Search NASA⌕ Search

SEARCH · Search NASA

Results for “assurance case”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 109 records · Page 6
All sourcesNASA NTRSDOE OSTI
NASA NTRS2012

An Examination of Coarse Sun Sensor Contingencies in Attitude Determination and the Sun Vector Calculation

Satellite pointing is vital to the success of a mission. One element of that entails describing the position of the sun relative to the frame of the satellite. Coarse Sun Sensors (CSS) are typically used to provide the information to calculate the sun's position in Safe Modes or contingency operations. In the OCO-2 configuration there are 13 CSS total, which provide redundant 4 celestial coverage. Failures of the individual CSS elements can introduce holes in the celestial coverage resulting in potential loss of sun knowledge. These failures must be analyzed to determine if the contingency plan is sufficient to assure mission success. First the static case was looked at and determined that at a maximum, 3 CSS failures can be sustained on the body and 1 on the array without causing coverage holes. Also array sensors are more important to mission success. The Sun Vector calculation has been transcribed to MATLAB code and failure scenarios are being examined to determine the maximum error given a set of failure scenarios. This activity indicated that if there is a loss of the sun, the sun-searching algorithm could be modified to use XZ rotation as that is guaranteed to find it whereas the design using the YZ rotation misses the sun if it is at the + or - Y orientation.

celestial bodies↗
NASA NTRS2004

Defect measurement and analysis of JPL ground software: a case study

Ground software systems at JPL must meet high assurance standards while remaining on schedule due to relatively immovable launch dates for spacecraft that will be controlled by such systems. Toward this end, the Software Quality Improvement (SQI) project's Measurement and Benchmarking (M&B) team is collecting and analyzing defect data of JPL ground system software projects to build software defect prediction models. The aim of these models is to improve predictability with regard to software quality activities. Predictive models will quantitatively define typical trends for JPL ground systems as well as Critical Discriminators (CDs) to provide explanations for atypical deviations from the norm at JPL. CDs are software characteristics that can be estimated or foreseen early in a software project's planning. Thus, these CDs will assist in planning for the predicted degree to which software quality activities for a project are likely to deviation from the normal JPL ground system based on pasted experience across the lab.

defects↗
NASA NTRS2014

Asteroid Bennu Temperature Maps for OSIRIS-REx Spacecraft and Instrument Thermal Analyses

A thermophysical model has been developed to generate asteroid Bennu surface temperature maps for OSIRIS-REx spacecraft and instrument thermal design and analyses at the Critical Design Review (CDR). Two-dimensional temperature maps for worst hot and worst cold cases are used in Thermal Desktop to assure adequate thermal design margins. To minimize the complexity of the Bennu geometry in Thermal Desktop, it is modeled as a sphere instead of the radar shape. The post-CDR updated thermal inertia and a modified approach show that the new surface temperature predictions are more benign. Therefore the CDR Bennu surface temperature predictions are conservative.

thermal analysis↗
NASA NTRS2017

Comprehensive Lifecycle for Assuring System Safety

CLASS is a novel approach to the enhancement of system safety in which the system safety case becomes the focus of safety engineering throughout the system lifecycle. CLASS also expands the role of the safety case across all phases of the system's lifetime, from concept formation to decommissioning. As CLASS has been developed, the concept has been generalized to a more comprehensive notion of assurance becoming the driving goal, where safety is an important special case. This report summarizes major aspects of CLASS and contains a bibliography of papers that provide additional details.

Knight, John C.↗
NASA NTRS1999

Employee Assistance Program Issues

Employee Assistance Program (EAP) officers, as well as personnel in other disciplines from eight NASA Centers, attended this breakout session. Ms. Brenda Blair, MA, CEAP, a guest speaker at the conference, also attended as a consultant. Representatives from the NASA Centers introduced themselves and spoke briefly about their programs. In a discussion related to the conference theme on benchmarking, quality control issues within the EAP community and adequate documentation of cases were addressed. Disposition and provision for quality assurance checks for EAP providers in single person offices were also discussed. Ms. Blair presented methods for consulting with other NASA personnel in single person EAP offices as a quality control measure. EAP intervention in critical incidents was discussed. The question of whether EAP assistance is an asset or a potential liability in those situations was addressed. Suggestions were made of topics for future EAP video-teleconference topics. A program on EAP ethics was planned for a September video teleconference. Each person was asked to provide intake forms they use to Mr. Gettleman or Ms. Blair. Ms. Blair said she would review the forms to ensure that adequate notification is provided to the client for confidentiality. She would also review them to ensure they have adequate limits of confidentiality--a topic for future video teleconferencing. Mr. Gettleman described the NASA initiative to reduce stresses in the workplace, and the activities of an ad-hoc EAP group that will make recommendations to NASA senior management. Alternative training methods were discussed for reaching target audiences such as employees at risk, supervisors, and others. Pfc. David A. Pendleton, Victim Assistance Coordinator, U.S. Capitol Police. U.S. House of Representatives made a special presentation. Pfc. Pendleton was on duty during the tragic shooting of two Federal guards at the U.S. Capitol. He related the events immediately after the incident. He described the nature and structure of the EAP's and the separate nature of the House and Senate programs. This episode was a particularly difficult situation as large numbers of tourists were involved. William S. Barry, MD, the new Manager of the NASA Occupational Health Program Office was introduced to those attending the breakout session.

Gettleman, Alan G.↗
NASA NTRS2008

AERONET-OC: Strengths and Weaknesses of a Network for the Validation of Satellite Coastal Radiometric Products

The Ocean Color component of the Aerosol Robotic Network (AERONET-OC) has been implemented to support long-term satellite ocean color investigations through cross-site consistent and accurate measurements collected by autonomous radiometer systems deployed on offshore fixed platforms. The ultimate purpose of AERONET-OC is the production of standardized measurements performed at different sites with identical measuring systems and protocols, calibrated using a single reference source and method, and processed with the same code. The AERONET-OC primary data product is the normalized water leaving radiance determined at center-wavelengths of interest for satellite ocean color applications, with an uncertainty lower than 5% in the blue-green spectral regions and higher than 8% in the red. Measurements collected at 6 sites counting the northern Adriatic Sea, the Baltic Proper, the Gulf of Finland, the Persian Gulf, and, the northern and southern margins of the Middle Atlantic Bay, have shown the capability of producing quality assured data over a wide range of bio-optical conditions including Case-2 yellow substance- and sedimentdominated waters. This work briefly introduces network elements like: deployment sites, measurement method, instrument calibration, processing scheme, quality-assurance, uncertainties, data archive and products accessibility. Emphases is given to those elements which underline the network strengths (i.e., mostly standardization of any network element) and its weaknesses (i.e., the use of consolidated, but old-fashioned technology). The work also addresses the application of AERONET-OC data to the validation of primary satellite radiometric products over a variety of complex coastal waters and finally provides elements for the identification of new deployment sites most suitable to support satellite ocean color missions.

Zibordi, Giuseppe↗
NASA NTRS2015

NASA System Safety Handbook. Volume 2: System Safety Concepts, Guidelines, and Implementation Examples

This is the second of two volumes that collectively comprise the NASA System Safety Handbook. Volume 1 (NASASP-210-580) was prepared for the purpose of presenting the overall framework for System Safety and for providing the general concepts needed to implement the framework. Volume 2 provides guidance for implementing these concepts as an integral part of systems engineering and risk management. This guidance addresses the following functional areas: 1.The development of objectives that collectively define adequate safety for a system, and the safety requirements derived from these objectives that are levied on the system. 2.The conduct of system safety activities, performed to meet the safety requirements, with specific emphasis on the conduct of integrated safety analysis (ISA) as a fundamental means by which systems engineering and risk management decisions are risk-informed. 3.The development of a risk-informed safety case (RISC) at major milestone reviews to argue that the systems safety objectives are satisfied (and therefore that the system is adequately safe). 4.The evaluation of the RISC (including supporting evidence) using a defined set of evaluation criteria, to assess the veracity of the claims made therein in order to support risk acceptance decisions.

Safety Case↗
NASA NTRS2023

Dragonfly: A Case Study in Dynamic Stability Characterization

Next decade, the Dragonfly probe will enter Titan’s atmosphere on a mission to explore and characterize its unique and complex organic chemistry. In contrast to Mars entry missions, where the challenge is to slow down in its tenuous atmosphere before impacting the surface, Titan’s thick atmosphere provides generous drag. However, Titan has its own unique EDL challenges. Among these challenges is the long time (on the order of 90 minutes!) the vehicle will need to descend unguided through flow regimes where blunt-body entry probes are known to be dynamically unstable. This elongated timeline, both prior to drogue parachute deployment, and during the ensuing descent, has the potential to allow adverse dynamic instability properties to produce large amplitude oscillations in angle-of-attack. This, in-turn may lead to non-compliance in vehicle attitude requirements for EDL events such as parachute deployment, and lander release, or in the most extreme case, tumbling of the aeroshell and near-assured loss of mission.

EDL↗
NASA NTRS2023

Dragonfly: A Case Study in Dynamic Stability Characterization

Next decade, the Dragonfly probe will enter Titan’s atmosphere on a mission to explore and characterize its unique and complex organic chemistry. In contrast to Mars entry missions, where the challenge is to slow down in its tenuous atmosphere before impacting the surface, Titan’s thick atmosphere provides generous drag. However, Titan has its own unique EDL challenges. Among these challenges is the long time (on the order of 90 minutes!) the vehicle will need to descend unguided through flow regimes where blunt-body entry probes are known to be dynamically unstable. This elongated timeline, both prior to drogue parachute deployment, and during the ensuing descent, has the potential to allow adverse dynamic instability properties to produce large amplitude oscillations in angle-of-attack. This, in-turn may lead to non-compliance in vehicle attitude requirements for EDL events such as parachute deployment, and lander release, or in the most extreme case, tumbling of the aeroshell and near-assured loss of mission.

EDL↗
NASA NTRS2014

Querying Safety Cases

Querying a safety case to show how the various stakeholders' concerns about system safety are addressed has been put forth as one of the benefits of argument-based assurance (in a recent study by the Health Foundation, UK, which reviewed the use of safety cases in safety-critical industries). However, neither the literature nor current practice offer much guidance on querying mechanisms appropriate for, or available within, a safety case paradigm. This paper presents a preliminary approach that uses a formal basis for querying safety cases, specifically Goal Structuring Notation (GSN) argument structures. Our approach semantically enriches GSN arguments with domain-specific metadata that the query language leverages, along with its inherent structure, to produce views. We have implemented the approach in our toolset AdvoCATE, and illustrate it by application to a fragment of the safety argument for an Unmanned Aircraft System (UAS) being developed at NASA Ames. We also discuss the potential practical utility of our query mechanism within the context of the existing framework for UAS safety assurance.

Safety Case↗
NASA NTRS2020

NASA Quality Assurance in an MBSE world

Over the past decade or so, the emergence of Model Based Systems Engineering (MBSE) has demonstrated its desirability and value in terms of 1) being a single source of truth, 2) unambiguous definitions and relationships, and 3) after representation, the ability to explore/extract any sets of data on demand. While much work has been done in showing the value to the system engineering discipline in these areas, how does that value translate to the Safety and Mission Assurance (S&MA) world? This paper provides a vision of a very desirable future of NASA S&MA after it is fully integrated into the MBSE framework. We explore the impact and consequences of the MBSE Value items discussed above and how they impact the disciplines of quality assurance, reliability and maintainability, system safety, and software assurance. We provide insight into how the MBSE modeling tools can be used to define S&MA processes (ideally as a result of Use Case [1] elaboration of processes represented in MagicDraw®), produce S&MA products (ViewEditor output of various items), and represent S&MA disciplines (S&MA inside of MagicDraw). We also provide insight into the degree to which some elements can be directly integrated into a SysML® model and when, as often happens, an interface to some external source must be provided. The desirability of this future is part of the reason for the NASA Office of Safety and Mission Assurance’s (OSMA) recent creation of a Model Based Mission Assurance (MBMA) Program [2] and the MBMA annual workshops. We briefly summarize the efforts to date to generate S&MA Use Cases for eventual deployment into pilot and project efforts. Even simple use of the SysML modeling tools can be used to capture quality assurance tasks and integrate them with the systems engineering and produce products that are easy to use by quality practitioners that are unfamiliar with these methods. We anticipate finding opportunities to pilot and implement various Quality Assurance (QA) Use Cases in FY20. The MBMA Program is focused on implementation; the NASA Office of the Chief Engineer's Community of Practice, as well as the SmallSat communities, are very interested in the integration of S&MA. Finally, as projects move forward utilizing whatever efficiency increases they can find in a cost-constrained environment, the S&MA community cannot be caught unawares and needs to continue preparing for the ever-growing implementation of MBSE across NASA and our government and commercial partners.

Evans, John W↗
NASA NTRS1976

Stabilizing feedback control for dynamical systems with bounded uncertainty

The theories of differential games and generalized dynamic systems are used to deduce stabilizing controllers for quasi-linear systems. Attention is given to a class of dynamic systems subject to parameter and input uncertainty whose values range in a given compact set. Using a worst case design philosophy, a feedback control is derived that assures uniform asymptotic (Liapunov) stability of the origin under all admissible uncertainties.

Gutman, S.↗
NASA NTRS1990

Hubble space telescope six-battery test bed

A test bed for a large space power system breadboard for the Hubble Space Telescope (HST) was designed and built to test the system under simulated orbital conditions. A discussion of the data acquisition and control subsystems designed to provide for continuous 24 hr per day operation and a general overview of the test bed is presented. The data acquisition and control subsystems provided the necessary monitoring and protection to assure safe shutdown with protection of test articles in case of loss of power or equipment failure over the life of the test (up to 5 years).

Pajak, J. A.↗
NASA NTRS1999

Utilizing Advanced Vibration Isolation Technology to Enable Microgravity Science Operations

Microgravity scientific research is performed in space to determine the effects of gravity upon experiments. Until recently, experiments had to accept the environment aboard various carriers: reduced-gravity aircraft, sub-orbital payloads, Space Shuttle, and Mir. If the environment is unacceptable, then most scientists would rather not expend the resources without the assurance of true microgravity conditions. This is currently the case on the International Space Station, because the ambient acceleration environment will exceed desirable levels. For this reason, the g-LIMIT (Glovebox Integrated Microgravity Isolation Technology) system is currently being developed to provide a quiescent acceleration environment for scientific operations. This sub-rack isolation system will provide a generic interface for a variety of experiments for the Microgravity Science Glovebox. This paper describes the motivation for developing of the g-LIMIT system, presents the design concept and details some of the advanced technologies utilized in the g-LIMIT flight design.

Alhorn, Dean Carl↗
NASA NTRS2016

Deformation of Cases in High Capacitance Value Wet Tantalum Capacitors under Environmental Stresses

Internal gas pressure in hermetic wet tantalum capacitors is created by air, electrolyte vapor, and gas generated by electrochemical reactions at the electrodes. This pressure increases substantially with temperature and time of operation due to excessive leakage currents. Deformation of the case occurs when the internal pressure exceeds pressure of the environments and can raise significantly when a part operates in space. Contrary to the cylinder case wet tantalum capacitors that have external sealing by welding and internal sealing provided by the Teflon bushing and crimping of the case, no reliable internal sealing exists in the button case capacitors. Single seal design capacitors are used for high capacitance value wet tantalum capacitors manufactured per DLA L&M drawings #04003, 04005, and 10011, and require additional analysis to assure their reliable application in space systems. In this work, leakage currents and case deformation of button case capacitors were measured during different environmental test conditions. Recommendations for derating, screening and qualification testing are given. This work is a continuation of a series of NEPP reports related to quality and reliability of wet tantalum capacitors.

Tantalum Capacitors↗
NASA NTRS2004

Evaluation of Open-Source Hard Real Time Software Packages

Reliable software is, at times, hard to find. No piece of software can be guaranteed to work in every situation that may arise during its use here at Glenn Research Center or in space. The job of the Software Assurance (SA) group in the Risk Management Office is to rigorously test the software in an effort to ensure it matches the contract specifications. In some cases the SA team also researches new alternatives for selected software packages. This testing and research is an integral part of the department of Safety and Mission Assurance. Real Time operation in reference to a computer system is a particular style of handing the timing and manner with which inputs and outputs are handled. A real time system executes these commands and appropriate processing within a defined timing constraint. Within this definition there are two other classifications of real time systems: hard and soft. A soft real time system is one in which if the particular timing constraints are not rigidly met there will be no critical results. On the other hand, a hard real time system is one in which if the timing constraints are not met the results could be catastrophic. An example of a soft real time system is a DVD decoder. If the particular piece of data from the input is not decoded and displayed to the screen at exactly the correct moment nothing critical will become of it, the user may not even notice it. However, a hard real time system is needed to control the timing of fuel injections or steering on the Space Shuttle; a delay of even a fraction of a second could be catastrophic in such a complex system. The current real time system employed by most NASA projects is Wind River's VxWorks operating system. This is a proprietary operating system that can be configured to work with many of NASA s needs and it provides very accurate and reliable hard real time performance. The down side is that since it is a proprietary operating system it is also costly to implement. The prospect of replacing this somewhat costly implementation is the focus of one of the SA group s current research projects. The explosion of open source software in the last ten years has led to the development of a multitude of software solutions which were once only produced by major corporations. The benefits of these open projects include faster release and bug patching cycles as well as inexpensive if not free software solutions. The main packages for hard real time solutions under Linux are Real Time Application Interface (RTAI) and two varieties of Real Time Linux (RTL), RTLFree and RTLPro. During my time here at NASA I have been testing various hard real time solutions operating as layers on the Linux Operating System. All testing is being run on an Intel SBC 2590 which is a common embedded hardware platform. The test plan was provided to me by the Software Assurance group at the start of my internship and my job has been to test the systems by developing and executing the test cases on the hardware. These tests are constructed so that the Software Assurance group can get hard test data for a comparison between the open source and proprietary implementations of hard real time solutions.

Mattei, Nicholas S.↗
NASA NTRS1979

Manufacturing methods of a composite cell case for a Ni-Cd battery

Basic manufacturing method refinements for using graphite epoxy material for a nickel cadmium battery cell case were performed to demonstrate production feasibility. The various facets of production scale-up, i.e., process and tooling development, together with material and process control, were integrated into a comprehensive manufacturing process that assures production reproducibility and product uniformity. Test results substantiate that a battery cell case produced from graphite epoxy pre-impregnated material, utilizing the internal pressure bag fabrication method, is feasible.

Bauer, J. L.↗