Search NASA⌕ Search

SEARCH · Search NASA

Results for “High safety”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 109 records · Page 6

Safety management of complex research operators

Complex research and technology operations present varied potential hazards which are addressed in a disciplined, independent safety review and approval process. Potential hazards vary from high energy fuels to hydrocarbon fuels, high pressure systems to high voltage systems, toxic chemicals to radioactive materials and high speed rotating machinery to high powered lasers. A Safety Permit System presently covers about 600 potentially hazardous operations. The Safety Management Program described is believed to be a major factor in maintaining an excellent safety record.

Brown, W. J.↗

Hypergol Systems: Design, Buildup, and Operation

This course was developed by personnel at the NASA JSC White Sands Test Facility in conjunction with the NASA Safety Training Center (NSTC). The NSTC was established in May 1991 by the NASA Headquarters Safety Directorate to provide up-to-date, high-quality, NASA specific safety training on location at NASA centers, or simultaneously to multiple centers over the Video Teleconferencing System (ViTS). Our desire is to establish and maintain a strong, long-lasting relationship with all NASA centers in order to fulfill your safety training needs on a cost-effective basis. Our ultimate goal is to provide a positive contribution to safe operations at NASA. NSTC Course 055 is a 2-day course discussing the safe usage of hypergols (hydrazine fuels and nitrogen tetroxide). During the course we will identify the hazards associated with hypergols including toxicity, reactivity, fire, and explosion. Management of risk is discussed in terms of the primary engineering controls design, buildup, and operation; and secondary controls personal protective equipment and detectors/monitors. The emphasis is on the design and buildup of compatible systems and the safe operation of these systems by technicians and engineers.

Baker, David↗

Exploring Li-Air Batteries for High Specific Energy and High Power Applications: A Simulation Study

Commercialization of lithium-air batteries face many challenges, such as electrolyte decomposition, short cycle life, low energy efficiency, low power density, etc. However, commercialization of Li-air batteries for mass sensitive applications such as electric vehicles, portable power source, and drones is more challenging due to additional constraints of safety, electrolyte evaporation, high specific energy requirements, and reliable discharge times. In this presentation, we will present our finite element simulation results comparing Li-O2 and Li-air batteries using power density, energy density, specific power, and discharge times as metrics to evaluate different electrolytes and electrode geometry to reduce total mass and maximize discharge current. We use a finite element model and a discharge product model developed in which is based on porous electrode and concentrated electrolyte theories and the discharge product is modeled using quantum tunneling; for reaction kinetics and oxygen diffusion, an improved model was used. The electrolyte properties such as ion conductivity and ion diffusion were obtained from Molecular Dynamics (MD) simulations while the other parameters for the finite element model were calibrated to match experiments at high discharge current densities (>1.5 mA/cm2). The mass densities of different electrolytes were computed using MD simulations as well. For this presentation, we examine the practical electrochemical mass of a system at different current ratings, the sensitivity of mass to the use of ambient air as compared to pure oxygen as well as the electrolyte, which affects maximum current density and the total mass associated with the electrolyte (which includes the mass of additional components), and, the optimization of battery geometry for total discharge time, average discharge voltage, maximum discharge current, and minimum electrochemical mass.

Mehta, M.↗

Generating Safety-Critical PLC Code From a High-Level Application Software Specification

The benefits of automatic-application code generation are widely accepted within the software engineering community. These benefits include raised abstraction level of application programming, shorter product development time, lower maintenance costs, and increased code quality and consistency. Surprisingly, code generation concepts have not yet found wide acceptance and use in the field of programmable logic controller (PLC) software development. Software engineers at Kennedy Space Center recognized the need for PLC code generation while developing the new ground checkout and launch processing system, called the Launch Control System (LCS). Engineers developed a process and a prototype software tool that automatically translates a high-level representation or specification of application software into ladder logic that executes on a PLC. All the computer hardware in the LCS is planned to be commercial off the shelf (COTS), including industrial controllers or PLCs that are connected to the sensors and end items out in the field. Most of the software in LCS is also planned to be COTS, with only small adapter software modules that must be developed in order to interface between the various COTS software products. A domain-specific language (DSL) is a programming language designed to perform tasks and to solve problems in a particular domain, such as ground processing of launch vehicles. The LCS engineers created a DSL for developing test sequences of ground checkout and launch operations of future launch vehicle and spacecraft elements, and they are developing a tabular specification format that uses the DSL keywords and functions familiar to the ground and flight system users. The tabular specification format, or tabular spec, allows most ground and flight system users to document how the application software is intended to function and requires little or no software programming knowledge or experience. A small sample from a prototype tabular spec application is shown.

Source record↗

Controller Inhibition of Automated Conflict Resolutions in a Maximum NextGen Condition

With the continued projection of increases in air traffic density, operations in the National Airspace System are expected to exceed human capabilities in the near future. In order to address the bottleneck of human workload capacity, highly automated safety-critical systems are under development to support air traffic controllers. A human-in-the-loop experiment examined controllers transition through four NextGen automation stages: Current-Day, Minimum, Moderate, and Maximum. Maximum NextGen simulated a fully automated environment where the automation was responsible for detecting and resolving conflicts within simulation parameters in high-density airspace. By allocating these tasks to the automation, the controllers task changed. The human moved to primarily a supervisory position- typically only regaining control over separation assurance tasks during conflict situations deferred by the automation. While tasks were allocated a-priori between the controller and automated agent, controllers maintained authority to inhibit the automation from interacting with particular aircraft. Preliminary work is complete, where significant differences were found in inhibition frequency between simulation participants. However, the contexts in which the controllers inhibited the automation, and their reasons for doing so, remain unclear. This analysis attempts to identity factors contributing to human controllers inhibition of the automation in the Maximum NextGen condition.

adaptable automation↗

Water Containment Systems for Testing High-Speed Flywheels

Water-filled containers are used as building blocks in a new generation of containment systems for testing high-speed flywheels. Such containment systems are needed to ensure safety by trapping high-speed debris in the event of centrifugal breakup or bearing failure. Traditional containment systems for testing flywheels consist mainly of thick steel rings. The effectiveness of this approach to shielding against high-speed debris was demonstrated in a series of tests.

Trase, Larry↗

Safety Performance of Small Lithium-Ion Cells in High Voltage Batteries

Topics covered include: Small-cell EAPU work done by NASA-JSC & COM DEV; Looking at safety features (short circuit protection - PTCs); Early tests showed that long strings do not withstand short circuit; a) Some PTCs experience large negative voltages; b) Destructive results. Solution: group cells into shorter substrings, with bypass diodes Work included: a) Tests with single cells shorted; b) Tests with single cells with imposed-negative voltages; c) 6s, 7s and 8s string shorts; and d) Tests with protection scheme in place, on 12s and 41s x 5p.

Cowles, Philip R.↗

Reliability and Maintainability Engineering - A Major Driver for Safety and Affordability

The United States National Aeronautics and Space Administration (NASA) is in the midst of an effort to design and build a safe and affordable heavy lift vehicle to go to the moon and beyond. To achieve that, NASA is seeking more innovative and efficient approaches to reduce cost while maintaining an acceptable level of safety and mission success. One area that has the potential to contribute significantly to achieving NASA safety and affordability goals is Reliability and Maintainability (R&M) engineering. Inadequate reliability or failure of critical safety items may directly jeopardize the safety of the user(s) and result in a loss of life. Inadequate reliability of equipment may directly jeopardize mission success. Systems designed to be more reliable (fewer failures) and maintainable (fewer resources needed) can lower the total life cycle cost. The Department of Defense (DOD) and industry experience has shown that optimized and adequate levels of R&M are critical for achieving a high level of safety and mission success, and low sustainment cost. Also, lessons learned from the Space Shuttle program clearly demonstrated the importance of R&M engineering in designing and operating safe and affordable launch systems. The Challenger and Columbia accidents are examples of the severe impact of design unreliability and process induced failures on system safety and mission success. These accidents demonstrated the criticality of reliability engineering in understanding component failure mechanisms and integrated system failures across the system elements interfaces. Experience from the shuttle program also shows that insufficient Reliability, Maintainability, and Supportability (RMS) engineering analyses upfront in the design phase can significantly increase the sustainment cost and, thereby, the total life cycle cost. Emphasis on RMS during the design phase is critical for identifying the design features and characteristics needed for time efficient processing, improved operational availability, and optimized maintenance and logistic support infrastructure. This paper discusses the role of R&M in a program acquisition phase and the potential impact of R&M on safety, mission success, operational availability, and affordability. This includes discussion of the R&M elements that need to be addressed and the R&M analyses that need to be performed in order to support a safe and affordable system design. The paper also provides some lessons learned from the Space Shuttle program on the impact of R&M on safety and affordability.

Safie, Fayssal M.↗

Design for Reliability and Safety Approach for the NASA New Launch Vehicle

The United States National Aeronautics and Space Administration (NASA) is in the midst of a space exploration program intended for sending crew and cargo to the international Space Station (ISS), to the moon, and beyond. This program is called Constellation. As part of the Constellation program, NASA is developing new launch vehicles aimed at significantly increase safety and reliability, reduce the cost of accessing space, and provide a growth path for manned space exploration. Achieving these goals requires a rigorous process that addresses reliability, safety, and cost upfront and throughout all the phases of the life cycle of the program. This paper discusses the "Design for Reliability and Safety" approach for the NASA new crew launch vehicle called ARES I. The ARES I is being developed by NASA Marshall Space Flight Center (MSFC) in support of the Constellation program. The ARES I consists of three major Elements: A solid First Stage (FS), an Upper Stage (US), and liquid Upper Stage Engine (USE). Stacked on top of the ARES I is the Crew exploration vehicle (CEV). The CEV consists of a Launch Abort System (LAS), Crew Module (CM), Service Module (SM), and a Spacecraft Adapter (SA). The CEV development is being led by NASA Johnson Space Center (JSC). Designing for high reliability and safety require a good integrated working environment and a sound technical design approach. The "Design for Reliability and Safety" approach addressed in this paper discusses both the environment and the technical process put in place to support the ARES I design. To address the integrated working environment, the ARES I project office has established a risk based design group called "Operability Design and Analysis" (OD&A) group. This group is an integrated group intended to bring together the engineering, design, and safety organizations together to optimize the system design for safety, reliability, and cost. On the technical side, the ARES I project has, through the OD&A environment, implemented a probabilistic approach to analyze and evaluate design uncertainties and understand their impact on safety, reliability, and cost. This paper focuses on the use of the various probabilistic approaches that have been pursued by the ARES I project. Specifically, the paper discusses an integrated functional probabilistic analysis approach that addresses upffont some key areas to support the ARES I Design Analysis Cycle (DAC) pre Preliminary Design (PD) Phase. This functional approach is a probabilistic physics based approach that combines failure probabilities with system dynamics and engineering failure impact models to identify key system risk drivers and potential system design requirements. The paper also discusses other probabilistic risk assessment approaches planned by the ARES I project to support the PD phase and beyond.

Safie, Fayssal, M.↗

Fast, Large-Area, Wide-Bandgap UV Photodetector for Cherenkov Light Detection

Due to limited resources available for power and space for payloads, miniaturizing and integrating instrumentation is a high priority for addressing the challenges of manned and unmanned deep space missions to high Earth orbit (HEO), near Earth objects (NEOs), Lunar and Martian orbits and surfaces, and outer planetary systems, as well as improvements to high-altitude aircraft safety. New, robust, and compact detectors allow future instrumentation packages more options in satisfying specific mission goals. A solid-state ultraviolet (UV) detector was developed with a theoretical fast response time and large detection area intended for application to Cherenkov detectors. The detector is based on the wide-bandgap semiconductor zinc oxide (ZnO), which in a bridge circuit can detect small, fast pulses of UV light like those required for Cherenkov detectors. The goal is to replace the role of photomultiplier tubes in Cherenkov detectors with these solid-state devices, saving on size, weight, and required power. For improving detection geometry, a spherical detector to measure high atomic number and energy (HZE) ions from any direction has been patented as part of a larger space radiation detector system. The detector will require the development of solid-state UV photodetectors fast enough (2 ns response time or better) to detect the shockwave of Cherenkov light emitted as the ions pass through a quartz, sapphire, or acrylic ball. The detector must be small enough to fit in the detector system structure, but have an active area large enough to capture enough Cherenkov light from the sphere. The detector is fabricated on bulk single-crystal undoped ZnO. Inter - digitated finger electrodes and contact pads are patterned via photolithography, and formed by sputtered metal of silver, platinum, or other high-conductivity metal.

Wrbanek, John D.↗

Composite Thermal Switch

Lithium primary and lithium ion secondary batteries provide high specific energy and energy density. The use of these batteries also helps to reduce launch weight. Both primary and secondary cells can be packaged as high-rate cells, which can present a threat to crew and equipment in the event of external or internal short circuits. Overheating of the cell interior from high current flows induced by short circuits can result in exothermic reactions in lithium primary cells and fully charged lithium ion secondary cells. Venting of the cell case, ejection of cell components, and fire have been reported in both types of cells, resulting from abuse, cell imperfections, or faulty electronic control design. A switch has been developed that consists of a thin layer of composite material made from nanoscale particles of nickel and Teflon that conducts electrons at room temperature and switches to an insulator at an elevated temperature, thus interrupting current flow to prevent thermal runaway caused by internal short circuits. The material is placed within the cell, as a thin layer incorporated within the anode and/or the cathode, to control excess currents from metal-to-metal or metal-to-carbon shorts that might result from cell crush or a manufacturing defect. The safety of high-rate cells is thus improved, preventing serious injury to personnel and sensitive equipment located near the battery. The use of recently available nanoscale particles of nickel and Teflon permits an improved, homogeneous material with the potential to be fine-tuned to a unique switch temperature, sufficiently below the onset of a catastrophic chemical reaction. The smaller particles also permit the formation of a thinner control film layer (<50 m), which can be incorporated into commercial high-rate lithium primary and secondary cells. The innovation permits incorporation in current lithium and lithium-ion cell designs with a minimal impact on cell weight and volume. The composite thermal switch (CTS(TradeMark)) coating can be incorporated in either the anode or cathode or both. The coating can be applied in a variety of different processes that permits incorporation in the cell and electrode manufacturing processes. The CTS responds quickly and halts current flow in the hottest parts of the cell first. The coating can be applied to metal foil and supplied as a cell component onto which the active electrode materials are coated.

McDonald, Robert↗

Determination of Interlaminar Toughness of IM7/977-2 Composites at Temperature Extremes and Different Thicknesses

Composite materials are being used in the aerospace industry as a means of reducing vehicle weight. In particular, polymer matrix composites (PMC) are good candidates due to their high strength-to-weight and high stiffness-to-weight ratios. Future reusable space launch vehicles and space exploration structures will need advanced light weight composites in order to minimize vehicle weight while demonstrating robustness and durability, guaranteeing high factors of safety. In particular, the implementation of composite cryogenic propellant fuel tanks (cryotanks) for future reusable launch vehicles (RLVs) could greatly reduce the vehicle's weight versus identically sized cryotanks constructed of metallic materials. One candidate composite material for future cryotank designs is IM7/977-2, which is a graphite/epoxy system. A successful candidate must demonstrate reasonable structural properties over a wide range of temperatures. Since the matrix material is normally the weak link in the composite, tests that emphasize matrix-dominated behavior need to be conducted. Therefore, the objective of this work is to determine the mode I interlaminar fracture toughness of "unidirectional" 8-ply and 16-ply IM7/977-2 through experimental testing. Tests were performed at -196 degrees Celsius (-320 degrees Fahrenheit), 22 degrees Celsius (72 degrees Fahrenheit), 93 degrees Celsius (200 degrees Fahrenheit) and 160 degrees C (320 degrees Fahrenheit). Low temperature testing was completed while the specimen was submerged in a liquid nitrogen bath. High temperature testing was completed in a temperature-controlled oven.

Johnson, W. S.↗

Integration of Multiple Non-Normal Checklist Procedures into a Single Checklist Procedure for Transport Aircraft: A Preliminary Investigation

Checklists are used by the flight crew to properly configure an aircraft for safe flight and to ensure a high level of safety throughout the duration of the flight. In addition, the checklist provides a sequential framework to meet cockpit operational requirements, and it fosters cross-checking of the flight deck configuration among crew members. This study examined the feasibility of integrating multiple checklists for non-normal procedures into a single procedure for a typical transport aircraft. For the purposes of this report, a typical transport aircraft is one that represents a midpoint between early generation aircraft (B-727/737-200 and DC-10) and modern glass cockpit aircraft (B747-400/777 and MD-11). In this report, potential conflicts among non-normal checklist items during multiple failure situations for a transport aircraft are identified and analyzed. The non-normal checklist procedure that would take precedence for each of the identified multiple failure flight conditions is also identified. The rationale behind this research is that potential conflicts among checklist items might exist when integrating multiple checklists for non-normal procedures into a single checklist. As a rule, multiple failures occurring in today's highly automated and redundant system transport aircraft are extremely improbable. In addition, as shown in this analysis, conflicts among checklist items in a multiple failure flight condition are exceedingly unlikely. The possibility of a multiple failure flight condition occurring with a conflict among checklist items is so remote that integration of the non-normal checklists into a single checklist appears to be a plausible option.

Foernsler, Lynda J.↗

Trajectory Specification Applied to Terminal Airspace

Despite major efforts to automate air traffic control (ATC), it is still performed by humans today. The complexity and safety-criticality of ATC makes it very difficult to safely automate, but it must be automated to increase airspace capacity (the density of traffic that can be safely managed) and airport throughput (the number of arrivals and departures that an airport can safely handle in a given period of time) beyond what is possible with human controllers. This paper presents the Trajectory Specification (TS) concept, which can help to safely automate ATC. TS is a method of specifying aircraft trajectories such that the position at any given time in flight is restricted to a precisely defined bounding space, removing all ambiguity as to where the flight is allowed to be. The bounding space or volume is determined by tolerances relative to a reference trajectory (position as a function of time). The tolerances are dynamic and are based on the aircraft navigation capabilities and the traffic situation. The tolerances can be a piecewise linear function of time or distance along the route, allowing the tolerances to vary as needed, typically increasing with time for departures and decreasing for arrivals. A Trajectory Specification Language (TSL) is proposed for communicating trajectories from aircraft to ATC as requests and from ATC to aircraft as assignments. The TS concept requires a new generation of airborne Flight Management Systems (FMS) that understand the TSL and can fly the assigned trajectories, but this paper focuses on the ATC functions and the prototype ATC algorithms and software that were developed to test the TS concept. Assuming conformance, TS can guarantee safe separation for an arbitrary length of time even in the event of an ATC system or communication outage. It can help to achieve the high level of safety and reliability needed for ATC automation, and it can also reduce the reliance on ATC backup systems for tactical conflict detection and resolution during normal operation. TS can be applied to any controlled airspace, including enroute, terminal, and urban airspace, but this paper presents algorithms and software for arrival spacing and conflict detection and resolution in the terminal airspace serving a major airport. In a fast-time simulation of a full day of traffic in a major terminal airspace, all conflicts were resolved in near real time, demonstrating the computational feasibility and the preliminary operational feasibility of the TS concept. This paper is a compilation of previous papers, and it adds significant information that was omitted from those papers due to length limitations. It also updates some of the results of those earlier papers due to algorithm refinements and corrections of minor software errors.

air traffic control, trajectory↗

Autonomy Verification & Validation Roadmap and Vision 2045

Advanced capabilities planned for the next generation of autonomous and increasingly autonomous air vehicles will include non-traditional components based on artificial intelligence, machine learning, and complex optimization and planning algorithms. These complex components will be used to provide enhanced safety and high-level decision-making functions. However, there are serious barriers to the deployment of autonomous aircraft in the National Airspace System (NAS). Current civil aviation certification processes are based on the concept that the correct behavior of a system or a component must be completely specified and verified prior to operation. This report from the Autonomy Verification and Validation (V&V) Roadmap and Vision 2045 project presents the most recent effort to build a comprehensive list of verification challenges and needs for autonomous aircraft, a roadmap to meet those autonomy V&V needs, the services they can enable, and point to the certification gaps they fill. To accomplish these goals, we assembled a team of world-class researchers from the aerospace industry (Boeing, Collins Aerospace, and GeneralElectric) and academia (University of Michigan, University of Texas, and Massachusetts Institute of Technology) with deep expertise in autonomy, aerospace systems, and assurance of Artificial Intelligence/machine learning systems.

Software Assurance↗

Multi-KW dc distribution system technology research study

The Multi-KW DC Distribution System Technology Research Study is the third phase of the NASA/MSFC study program. The purpose of this contract was to complete the design of the integrated technology test facility, provide test planning, support test operations and evaluate test results. The subjet of this study is a continuation of this contract. The purpose of this continuation is to study and analyze high voltage system safety, to determine optimum voltage levels versus power, to identify power distribution system components which require development for higher voltage systems and finally to determine what modifications must be made to the Power Distribution System Simulator (PDSS) to demonstrate 300 Vdc distribution capability.

Dawson, S. G.↗