Search NASA⌕ Search

SEARCH · Search NASA

Results for “Safety Design Approach”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 109 records · Page 6

High reliability megawatt transformer/rectifier

The goal of the two phase program is to develop the technology and design and fabricate ultralightweight high reliability DC to DC converters for space power applications. The converters will operate from a 5000 V dc source and deliver 1 MW of power at 100 kV dc. The power weight density goal is 0.1 kg/kW. The cycle to cycle voltage stability goals was + or - 1 percent RMS. The converter is to operate at an ambient temperature of -40 C with 16 minute power pulses and one hour off time. The uniqueness of the design in Phase 1 resided in the dc switching array which operates the converter at 20 kHz using Hollotron plasma switches along with a specially designed low loss, low leakage inductance and a light weight high voltage transformer. This approach reduced considerably the number of components in the converter thereby increasing the system reliability. To achieve an optimum transformer for this application, the design uses four 25 kV secondary windings to produce the 100 kV dc output, thus reducing the transformer leakage inductance, and the ac voltage stresses. A specially designed insulation system improves the high voltage dielectric withstanding ability and reduces the insulation path thickness thereby reducing the component weight. Tradeoff studies and tests conducted on scaled-down model circuits and using representative coil insulation paths have verified the calculated transformer wave shape parameters and the insulation system safety. In Phase 1 of the program a converter design approach was developed and a preliminary transformer design was completed. A fault control circuit was designed and a thermal profile of the converter was also developed.

Zwass, Samuel↗

Early Fault Detection in Nuclear Systems: A Digital Engineering Approach

Nuclear energy systems present unique challenges in terms of ensuring safety, reliability, and efficiency during their design and operation. Early fault detection is critical for mitigating risks and fostering system resilience. However, current methods often fall short at identifying faults during early stages, potentially leading to costly delays and safety risks. The present work proposes a comprehensive digital engineering approach that leverages digital twins, digital threads, model-based systems engineering, artificial intelligence, and immersive extended reality to support early fault detection in nuclear systems. Through a series of case studies, we highlight specific gaps in the fault detection mechanisms of traditional nuclear design and operation processes, then demonstrate a suite of solutions we are working to implement to address these shortcomings in similar projects. Our findings suggest that a digital engineering approach to design and operation can significantly improve fault detection, ultimately leading to reductions in risk.

42 - ENGINEERING↗

Terrapin technologies manned Mars mission proposal

A Manned Mars Mission (M3) design study is proposed. The purpose of M3 is to transport 10 personnel and a habitat with all required support systems and supplies from low Earth orbit (LEO) to the surface of Mars and, after an eight-man surface expedition of 3 months, to return the personnel safely to LEO. The proposed hardware design is based on systems and components of demonstrated high capability and reliability. The mission design builds on past mission experience, but incorporates innovative design approaches to achieve mission priorities. Those priorities, in decreasing order of importance, are safety, reliability, minimum personnel transfer time, minimum weight, and minimum cost. The design demonstrates the feasibility and flexibility of a Waverider transfer module.

Amato, Michael↗

Manned Mars mission

Terrapin Technologies proposes a Manned Mars Mission design study. The purpose of the Manned Mars Mission is to transport ten people and a habitat with all required support systems and supplies from low Earth orbit (LEO) to the surface of Mars and, after an expedition of three months to return the personnel safely to LEO. The proposed hardware design is based on systems and components of demonstrated high capability and reliability. The mission design builds on past mission experience but incorporates innovative design approaches to achieve mission priorities. These priorities, in decreasing order of importance, are safety, reliability, minimum personnel transfer time, minimum weight, and minimum cost. The design demonstrates the feasibility and flexibility of a waverider transfer module. Information is given on how the plan meets the mission requirements.

Source record↗

Investigation of Structural Factors of Safety for the Space Shuttle

A study was made of the factors governing the structural design of the fully reusable space shuttle booster to establish a rational approach to select optimum structural factors of safety. The study included trade studies of structural factors of safety versus booster service life, weight, cost, and reliability. Similar trade studies can be made on other vehicles using the procedures developed. The major structural components of a selected baseline booster were studied in depth, each being examined to determine the fatigue life, safe-life, and fail-safe capabilities of the baseline design. Each component was further examined to determine its reliability and safety requirements, and the change of structural weight with factors of safety. The apparent factors of safety resulting from fatigue, safe-life, proof test, and fail-safe requirements were identified. The feasibility of reduced factors of safety for design loads such as engine thrust, which are well defined, was examined.

Source record↗

Safety management of a complex R&D ground operating system

A perspective on safety program management has been developed for a complex R&D operating system, such as the NASA-Lewis Research Center. Using a systems approach, hazardous operations are subjected to third-party reviews by designated area safety committees and are maintained under safety permit controls. To insure personnel alertness, emergency containment forces and employees are trained in dry-run emergency simulation exercises. The keys to real safety effectiveness are top management support and visibility of residual risks.

Connors, J. F.↗

A root locus based flutter synthesis procedure

An efficient generalized constraint is proposed in the context of a nonlinear mathematical programming approach for the minimum weight design of wing structures for flutter considerations. The approach is based on a root locus analysis procedure that is better suited for flutter redesign than the conventionally used V-g method. The proposed flutter constraint does not require an actual computation of the flutter speed, allows prescription of meaningful margins of safety in the optimized design and lends itself to elegant computation of sensitivity information. The approach is implemented and results presented for representative structural models.

Hajela, P.↗

Ampaire ARPA-e Electric Flight Testbed

A hybrid-electric aircraft flying testbed was developed in this program with the intent to serve as a dedicated, enduring testbed to test and evaluate ARPA-e CIRCUITS Program and other electrified aviation technologies in relevant flight environments. This testbed enabled rapid development cycles of novel and innovative technologies in the electrified aviation space, maturing them from a research lab environment to flying in an aircraft. By providing research groups with the means to test their transformative technologies in a real-world, aircraft environment, the path to validating the safety and reliability of their technologies for future commercial opportunities was greatly accelerated. Three core technologies were integrated and tested: an inverter/motor drive built by the University of Arkansas, a solid-state circuit breaker (iBreaker) built by the Illinois Institute of Technology, and a Flying Capacitor Multi-level (FCML) DC/DC converter built by the University of California, Berkeley. In each of these cases, the requirements established for safety of flight resulted in a holistic approach to the designs, evoking a deeper understanding of the potential failure modes and mitigations necessary to build a robust and flightworthy system. Further, the integration into a hybrid-electric aircraft de-risked the potential electrical and mechanical issues that cannot easily be experienced or replicated in a lab environment. The experiments were also required to undergo representative temperature, shock, and vibration testing as the FAA prescribes for this category of aircraft, facilitating familiarity with the relevant design and test guidelines necessary to commercialize the technologies. This testbed unlocks the massive potential of core power electronics technologies necessary for a safe, robust, and efficient electric aviation future. With quick iterative design, test, and flight cycles, these core technologies are on a quicker path to technology readiness level maturity and commercialization, enabling a more sustainable future for the aviation industry.

24 POWER TRANSMISSION AND DISTRIBUTION↗

NTAC Augmented Nuclear and Advanced Propulsion

Currently, there are two types of nuclear propulsion: Nuclear Thermal Propulsion (NTP) and Nuclear Electric Propulsion (NEP). Common to both types, a nuclear reactor generates heat energy to raise the temperature of propellant, or the generated heat energy is converted into electric power. The electricity generated powers propulsion systems, such as a Hall thruster, magnetoplasma dynamic (MPD) thruster, or variable specific impulse magnetoplasma rocket (VASIMR). Customarily, only the thermal energy output from nuclear reaction is considered for NTP and NEP systems. However, the nuclear fission reaction can also generate ~7 MeV of prompt gamma rays. Therefore, most designers of NTP and NEP systems incorporate safety features to shield against this radiation. An optimized design approach would be to integrate a Nuclear Thermionic Avalanche Cell (NTAC) within the NTP or NEP structure for converting this radiation energy into additional electric power, while also shielding gamma rays. Consequently, this study addresses several combinations of NTP and NEP structures with NTAC devices in order to achieve that goal.

NTAC↗

Implementing Software Safety in the NASA Environment

Until recently, NASA did not consider allowing computers total control of flight systems. Human operators, via hardware, have constituted the ultimate safety control. In an attempt to reduce costs, NASA has come to rely more and more heavily on computers and software to control space missions. (For example. software is now planned to control most of the operational functions of the International Space Station.) Thus the need for systematic software safety programs has become crucial for mission success. Concurrent engineering principles dictate that safety should be designed into software up front, not tested into the software after the fact. 'Cost of Quality' studies have statistics and metrics to prove the value of building quality and safety into the development cycle. Unfortunately, most software engineers are not familiar with designing for safety, and most safety engineers are not software experts. Software written to specifications which have not been safety analyzed is a major source of computer related accidents. Safer software is achieved step by step throughout the system and software life cycle. It is a process that includes requirements definition, hazard analyses, formal software inspections, safety analyses, testing, and maintenance. The greatest emphasis is placed on clearly and completely defining system and software requirements, including safety and reliability requirements. Unfortunately, development and review of requirements are the weakest link in the process. While some of the more academic methods, e.g. mathematical models, may help bring about safer software, this paper proposes the use of currently approved software methodologies, and sound software and assurance practices to show how, to a large degree, safety can be designed into software from the start. NASA's approach today is to first conduct a preliminary system hazard analysis (PHA) during the concept and planning phase of a project. This determines the overall hazard potential of the system to be built. Shortly thereafter, as the system requirements are being defined, the second iteration of hazard analyses takes place, the systems hazard analysis (SHA). During the systems requirements phase, decisions are made as to what functions of the system will be the responsibility of software. This is the most critical time to affect the safety of the software. From this point, software safety analyses as well as software engineering practices are the main focus for assuring safe software. While many of the steps proposed in this paper seem like just sound engineering practices, they are the best technical and most cost effective means to assure safe software within a safe system.

Wetherholt, Martha S.↗

Autonomous Assessment and Predictive Capabilities for Low-Altitude Urban Flight Operations

The integration of unmanned aerial vehicles in the national airspace will introduce new vehicle types, technologies, and operational paradigms for which safety must be maintained and hazards mitigated. One approach is to attempt to design for possible hazards and unsafe incidents that can occur at different phases of flight (pre-flight, in-flight, and post-flight) and during ground operations. Another is to mitigate safety incidents by implementing changes to policies, procedures, regulations, and design to cover personnel, equipment, and aircraft during operations. These and other techniques, not described herein, are typically conservative or adhoc in that they reduce the likelihood of risk after safety incidents have occurred. In this work, the goal is to develop a more predictive capability to monitor and mitigate risk and hazards to safety “in-time” enough for decisions to be made. In line with NASA’s Aeronautics Mission Directorate Strategic Thrust 5 [1] (In-Time System-Wide Safety Assurance), the System-Wide Safety (SWS) project under which this work falls, is developing and demonstrating innovative and safety-oriented solutions that enable modernization and aviation transformation. To that effect, this work will detail data-driven efforts on the SWS project to develop a number of safety-critical services for in-time monitoring and mitigation of hazards to low-altitude flight operations. First, hazards to these operations are identified based on previous work by NASA [2,3] and others in the aerospace industry. These hazards include (i) unsafe proximity to other vehicles, property, and people on the ground, (ii) critical system failures such as communication signal/GPS loss, unexpected propulsion system degradation, engine/power failure, and (iii) operational/environmental issues such as severe weather and gusty winds. For these hazards, safety metrics, which can be quantified and assessed are defined, models to monitor and predict them are developed, and flight test data is generated to develop, validate, and test these models, considering the complex interplay of the different hazards that define them [4-6]. In addition, the uncertainty in the non-deterministic effects that cannot be modeled nor predicted and unknown unknowns that arise after design/testing and during operations must be handled in rigorous manner. As a result, for each of the developed safety metrics, their dependencies on one another are characterized and a framework for handling the uncertainties inherent in the modeling, algorithms, and measurements required for prediction is also developed [7]. To that effect, this presentation will describe the safety metrics and services already developed and underway under the System-Wide Safety project that utilize data-driven techniques for the identification of anomalies, precursors, and trends (APTs) to monitor and mitigate hazards to safety, in-time, for urban flight operations in low-altitude airspace.

Okolo, Wendy A.↗

Why Didn't They Just Follow the Procedure?

It is often said that to err is human and that procedures are in place to prevent people from making mistakes. It's true that failures can be traced to human limitation, but what's more important is that all successes, all safe operations are the result of human capabilities. And while it's true that good procedures can help avoid error, it's also the case that procedures have their own limitations. This talk highlights the limits of procedures and the resilience people bring to operations. It discusses ways to change the common narrative that people are the creators of safety rather than only the source of error and failure, and it proposes an approach to the design of procedures that supports the human operator.

operations↗

Performance Testing of Yardney MCMB-LiNiCoAlO2 Lithium-ion Cells Possessing Electrolytes with Improved Safety Characteristics

Many future NASA missions aimed at exploring the Moon and Mars require high specific energy rechargeable batteries that possess enhanced safety characteristics. There is also a strong desire to develop Li-ion batteries with improved safety characteristics for terrestrial applications, most notably for HEV and PHEV automotive applications. In previous work focused upon evaluating various potential flame retardant additives1, triphenyl phosphate (TPP)2 was observed to have the most desirable attributes, including good life characteristics and resilience to high voltage operation. We have employed a number of approaches in the design of promising TPP-based electrolytes with improved safety, including: (a) varying the flame retardant additive (FRA) content (from 5 to 15%), (b) the use of fluorinated co-solvents, (c) the use of additives to improve compatibility, and (c) the use of ester co-solvents to decrease the viscosity and increase the conductivity. In recent work, we have demonstrated a number of these electrolyte formulations to be compatible with a number of chemistries, including: MCMB carbon-LiNi0.8Co0.2O2, graphite-LiNi0.8Co0.15Al0.05O2, Li-Li(Li0.17Ni 0.25 Mn 0.58 )O2, Li-LiNiCoMnO2 and graphite- LiNiCoMnO2.3,4 In the current study, we have demonstrated the performance of a number of TPP-containing electrolytes in 7 Ah prototype MCMB-LiNiCoO2 cells. We will describe the results of a number of performance tests, including: a) 100% DOD cycle life testing at various temperatures, b) discharge rate characterization as a function of temperature, c) charge rate characterization as a function of temperature, and d) impedance as a function of temperature. In addition to displaying good life characteristics, being comparable to baseline chemistries, a number of cells were observed to provide good performance over a wide temperature range.

Li-ion batteries↗

Annual report to the NASA Administrator by the Aerospace Safety Advisory Panel. Part 2: Space shuttle program. Section 2: Summary of information developed in the Panel's fact-finding activities

The management areas and the individual elements of the shuttle system were investigated. The basic management or design approach including the most obvious limits or hazards that are significant to crew safety was reviewed. Shuttle program elements that were studied included the orbiter, the space shuttle main engine, the external tank project, solid rocket boosters, and the launch and landing elements.

Source record↗

Introduction: Aims and Requirements of Future Aerospace Vehicles

The goals and system-level requirements for the next generation aerospace vehicles emphasize safety, reliability, low-cost, and robustness rather than performance. Technologies, including new materials, design and analysis approaches, manufacturing and testing methods, operations and maintenance, and multidisciplinary systems-level vehicle development are key to increasing the safety and reducing the cost of aerospace launch systems. This chapter identifies the goals and needs of the next generation or advanced aerospace vehicle systems.

Rodriguez, Pedro I.↗

Damage Tolerance Issues as Related to Metallic Rotorcraft Dynamic Components

In this paper issues related to the use of damage tolerance in life managing rotorcraft dynamic components are reviewed. In the past, rotorcraft fatigue design has combined constant amplitude tests of full-scale parts with flight loads and usage data in a conservative manner to provide "safe life" component replacement times. In contrast to the safe life approach over the past twenty years the United States Air Force and several other NATO nations have used damage tolerance design philosophies for fixed wing aircraft to improve safety and reliability. The reliability of the safe life approach being used in rotorcraft started to be questioned shortly after presentations at an American Helicopter Society's specialist meeting in 1980 showed predicted fatigue lives for a hypothetical pitch-link problem to vary from a low of 9 hours to a high in excess of 2594 hours. This presented serious cost, weight, and reliability implications. Somewhat after the U.S. Army introduced its six nines reliability on fatigue life, attention shifted towards using a possible damage tolerance approach to the life management of rotorcraft dynamic components. The use of damage tolerance in life management of dynamic rotorcraft parts will be the subject of this paper. This review will start with past studies on using damage tolerance life management with existing helicopter parts that were safe life designed. Also covered will be a successful attempt at certifying a tail rotor pitch rod using damage tolerance, which was designed using the safe life approach. The FAA review of rotorcraft fatigue design and their recommendations along with some on-going U.S. industry research in damage tolerance on rotorcraft will be reviewed.

Everett, R. A., Jr.↗

Damage Tolerance Issues as Related to Metallic Rotorcraft Dynamic Components

In this paper issues related to the use of damage tolerance in life managing rotorcraft dynamic components are reviewed. In the past, rotorcraft fatigue design has combined constant amplitude tests of full-scale parts with flight loads and usage data in a conservative manner to provide "safe life" component replacement times. In contrast to the safe life approach over the past twenty years the United States Air Force and several other NATO nations have used damage tolerance design philosophies for fixed wing aircraft to improve safety and reliability. The reliability of the safe life approach being used in rotorcraft started to be questioned shortly after presentations at an American Helicopter Society's specialist meeting in 1980 showed predicted fatigue lives for a hypothetical pitch-link problem to vary from a low of 9 hours to a high in excess of 2594 hours. This presented serious cost, weight, and reliability implications. Somewhat after the U.S. Army introduced its six nines reliability on fatigue life, attention shifted towards using a possible damage tolerance approach to the life management of rotorcraft dynamic components. The use of damage tolerance in life management of dynamic rotorcraft parts will be the subject of this paper. This review will start with past studies on using damage tolerance life management with existing helicopter parts that were safe life designed. Also covered will be a successful attempt at certifying a tail rotor pitch rod using damage tolerance, which was designed using the safe life approach. The FAA review of rotorcraft fatigue design and their recommendations along with some on-going U.S. industry research in damage tolerance on rotorcraft will be reviewed. Finally, possible problems and future needs for research will be highlighted.

Everett, R. A., Jr.↗

Recent advances in computational structural reliability analysis methods

The goal of structural reliability analysis is to determine the probability that the structure will adequately perform its intended function when operating under the given environmental conditions. Thus, the notion of reliability admits the possibility of failure. Given the fact that many different modes of failure are usually possible, achievement of this goal is a formidable task, especially for large, complex structural systems. The traditional (deterministic) design methodology attempts to assure reliability by the application of safety factors and conservative assumptions. However, the safety factor approach lacks a quantitative basis in that the level of reliability is never known and usually results in overly conservative designs because of compounding conservatisms. Furthermore, problem parameters that control the reliability are not identified, nor their importance evaluated. A summary of recent advances in computational structural reliability assessment is presented. A significant level of activity in the research and development community was seen recently, much of which was directed towards the prediction of failure probabilities for single mode failures. The focus is to present some early results and demonstrations of advanced reliability methods applied to structural system problems. This includes structures that can fail as a result of multiple component failures (e.g., a redundant truss), or structural components that may fail due to multiple interacting failure modes (e.g., excessive deflection, resonate vibration, or creep rupture). From these results, some observations and recommendations are made with regard to future research needs.

Thacker, Ben H.↗