Search NASA⌕ Search

SEARCH · Search NASA

Results for “Software dependability”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 109 records · Page 6

A Review of Discrete Element Method (DEM) Particle Shapes and Size Distributions for Lunar Soil

As part of ongoing efforts to develop models of lunar soil mechanics, this report reviews two topics that are important to discrete element method (DEM) modeling the behavior of soils (such as lunar soils): (1) methods of modeling particle shapes and (2) analytical representations of particle size distribution. The choice of particle shape complexity is driven primarily by opposing tradeoffs with total number of particles, computer memory, and total simulation computer processing time. The choice is also dependent on available DEM software capabilities. For example, PFC2D/PFC3D and EDEM support clustering of spheres; MIMES incorporates superquadric particle shapes; and BLOKS3D provides polyhedra shapes. Most commercial and custom DEM software supports some type of complex particle shape beyond the standard sphere. Convex polyhedra, clusters of spheres and single parametric particle shapes such as the ellipsoid, polyellipsoid, and superquadric, are all motivated by the desire to introduce asymmetry into the particle shape, as well as edges and corners, in order to better simulate actual granular particle shapes and behavior. An empirical particle size distribution (PSD) formula is shown to fit desert sand data from Bagnold. Particle size data of JSC-1a obtained from a fine particle analyzer at the NASA Kennedy Space Center is also fitted to a similar empirical PSD function.

Lane, John E.↗

A Voyager attitude control perspective on fault tolerant systems

In current spacecraft design, a trend can be observed to achieve greater fault tolerance through the application of on-board software dedicated to detecting and isolating failures. Whether fault tolerance through software can meet the desired objectives depends on very careful consideration and control of the system in which the software is imbedded. The considered investigation has the objective to provide some of the insight needed for the required analysis of the system. A description is given of the techniques which have been developed in this connection during the development of the Voyager spacecraft. The Voyager Galileo Attitude and Articulation Control Subsystem (AACS) fault tolerant design is discussed to emphasize basic lessons learned from this experience. The central driver of hardware redundancy implementation on Voyager was known as the 'single point failure criterion'.

Rasmussen, R. D.↗

Deductive Glue Code Synthesis for Embedded Software Systems Based on Code Patterns

Automated code synthesis is a constructive process that can be used to generate programs from specifications. It can, thus, greatly reduce the software development cost and time. The use of formal code synthesis approach for software generation further increases the dependability of the system. Though code synthesis has many potential benefits, the synthesis techniques are still limited. Meanwhile, components are widely used in embedded system development. Applying code synthesis to component based software development (CBSD) process can greatly enhance the capability of code synthesis while reducing the component composition efforts. In this paper, we discuss the issues and techniques for applying deductive code synthesis techniques to CBSD. For deductive synthesis in CBSD, a rule base is the key for inferring appropriate component composition. We use the code patterns to guide the development of rules. Code patterns have been proposed to capture the typical usages of the components. Several general composition operations have been identified to facilitate systematic composition. We present the technique for rule development and automated generation of new patterns from existing code patterns. A case study of using this method in building a real-time control system is also presented.

automated code synthesis↗

Computing Radiative Transfer in a 3D Medium

A package of software computes the time-dependent propagation of a narrow laser beam in an arbitrary three- dimensional (3D) medium with absorption and scattering, using the transient-discrete-ordinates method and a direct integration method. Unlike prior software that utilizes a Monte Carlo method, this software enables simulation at very small signal-to-noise ratios. The ability to simulate propagation of a narrow laser beam in a 3D medium is an improvement over other discrete-ordinate software. Unlike other direct-integration software, this software is not limited to simulation of propagation of thermal radiation with broad angular spread in three dimensions or of a laser pulse with narrow angular spread in two dimensions. Uses for this software include (1) computing scattering of a pulsed laser beam on a material having given elastic scattering and absorption profiles, and (2) evaluating concepts for laser-based instruments for sensing oceanic turbulence and related measurements of oceanic mixed-layer depths. With suitable augmentation, this software could be used to compute radiative transfer in ultrasound imaging in biological tissues, radiative transfer in the upper Earth crust for oil exploration, and propagation of laser pulses in telecommunication applications.

Von Allmen, Paul↗

Software Aids Visualization of Computed Unsteady Flow

Unsteady Flow Analysis Toolkit (UFAT) is a computer program that synthesizes motions of time-dependent flows represented by very large sets of data generated in computational fluid dynamics simulations. Prior to the development of UFAT, it was necessary to rely on static, single-snapshot depictions of time-dependent flows generated by flow-visualization software designed for steady flows. Whereas it typically takes weeks to analyze the results of a largescale unsteady-flow simulation by use of steady-flow visualization software, the analysis time is reduced to hours when UFAT is used. UFAT can be used to generate graphical objects of flow visualization results using multi-block curvilinear grids in the format of a previously developed NASA data-visualization program, PLOT3D. These graphical objects can be rendered using FAST, another popular flow visualization software developed at NASA. Flow-visualization techniques that can be exploited by use of UFAT include time-dependent tracking of particles, detection of vortex cores, extractions of stream ribbons and surfaces, and tetrahedral decomposition for optimal particle tracking. Unique computational features of UFAT include capabilities for automatic (batch) processing, restart, memory mapping, and parallel processing. These capabilities significantly reduce analysis time and storage requirements, relative to those of prior flow-visualization software. UFAT can be executed on a variety of supercomputers.

Kao, David↗

Bayesian Software Health Management for Aircraft Guidance, Navigation, and Control

Modern aircraft, both piloted fly-by-wire commercial aircraft as well as UAVs, more and more depend on highly complex safety critical software systems with many sensors and computer-controlled actuators. Despite careful design and V&V of the software, severe incidents have happened due to malfunctioning software. In this paper, we discuss the use of Bayesian networks (BNs) to monitor the health of the on-board software and sensor system, and to perform advanced on-board diagnostic reasoning. We will focus on the approach to develop reliable and robust health models for the combined software and sensor systems.

Schumann, Johann↗

Position dependent rate dampening in any active hand controller

A control system for an active hand controller, for example, uses a control stick connected to and controlled by a motor. Electronics are provided to control the motor to eliminate oscillations due to motor torque and high gain due to breakout at the control stick when the control stick is at about its null position. Both hardware as well as software implementations can provide position dependent dampening to the control sticks such that when the control stick is located about a null position, a higher rate of dampening is provided than when the control stick is located outside the null position, when a lower rate of dampening is provided. The system provides a stable active hand controller control stick without degraded force and feel characteristics of the system.

Gregory, William W.↗

Comparing the effectiveness of software testing strategies

This study compares the results of code reading, functional testing, and structural testing in three aspects of software testing: fault detection effectiveness, fault detection cost, and classes of faults detected. Thirty two professional programmers and 42 advanced students applied the three techniques to four unit-sized programs in a fractional experimental design. The major results of this study are the following: (1) With the professional programmers, code reading detected more software faults and had a higher detection rate than did functional or structural testing, while functional testing detected more faults than did structural testing, but functional and structural testing were not different in fault detection rate. (2) In one advanced student subject group, code reading and functional testing were not different in faults found, but were superior to structural testing, while in the other advanced student subject group there was no difference among the techniques. (3) With the advanced student subjects, the three techniques were not different in fault deteciton rate. (4) Number of faults observed, fault detection rate, and total effort in detection depended on the type of software tested. (5) Code reading detected more interface faults than did the other methods. (6) Functional testing detected more control faults than did the other methods. (7) When asked to estimate the percentage of faults detected, code readers gave the most accurate estimates while functional testers gave the least accurate estimates. Appendix B includes the source code for the word.

Basili, Victor R.↗

Validation of the communications link analysis and simulation system (CLASS)

CLASS (Communication Link Analysis and Simulation System) is a software package developed for NASA to predict the communication and tracking performance of the Tracking and Data Relay Satellite System (TDRSS) services. The methods used to verify CLASS are described. The usefulness of a software tool such as CLASS depends strongly on the reliability and accuracy of the results it produces. For this reason, considerable attention was paid to validation throughout the CLASS development.

Braun, W. R.↗

DEPEND - A design environment for prediction and evaluation of system dependability

The development of DEPEND, an integrated simulation environment for the design and dependability analysis of fault-tolerant systems, is described. DEPEND models both hardware and software components at a functional level, and allows automatic failure injection to assess system performance and reliability. It relieves the user of the work needed to inject failures, maintain statistics, and output reports. The automatic failure injection scheme is geared toward evaluating a system under high stress (workload) conditions. The failures that are injected can affect both hardware and software components. To illustrate the capability of the simulator, a distributed system which employs a prediction-based, dynamic load-balancing heuristic is evaluated. Experiments were conducted to determine the impact of failures on system performance and to identify the failures to which the system is especially susceptible.

Goswami, Kumar K.↗

Transportable Applications Environment (TAE) Tenth Users' Conference

Conference proceedings are represented in graphic visual-aid form. Presentation and panel discussion topics include user experiences with C++ and Ada; the design and interaction of the user interface; the history and goals of TAE; commercialization and testing of TAE Plus; Computer-Human Interaction Models (CHIMES); data driven objects; item-to-item connections and object dependencies; and integration with other software. There follows a list of conference attendees.

Rouff, Chris↗

Applying Model-Based Reasoning to the FDIR of the Command and Data Handling Subsystem of the International Space Station

All of the International Space Station (ISS) systems which require computer control depend upon the hardware and software of the Command and Data Handling System (C&DH) system, currently a network of over 30 386-class computers called Multiplexor/Dimultiplexors (MDMs)[18]. The Caution and Warning System (C&W)[7], a set of software tasks that runs on the MDMs, is responsible for detecting, classifying, and reporting errors in all ISS subsystems including the C&DH. Fault Detection, Isolation and Recovery (FDIR) of these errors is typically handled with a combination of automatic and human effort. We are developing an Advanced Diagnostic System (ADS) to augment the C&W system with decision support tools to aid in root cause analysis as well as resolve differing human and machine C&DH state estimates. These tools which draw from sources in model-based reasoning[ 16,291, will improve the speed and accuracy of flight controllers by reducing the uncertainty in C&DH state estimation, allowing for a more complete assessment of risk. We have run tests with ISS telemetry and focus on those C&W events which relate to the C&DH system itself. This paper describes our initial results and subsequent plans.

Robinson, Peter↗

Advanced Active-Magnetic-Bearing Thrust-Measurement System

An advanced thrust-measurement system utilizes active magnetic bearings to both (1) levitate a floating frame in all six degrees of freedom and (2) measure the levitation forces between the floating frame and a grounded frame. This system was developed for original use in measuring the thrust exerted by a rocket engine mounted on the floating frame, but can just as well be used in other force-measurement applications. This system offers several advantages over prior thrust-measurement systems based on mechanical support by flexures and/or load cells: The system includes multiple active magnetic bearings for each degree of freedom, so that by selective use of one, some, or all of these bearings, it is possible to test a given article over a wide force range in the same fixture, eliminating the need to transfer the article to different test fixtures to obtain the benefit of full-scale accuracy of different force-measurement devices for different force ranges. Like other active magnetic bearings, the active magnetic bearings of this system include closed-loop control subsystems, through which the stiffness and damping characteristics of the magnetic bearings can be modified electronically. The design of the system minimizes or eliminates cross-axis force-measurement errors. The active magnetic bearings are configured to provide support against movement along all three orthogonal Cartesian axes, and such that the support along a given axis does not produce force along any other axis. Moreover, by eliminating the need for such mechanical connections as flexures used in prior thrust-measurement systems, magnetic levitation of the floating frame eliminates what would otherwise be major sources of cross-axis forces and the associated measurement errors. Overall, relative to prior mechanical-support thrust-measurement systems, this system offers greater versatility for adaptation to a variety of test conditions and requirements. The basic idea of most prior active-magnetic-bearing force-measurement systems is to calculate levitation forces on the basis of simple proportionalities between changes in those forces and changes in feedback-controlled currents applied to levitating electromagnetic coils. In the prior systems, the effects of gap lengths on fringing magnetic fields and the concomitant effects on magnetic forces were neglected. In the present system, the control subsystems of the active magnetic bearings are coupled with a computer-based automatic calibration system running special-purpose software wherein gap-length-dependent fringing factors are applied to current and magnetic-flux-based force equations and combined with a multipoint calibration method to obtain greater accuracy.

Imlach, Joseph↗

Towards A Comprehensive Consideration of Epistemic Questions in Software System Safety

For any software system upon which lives depend, the most important question one can ask about it is, 'How do we know the system is safe?' Despite the critical importance of this question, no widely accepted, generally applicable answer exists. Instead, debate continues to rage over the question, with theorists and practitioners quarrelling with each other and amongst themselves. This paper suggests a possible way forward towards quelling the quarrels, based on refining the critical safety question into additional questions, which may be more likely to have answers on which a consensus can be reached.

Holloway, C. M.↗

Cryo-Temp Data Logger

Biological experiments on the ISS are frequently frozen at ultra-low temperatures on orbit prior to return to Earth for analysis. Recording temperatures during the freezing process, and subsequent handling to the point of post-flight processing, can provide important information of sample integrity to the scientist. The MadgeTech Cryo-Temp Data Logger has been modified for space flight applications by the Payload Development Team at Kennedy Space Center. This ultra-low temperature data logger is rated for temperatures from -86 C to +35 C with 0.1 C resolution and +/-1 C accuracy, but has been successfully tested at Kennedy Space Centers Cryogenic Lab down to -100 C. The logger provides date and time stamped temperature recordings and can be set with logging intervals from 5 seconds up to 30 minutes using the MadgeTech Data Logger Software. Data can be recorded, depending on logging interval, for greater than 90 days. The Cryo-Temp Data logger will first be flown on Space X-12 in the BRIC-Petri Dish Fixation Unit (PDFU) canister hardware, recording temperature data for a Space Life and Physical Sciences (SLPS) flight experiment. The modified Cryo-Temp Data Logger is small in size (Figure 1) and is the ideal temperature monitoring solution for any application involving independent temperature data logging.

Logger↗

Determination of the Limiting Magnitude

The limiting magnitude of an optical camera system is an important property to understand since it is used to find the completeness limit of observations. Limiting magnitude depends on the hardware and software of the system, current weather conditions, and the angular speed of the objects observed. If an object exhibits a substantial angular rate during the exposure, its light spreads out over more pixels than the stationary stars. This spreading causes the limiting magnitude to be brighter when compared to the stellar limiting magnitude. The effect, which begins to become important when the object moves a full width at half max during a single exposure or video frame. For targets with high angular speeds or camera systems with narrow field of view or long exposures, this correction can be significant, up to several magnitudes. The stars in an image are often used to measure the limiting magnitude since they are stationary, have known brightness, and are present in large numbers, making the determination of the limiting magnitude fairly simple. In order to transform stellar limiting magnitude to object limiting magnitude, a correction must be applied accounting for the angular velocity. This technique is adopted in meteor and other fast-moving object observations, as the lack of a statistically significant sample of targets makes it virtually impossible to determine the limiting magnitude before the weather conditions change. While the weather is the dominant factor in observing satellites, the limiting magnitude for meteors also changes throughout the night due to the motion of a meteor shower or sporadic source radiant across the sky. This paper presents methods for determining the limiting stellar magnitude and the conversion to the target limiting magnitude.

Kingery, Aaron↗