford DST Non-Visual Volumetric Inspection Technology: Phase II RAVIS Radiation Tolerance Test Report

This test report provides the results of radiation tolerance robustness testing that was performed on samples of robotic components and an ultrasonic guided wave air-slot sensor that represent components/sub-systems of the Robotic Air-slot Volumetric Inspection System (RAVIS) that has been engineered for volumetric inspection of Hanford tank bottom plates via under-tank refractory pad air-slots. The specific components tested for 1) functionality during active irradiation and 2) tolerance to cumulative radiation dose (until failure or upon reaching a cumulative dose test limit) were: • four samples each of a printed circuit board (PCB) and direct current (DC) motor, which are robotic components, and • 26 ultrasonic piezoelectric elements (samples) inside an air-slot sensor. The robotic components are part of the RAVIS air-slot inspection crawler drive control system that is responsible for remote communication with and actuation of the air-slot inspection crawler. The failure of either of these components during under-tank deployment would require manual retrieval via the crawler’s tether, which risks damage to the robot/refractory/tank. Preemptive replacement of the components at appropriately conservative dose/time intervals informed by failure dose would reduce the likelihood of under-tank failure. The components were included in radiation tolerance testing to quantify their failure doses to inform replacement intervals. The air-slot sensor is responsible for collecting ultrasonic inspection data (scan images) for the tank bottom plates during under-tank deployment. Compromised signal quality due to elevated noise levels caused by gamma radiation would compromise inspection performance. The air-slot sensor was included in radiation tolerance testing to quantify the impact of active irradiation on sensor signal quality. The irradiation and in-situ functional tests of the PCBs, DC motors and air-slot sensor took place in June and July 2020 at the Pacific Northwest National Laboratory. Testing was performed at a gamma dose rate near 300 rad/hr., which, in the absence of under-tank dose rate data, has been conservatively estimated to be the upper-bound dose rate beneath the primary tanks at Hanford. Irradiation took place at elevated temperatures of 150-200°F to determine failure doses that reflect the compounding effects of gamma radiation and heat. The test results revealed: • The DC motors can tolerate being actively irradiated at the high dose rate at 200°F and can tolerate a cumulative dose of 300,000 rad, that which would be incurred after 5 years of service at the 300 rad/hr dose rate. The component therefore meets minimum and preferred radiation tolerance and lifecycle requirements for robotic components. • The air-slot sensor can tolerate being actively irradiated at the high dose rate at 150°F and can tolerate a cumulative dose of 60,000 rad, that which would be incurred after 1 year of service at the 300 rad/hr dose rate. The sensor therefore meets minimum radiation tolerance and lifecycle requirements. • The PCB can tolerate being actively irradiated at the high dose rate, but can only tolerate a cumulative dose of 19,000 rad at 150-200°F. The PCB does not meet minimum radiation tolerance and lifecycle requirements; however, because the component is considered replaceable, it can be replaced before a cumulative dose of 19,000 rad is reached, determined through either monitoring with a dosimeter or scheduled time intervals that are calculated based on conservative estimates of under-tank dose rates.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗

Failure models for textile composites

The goals of this investigation were to: (1) identify mechanisms of failure and determine how the architecture of reinforcing fibers in 3D woven composites controlled stiffness, strength, strain to failure, work of fracture, notch sensitivity, and fatigue life; and (2) to model composite stiffness, strength, and fatigue life. A total of 11 different angle and orthogonal interlock woven composites were examined. Composite properties depended on the weave architecture, the tow size, and the spatial distributions and strength of geometrical flaws. Simple models were developed for elastic properties, strength, and fatigue life. A more complicated stochastic model, called the 'Binary Model,' was developed for damage tolerance and ultimate failure. These 3D woven composites possessed an extraordinary combination of strength, damage tolerance, and notch insensitivity.

Cox, Brian↗

EUREX D: An expert system for failure diagnosis and recovery in the TCS of the European retrievable carrier EURECA

An expert system for diagnosis and recovery of failures in the Freon cooling loop of the European retrievable experiment carrier EURECA is described. The system demonstrates the feasibility of a functional scope of expert diagnostic systems which appears to be essential for practical applications of such systems in space technology. The scope includes early warning and treatment of incomplete information, fault tolerance, identification of failure superpositions, intelligent reaction to unforeseen events, and detailed status display for optimal recovery action.

Kellner, A.↗

RAMP - A fault tolerant distributed microcomputer structure for aircraft navigation and control

Design methodologies for realizing future high authority autoflight control systems are being investigated, taking into account also the study of distributed microcomputer architectures. Attention is given to the redundant asynchronous microprocessor (RAMP) structure. RAMP comprises a connected network of microcomputers which has as input command and sensor information, and which generates servo information to drive actuators, and thrust linkages. Tolerance to hardware failures is achieved by static redundancy. Results of a failed microcomputer are simply rejected. This is done in lieu of dynamic redundancy wherein the distributed computer system performs real time fault detection and reconfiguration of the system. Attention is given to the RAMP network structure and operation, flight control with parallel asynchronous computers, and intermittent fault tolerance.

Dunn, W. R.↗

FIRE: A Failure-Adaptive RL Framework for Edge Computing Migrations

In edge computing, users' service profiles are migrated between edge servers due to user mobility. Reinforcement Learning (RL) frameworks have been proposed to do so, often trained on simulated data. However, existing RL frameworks overlook occasional server failures, which although rare, impact latency-sensitive applications like AR/VR and real- time obstacle detection. These rare failures, being not adequately represented in historical training data, pose a challenge for data-driven RL algorithms. We introduce FIRE, a framework that adapts to rare events by training a RL policy in an edge computing digital twin environment. We propose FIRE-ImRE, an importance sampling-based Q-learning algorithm, which samples rare events proportionally to their impact on the value function. FIRE considers delay, migration, failure, and backup placement costs across individual and shared service profiles. We prove FIRE-ImRE's boundedness and convergence to optimality. Next, we introduce novel deep Q-learning (FIRE-ImDQL) and actor critic (FIRE-ImACRE) versions of our algorithm to enhance scalability. Here, we extend our framework to accommodate users with varying risk tolerances of rare failure events. Through trace-driven experiments, we show that FIRE reduces edge computing costs compared to vanilla RL and the greedy baseline in the event of failures.

Edge computing↗

Derivation and experimental verification of clock synchronization theory

The objective of this work is to validate mathematically derived clock synchronization theories and their associated algorithms through experiment. Two theories are considered, the Interactive Convergence Clock Synchronization Algorithm and the Mid-Point Algorithm. Special clock circuitry was designed and built so that several operating conditions and failure modes (including malicious failures) could be tested. Both theories are shown to predict conservative upper bounds (i.e., measured values of clock skew were always less than the theory prediction). Insight gained during experimentation led to alternative derivations of the theories. These new theories accurately predict the clock system's behavior. It is found that a 100% penalty is paid to tolerate worst case failures. It is also shown that under optimal conditions (with minimum error and no failures) the clock skew can be as much as 3 clock ticks. Clock skew grows to 6 clock ticks when failures are present. Finally, it is concluded that one cannot rely solely on test procedures or theoretical analysis to predict worst case conditions. conditions.

INTERACTIVE CONVERGENCE CLOCK↗

ASME – Grappling with the Concept of Component Failure

ASME concepts of component failure. Definition for failure, functionality, damage tolerance, including Magnox reactors and AGRs. How ASME is addressing damage tolerance, and Section III division 5 Design, Classification, Reliability Target for SRC-1 components, Basic analysis approach, simple assessment, and full assessments, Reference to reliability and integrity management and strategy for graphite components.

36 MATERIALS SCIENCE↗

Voter-comparator-switch optimization study

The design optimization and simulation effort of the voter-comparator switch (VCS) element are described. The VCS is an adaptive voter element that performs failure detection and reconfiguration function in a computer system designed to tolerate any three single failures in a fail operational fail operational fail safe manner. Detailed logic equations were developed and the design was evaluated and refined using a logic level fault simulator.

Jurison, J.↗

Solid Freeform Fabrication of Continuous Fiber Reinforced Composites for Propulsion Applications

For propulsion related applications, materials must be able to demonstrate excellent ablation and oxidation resistance at temperature approaching 3500'C, adequate load bearing capabilities, non-catastrophic failure modes, and ability to withstand transient thermal shock. A potential list of propulsion-material property requirements includes, low density, high elastic modulus, low thermal-expansion coefficient, high thermal conductivity, excellent erosion and oxidation/corrosion resistance, and flaw-insensitivity. In many cases, they will also need to be able to be joined, survive thermal cycling and multi-axial stress states, and for reusable applications, the materials must maintain the above attributes after prolonged exposure to extremely harsh chemical environments. The final and possibly most important attribute for these materials are the need to be lower cost and readily available in large quantities. Recently, Advanced Ceramics Research, Inc. (ACR) has developed low cost, flexible- manufacturing processes for Zr & Hf-based carbon fiber reinforced composites, materials with good oxidation and ablation resistance up to 3500 C. This process, called Continuous Composite Co-extrusion (C(sup 3)), incorporates carbon fibers to fabricate 'in-situ' carbide and boride-matrix/carbon fiber composites. This is a variation of ACR's manufacturing process for low-cost structural ceramic materials called Fibrous Monoliths With carbon fiber reinforcements. Fibrous Monolithic materials have a distinct fibrous texture, consist of intertwined cells of a primary phase, separated by cell boundaries of a tailored secondary phase and show very high fracture energies, damage tolerance, and graceful failure. Since they are monolithic powder based composites-, they can be manufactured by conventional powder processing techniques using inexpensive raw materials. This combination of high performance and low cost is a breakthrough that could enable wider application of ceramics in high temperature applications. Typical volume fractions of the two phases are 80 to 95% for the cell phase and 5 to 20% for the interpenetrating cell boundary phase. ACR is currently developing an innovative solid freeform form fabrication (SFF) approach to produce Hf and Zr based ceramic composite components reinforced with continuous carbon fiber tows for critical structural components such as tubes and blisks. The process is simple, robust and will be widely applicable to a number of material systems. This technique was originally developed at the University of Delaware Center for Composite Materials (UD-CCM) for rapid fabrication of polymer matrix composites by a technique called automated tow placement or ATP. The current process is being developed in collaboration with UD-CCM. The paper will detail the freeform fabrication process to create low-cost ceramic fiber reinforced composites for high-temperature applications. The results of mechanical properties and microstructural characterization will be presented, together with examples of complex shapes and parts. It is believed that the process will be able to create complex shaped parts for propulsion applications at an order of magnitude lower cost than current CVI and PIP process.

Vaidyanathan, R.↗

Solid Free-Form Fabrication of Continuous Fiber Reinforced Composites for Propulsion Application

For propulsion related applications, materials must be able to demonstrate excellent ablation and oxidation resistance at temperature approaching 3500 C, adequate load bearing capabilities, non-catastrophic failure modes, and ability to withstand transient thermal shock. A potential list of propulsion-material property requirements includes, low density, high elastic modulus, low thermal-expansion coefficient, high thermal conductivity, excellent erosion and oxidation/corrosion resistance, and flaw-insensitivity. In many cases, they will also need to be able to be joined, survive thermal cycling and multi-axial stress states, and for reusable applications, the materials must maintain the above attributes after prolonged exposure to extremely harsh chemical environments. The final and possibly most important attribute for these materials are the need to be lower cost and readily available in large quantities. Recently, Advanced Ceramics Research, Inc. (ACR) has developed low cost, flexible-manufacturing processes for Zr & Hf-based carbon fiber reinforced composites, materials with good oxidation and ablation resistance up to 3500 C. This process, called Continuous Composite Co-extrusion (C(sup 3)), incorporates carbon fibers to fabricate 'in-situ' carbide and boride-matrix/carbon fiber composites. M is a variation of ACR's manufacturing process for low-cost structural ceramic materials called Fibrous Monoliths with carbon fiber reinforcements. Fibrous Monolithic materials have a distinct fibrous texture, consist of intertwined cells of a primary phase, separated by cell boundaries of a tailored secondary phase and show very high fracture energies, damage tolerance, and graceful failure. Since they are monolithic powder based composites; they can be manufactured by conventional powder processing techniques using inexpensive raw materials. This combination of high performance and low cost is a breakthrough that could enable wider application of ceramics in high temperature applications. Typical volume fractions of the two phases are 80 to 95% for the cell phase and 5 to 20% for the interpenetrating cell boundary phase. ACR is currently developing an innovative solid freeform form fabrication (SFF) approach to produce Hf and Zr based ceramic composite components reinforced with continuous carbon fiber tows for critical structural components such as tubes and blisks. The process is simple, robust and will be widely applicable to a number of material systems. This technique was originally developed at the University of Delaware Center for Composite Materials (UD-CCM) for rapid fabrication of polymer matrix composites by a technique called automated tow placement or ATP. The current process is being developed in collaboration with UD-CCM. The paper will detail the freeform fabrication process to create low-cost ceramic fiber reinforced composites for high-temperature applications. The results of mechanical properties and microstructural characterization will be presented, together with examples of complex shapes and parts. It is believed that the process will be able to create complex shaped parts for propulsion applications at an order of magnitude lower cost than current CVI and PIP processes.

Vaidyanathan, R.↗

A Byzantine-Fault Tolerant Self-Stabilizing Protocol for Distributed Clock Synchronization Systems

Embedded distributed systems have become an integral part of safety-critical computing applications, necessitating system designs that incorporate fault tolerant clock synchronization in order to achieve ultra-reliable assurance levels. Many efficient clock synchronization protocols do not, however, address Byzantine failures, and most protocols that do tolerate Byzantine failures do not self-stabilize. Of the Byzantine self-stabilizing clock synchronization algorithms that exist in the literature, they are based on either unjustifiably strong assumptions about initial synchrony of the nodes or on the existence of a common pulse at the nodes. The Byzantine self-stabilizing clock synchronization protocol presented here does not rely on any assumptions about the initial state of the clocks. Furthermore, there is neither a central clock nor an externally generated pulse system. The proposed protocol converges deterministically, is scalable, and self-stabilizes in a short amount of time. The convergence time is linear with respect to the self-stabilization period. Proofs of the correctness of the protocol as well as the results of formal verification efforts are reported.

Malekpour, Mahyar R.↗

A Byzantine-Fault Tolerant Self-Stabilizing Protocol for Distributed Clock Synchronization Systems

Embedded distributed systems have become an integral part of safety-critical computing applications, necessitating system designs that incorporate fault tolerant clock synchronization in order to achieve ultra-reliable assurance levels. Many efficient clock synchronization protocols do not, however, address Byzantine failures, and most protocols that do tolerate Byzantine failures do not self-stabilize. Of the Byzantine self-stabilizing clock synchronization algorithms that exist in the literature, they are based on either unjustifiably strong assumptions about initial synchrony of the nodes or on the existence of a common pulse at the nodes. The Byzantine self-stabilizing clock synchronization protocol presented here does not rely on any assumptions about the initial state of the clocks. Furthermore, there is neither a central clock nor an externally generated pulse system. The proposed protocol converges deterministically, is scalable, and self-stabilizes in a short amount of time. The convergence time is linear with respect to the self-stabilization period. Proofs of the correctness of the protocol as well as the results of formal verification efforts are reported.

Malekpour, Mahyar R.↗

Massively scalable workflows for quantum chemistry: BigChem and ChemCloud

Electronic structure theory, i.e., quantum chemistry, is the fundamental building block for many problems in computational chemistry. Here we present a new distributed computing framework (BigChem), which allows for an efficient solution of many quantum chemistry problems in parallel. BigChem is designed to be easily composable and leverages industry-standard middleware (e.g., Celery, RabbitMQ, and Redis) for distributed approaches to large scale problems. BigChem can harness any collection of worker nodes, including ones on cloud providers (such as AWS or Azure), local clusters, or supercomputer centers (and any mixture of these). BigChem builds upon MolSSI packages, such as QCEngine to standardize the operation of numerous computational chemistry programs, demonstrated here with Psi4, xtb, geomeTRIC, and TeraChem. BigChem delivers full utilization of compute resources at scale, offers a programable canvas for designing sophisticated quantum chemistry workflows, and is fault tolerant to node failures and network disruptions. We demonstrate linear scalability of BigChem running computational chemistry workloads on up to 125 GPUs. Finally, we present ChemCloud, a web API to BigChem and successor to TeraChem Cloud. ChemCloud delivers scalable and secure access to BigChem over the Internet.

37 INORGANIC, ORGANIC, PHYSICAL, AND ANALYTICAL CH↗

Results of the KRUSTY Nuclear System Test

The Kilowatt Reactor Using Stirling TechnologY (KRUSTY) was a prototypic nuclear-powered test of a 5-kW(thermal) Kilopower space reactor. This paper presents results from the KRUSTY nuclear system test, which operated the power system at various temperatures and power levels for 28 consecutive hours. The testing showed that the system operated as expected and that the reactor is highly tolerant of possible failure conditions and transients. The key feature demonstrated was the ability of the reactor to load-follow the demand of the power conversion system. The thermal power of the test ranged from 1.5 to 5.0 kW(thermal), with a fuel temperature up to 880°C. Each 80-W(electric)–rated Stirling converter produced ~90 W(electric) at a component efficiency of ~35% and an overall system efficiency of ~25%.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Design Considerations and Analysis of Multi-Level Erasure Coding in Large-Scale Data Centers

Multi-level erasure coding (MLEC) has seen large deployments in the field, but there is no in-depth study of design considerations for MLEC at scale. In this paper, we provide comprehensive design considerations and analysis of MLEC at scale. We introduce the design space of MLEC in multiple dimensions, including various code parameter selections, chunk placement schemes, and various repair methods. We quantify their performance and durability, and show which MLEC schemes and repair methods can provide the best tolerance against independent/correlated failures and reduce repair network traffic by orders of magnitude. To achieve this, we use various evaluation strategies including simulation, splitting, dynamic programming, and mathematical modeling. We also compare the performance and durability of MLEC with other EC schemes such as SLEC and LRC and show that MLEC can provide high durability with higher encoding throughput and less repair network traffic over both SLEC and LRC.

Wang, Meng↗

Reliability and performance experience with flat-plate photovoltaic modules

Statistical models developed to define the most likely sources of photovoltaic (PV) array failures and the optimum method of allowing for the defects in order to achieve a 20 yr lifetime with acceptable performance degradation are summarized. Significant parameters were the cost of energy, annual power output, initial cost, replacement cost, rate of module replacement, the discount rate, and the plant lifetime. Acceptable degradation allocations were calculated to be 0.0001 cell failures/yr, 0.005 module failures/yr, 0.05 power loss/yr, a 0.01 rate of power loss/yr, and a 25 yr module wear-out length. Circuit redundancy techniques were determined to offset cell failures using fault tolerant designs such as series/parallel and bypass diode arrangements. Screening processes have been devised to eliminate cells that will crack in operation, and multiple electrical contacts at each cell compensate for the cells which escape the screening test and then crack when installed. The 20 yr array lifetime is expected to be achieved in the near-term.

Ross, R. G., Jr.↗