Search NASA⌕ Search

SEARCH · Search NASA

Results for “functional fault models”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 109 records · Page 6
All sourcesNASA NTRSDOE OSTI
NASA NTRS1999

Hybrid Modeling for Testing Intelligent Software for Lunar-Mars Closed Life Support

Intelligent software is being developed for closed life support systems with biological components, for human exploration of the Moon and Mars. The intelligent software functions include planning/scheduling, reactive discrete control and sequencing, management of continuous control, and fault detection, diagnosis, and management of failures and errors. Four types of modeling information have been essential to system modeling and simulation to develop and test the software and to provide operational model-based what-if analyses: discrete component operational and failure modes; continuous dynamic performance within component modes, modeled qualitatively or quantitatively; configuration of flows and power among components in the system; and operations activities and scenarios. CONFIG, a multi-purpose discrete event simulation tool that integrates all four types of models for use throughout the engineering and operations life cycle, has been used to model components and systems involved in the production and transfer of oxygen and carbon dioxide in a plant-growth chamber and between that chamber and a habitation chamber with physicochemical systems for gas processing.

Malin, Jane T.↗
NASA NTRS1979

Care 3, Phase 1, volume 1

A computer program to aid in accessing the reliability of fault tolerant avionics systems was developed. A simple mathematical expression was used to evaluate the reliability of any redundant configuration over any interval during which the failure rates and coverage parameters remained unaffected by configuration changes. Provision was made for convolving such expressions in order to evaluate the reliability of a dual mode system. A coverage model was also developed to determine the various relevant coverage coefficients as a function of the available hardware and software fault detector characteristics, and subsequent isolation and recovery delay statistics.

Stiffler, J. J.↗
NASA NTRS2018

Assurance of Model-Based Fault Diagnosis

Autonomy is an increasingly important technology for robotic scientific and commercial spacecraft. An important motivation for developing onboard autonomy is to enable quick response to dynamic environment and situations, including fault conditions that a spacecraft may encounter. The reliability of such autonomous capabilities depends on the quality of their knowledge of a spacecraft’s health state. Model-based approaches to fault management, i.e. model-based fault diagnosis (MBFD), is one approach to continuously verify correct behavior in addition to diagnosing symptoms to estimate the spacecraft’s health state. The proper functioning of MBFD is dependent on 1) the quality of the model that is analyzed and compared to the outputs of onboard sensors to estimate the system’s health state, and 2) the correct functioning of the diagnosis engine that interrogates the model and compares its analysis to observed system behavior. We are currently developing Verification and Validation (V&V) approaches to provide the necessary confidence that MBFD systems are correctly estimating the health of on-board spacecraft components and systems. Our work is intended to narrow the gap between the rapidly maturing field of ModelBased System Engineering (including MBFD) and the less-well understood area of identifying and applying appropriate V&V techniques to MBFD. Our effort is investigating three areas: 1) developing V&V techniques for the diagnostic model, 2) developing V&V techniques for the diagnostic engine in isolation, and 3) developing V&V techniques for the diagnostic engine and model in combination. This paper describes the work we have completed in the first area. We describe our approach to selecting a system to be represented by a model, the approach to modeling the system, the verification approach we developed for the model, and the results of the verification activity. We conclude with a description of the work remaining in the last two areas, which will be addressed over the next two years.

Chung, Seung↗
NASA NTRS1992

Implementation of an intelligent control system

A laboratory testbed facility which was constructed at NASA LeRC for the development of an Intelligent Control System (ICS) for reusable rocket engines is described. The framework of the ICS consists of a hierarchy of various control and diagnostic functions. The traditional high speed, closed-loop controller resides at the lowest level of the ICS hierarchy. Above this level resides the diagnostic functions which identify engine faults. The ICS top level consists of the coordination function which manages the interaction between an expert system and a traditional control system. The purpose of the testbed is to demonstrate the feasibility of the OCS concept by implementing the ICS as the primary controller in a simulation of the Space Shuttle Main Engine (SSME). The functions of the ICS which are implemented in the testbed are as follows: an SSME dynamic simulation with selected fault mode models, a reconfigurable controller, a neural network for sensor validation, a model-based failure detection algorithm, a rule based failure detection algorithm, a diagnostic expert system, an intelligent coordinator, and a user interface which provides a graphical representation of the event occurring within the testbed. The diverse nature of the ICS has led to the development of a distributed architecture consisting of specialized hardware and software for the implementation of the various functions. This testbed is made up of five different computer systems. These individual computers are discussed along with the schemes used to implement the various ICS components. The communication between computers and the timing and synchronization between components are also addressed.

Simon, D. L.↗
DOE OSTI2021

Refinements to the Graves–Pitarka Kinematic Rupture Generator, Including a Dynamically Consistent Slip-Rate Function, Applied to the 2019 Mw 7.1 Ridgecrest Earthquake

The main objective of this study is to develop physics–based constraints on the spatiotemporal variation of the slip–rate function using a simplified dynamic rupture model. First, we performed dynamic rupture modeling of the 2019 M w 7.1 Ridgecrest, California, earthquake, to analyze the effects of depth–dependent stress and material friction on slip rate. Then, we used our modeling results to guide refinements to the slip–rate function that were implemented in the Graves–Pitarka kinematic rupture generation technique. The dynamic ruptures were computed on a surface–rupturing, planar strike–slip fault that includes a weak (negative to low–stress–drop) zone in the upper 4 km of the crust. Below the weak zone, we placed high–stress–drop patches designed to mirror the large–slip areas seen in various rupture model inversions of the event. The locations of the high–stress–drop patches and the hypocenter were varied in multiple realizations to investigate how changing the dynamic conditions affected the resulting rupture kinematics, in particular, the slip rate. From these simulations, we observed a systematic change in the shape of the slip–rate function from Kostrov type below the weak zone to a predominantly symmetric shape within the weak zone, along with a depth–dependent reduction of peak slip rate. We generalized these shallow rupture features into a depth–dependent parametric variation of the slip–rate function and implemented it in the Graves–Pitarka kinematic rupture model generator. The performance of the updated kinematic approach was then verified in 0–4 Hz simulations of the M w 7.1 Ridgecrest earthquake, which showed that incorporating the depth–dependent variation in the shape of the slip–rate function improves the fit to the observed near–fault ground motions in the 0.5–3 s period range.

58 GEOSCIENCES↗
NASA NTRS1984

Upper and lower bounds for semi-Markov reliability models of reconfigurable systems

This paper determines the information required about system recovery to compute the reliability of a class of reconfigurable systems. Upper and lower bounds are derived for these systems. The class consists of those systems that satisfy five assumptions: the components fail independently at a low constant rate, fault occurrence and system reconfiguration are independent processes, the reliability model is semi-Markov, the recovery functions which describe system configuration have small means and variances, and the system is well designed. The bounds are easy to compute, and examples are included.

White, A. L.↗
DOE OSTI2023

Geomechanical in situ testing of fault reactivation in argillite repositories

Abstract. Pressurization of natural faults as a result of repository-induced effects can lead to their reactivation and permeability generation in case such features are present near disposal tunnels. Potential driving forces for such pressurization are the temperature increase caused by heat-producing high-level radioactive waste and the generation of hydrogen and other gases due to corrosion of engineered materials. We are primarily concerned about pressurization and fault activation in host rocks and faults that have very low natural permeability for pore pressure increases to dissipate, such as the argillite rocks currently investigated in Switzerland, France and other countries. This presentation discusses a series of in situ experiments of fault activation by fluid injection conducted in the argillite rock (Opalinus clay) at the Mont Terri underground research laboratory in Switzerland. A multi-model monitoring test bed was installed at Mont Terri that includes distributed fiber optics for strain, temperature, and acoustics; local fault pore pressure and three-dimensional displacement sensors; active seismic imaging; and passive seismic monitoring. The fault experiments (and their subsequent analysis via hydromechanical modeling) provide a new fundamental understanding of the coupling between pore pressure, fault deformation and permeability generation as a function of time and allow exploring how seismic and aseismic events may impact the integrity of faulted argillite host rock. Our experimental observations demonstrate that significant flow (and transport) can occur along the initially impermeable argillite fault when rupture is activated. However, the fault permeability decreases to almost its pre-activation value when fluid injection ceases and fluid pressure drops. Dilatant slip on the fault plane alone does not explain the observed increase in fault permeability; pressure-induced fault opening also plays a role, favored by the softness of the shale along with the fact that the structure of the fault zone prevents fluids from diffusing into the adjacent damage zone. Rupture initiation and permeability generation is initially aseismic, associated only with an increase in noise level and emerging tremors. Micro-earthquakes are initiated later in the experiments and typically occur away from the fluid-pressurized area. Hydromechanical models show that stress transferred from the initial aseismic deformation can build up to stress criticality and later induce seismic rupture. After presenting the experimental results, we will close the presentation with an outlook to future experimental campaigns using the fault test bed at Mont Terri. We are currently planning a controlled thermal stimulation of the fault, where instead of fluid injection as a trigger mechanism we will heat up the nearby rock volume and measure potential effects on fault stability. Lessons learned from our past and future experiments will help inform the safety assessment of geologic disposal in argillite host rock.

Birkholzer, Jens T.↗
NASA NTRS1995

A method for diagnosing time dependent faults using model-based reasoning systems

This paper explores techniques to apply model-based reasoning to equipment and systems which exhibit dynamic behavior (that which changes as a function of time). The model-based system of interest is KATE-C (Knowledge based Autonomous Test Engineer) which is a C++ based system designed to perform monitoring and diagnosis of Space Shuttle electro-mechanical systems. Methods of model-based monitoring and diagnosis are well known and have been thoroughly explored by others. A short example is given which illustrates the principle of model-based reasoning and reveals some limitations of static, non-time-dependent simulation. This example is then extended to demonstrate representation of time-dependent behavior and testing of fault hypotheses in that environment.

Goodrich, Charles H.↗
DOE OSTI2023

Real-Time Model-Adaptive Relaying Applied to Microgrid Protection

In microgrids, the short-circuit current magnitude is significantly limited by more than an order of magnitude due to the relatively small inverter-based resources. Commercially available protective devices for distribution cannot reliably protect a microgrid due to their dependence on the magnitude of the fault current. Moreover, overcurrent relays typically cannot function properly for a microgrid because they are incapable of detecting faults and/or performing the coordination between the relays in inverter-based microgrids operated in the islanded mode. This paper proposes a model-adaptive relay designed to adjust the relay curves based on the available generation and the network topology. The proposed method runs a real-time model of the microgrid, which gathers information from the network to calculate the available short-circuit current in the specified node. The fault current from the model is then used for the adaptive algorithm to calculate the relay settings, considering coordination with the downstream fuses and upstream reclosers. This work presents the validation of the proposed method in Hardware-in-the-Loop, in a hardware testbed as well as field deployed in a real microgrid in East-Tennessee.

24 POWER TRANSMISSION AND DISTRIBUTION↗
NASA NTRS2000

A Decentralized Adaptive Approach to Fault Tolerant Flight Control

This paper briefly reports some results of our study on the application of a decentralized adaptive control approach to a 6 DOF nonlinear aircraft model. The simulation results showed the potential of using this approach to achieve fault tolerant control. Based on this observation and some analysis, the paper proposes a multiple channel adaptive control scheme that makes use of the functionally redundant actuating and sensing capabilities in the model, and explains how to implement the scheme to tolerate actuator and sensor failures. The conditions, under which the scheme is applicable, are stated in the paper.

Wu, N. Eva↗
NASA NTRS2018

Modeling Spacecraft Safe Mode Events

Spacecraft enter a ‘safe mode’ to protect the vehicle when a potentially harmful anomaly occurs. This minimally functioning state isolates faults, establishes contact with Earth, and orients the vehicle into a power positive attitude until operators intervene. Though ‘safings’ are inherently unpredictable, mission teams build in time margin during operations to determine root causes and restore functionality. Planning and managing this margin is both critical and enabling on mission architectures dependent on near-continuous operability – such as a low-thrust electric propulsion mission. To better quantify the occurrences and severity of safe mode anomalies, the Jet Propulsion Laboratory (JPL) has assembled a database of safings from past and active missions. Currently nearly 240 records are captured from 21 beyond-Earth missions, stemming from a collaboration between teams at JPL, Ames Research Center, Goddard Space Flight Center, and the Johns Hopkins University Applied Physics Laboratory. This paper discusses the event database, explores a statistical approach in modeling the occurrences and severity of safing events, presents a simulation technique, and details recommendations and future work to benefit future concepts.

Nicholas, Austin↗
NASA NTRS1999

A Process for Verifying and Validating Requirements for Fault Tolerant Systems Using Model Checking

Model checking is shown to be an effective tool in validating the behavior of a fault tolerant embedded spacecraft controller. The case study presented here shows that by judiciously abstracting away extraneous complexity, the state space of the model could be exhaustively searched allowing critical functional requirement to be validated down to the design level.

model checking fault tolerant embedded spacecraft ↗
NASA NTRS2024

MBSE (SysML) and Digital Twin Integration to Support Engineering Analysis & Design

Problem Statement: The complexity of Gateway systems and of managing the integrated safety analysis have made traditional methods of engineering analysis and design increasingly challenging. To address these challenges, a prototype that integrate Model-Based Systems Engineering (MBSE) with Digital Twin technology has been developed to demonstrate the utilities and functions. Project Goal: Develop a prototype of a Digital Twin Of Gateway ECLSS IMV system to enhance fault management analysis through collaboration, visualization, and simulation. Overall Project Results / Accomplishments: - Developed extension to streamline the integration of SysML models with the Digital Twin platform - Demonstrated the capability to aggregate any relevant information and provide simulation integration within the DT prototype. - Generated digital twin simulation using SysML Activity Diagrams - Implemented a complex trade study use case based on the integrated SysML-Digital Twin infrastructure

MBSE↗
NASA NTRS2004

Adaptive model-based control systems and methods for controlling a gas turbine

Adaptive model-based control systems and methods are described so that performance and/or operability of a gas turbine in an aircraft engine, power plant, marine propulsion, or industrial application can be optimized under normal, deteriorated, faulted, failed and/or damaged operation. First, a model of each relevant system or component is created, and the model is adapted to the engine. Then, if/when deterioration, a fault, a failure or some kind of damage to an engine component or system is detected, that information is input to the model-based control as changes to the model, constraints, objective function, or other control parameters. With all the information about the engine condition, and state and directives on the control goals in terms of an objective function and constraints, the control then solves an optimization so the optimal control action can be determined and taken. This model and control may be updated in real-time to account for engine-to-engine variation, deterioration, damage, faults and/or failures using optimal corrective control action command(s).

Brunell, Brent Jerome↗
NASA NTRS2007

Model Checking a Byzantine-Fault-Tolerant Self-Stabilizing Protocol for Distributed Clock Synchronization Systems

This report presents the mechanical verification of a simplified model of a rapid Byzantine-fault-tolerant self-stabilizing protocol for distributed clock synchronization systems. This protocol does not rely on any assumptions about the initial state of the system. This protocol tolerates bursts of transient failures, and deterministically converges within a time bound that is a linear function of the self-stabilization period. A simplified model of the protocol is verified using the Symbolic Model Verifier (SMV) [SMV]. The system under study consists of 4 nodes, where at most one of the nodes is assumed to be Byzantine faulty. The model checking effort is focused on verifying correctness of the simplified model of the protocol in the presence of a permanent Byzantine fault as well as confirmation of claims of determinism and linear convergence with respect to the self-stabilization period. Although model checking results of the simplified model of the protocol confirm the theoretical predictions, these results do not necessarily confirm that the protocol solves the general case of this problem. Modeling challenges of the protocol and the system are addressed. A number of abstractions are utilized in order to reduce the state space. Also, additional innovative state space reduction techniques are introduced that can be used in future verification efforts applied to this and other protocols.

Malekpour, Mahyar R.↗
NASA NTRS1985

Network reliability

Network control (or network management) functions are essential for efficient and reliable operation of a network. Some control functions are currently included as part of the Open System Interconnection model. For local area networks, it is widely recognized that there is a need for additional control functions, including fault isolation functions, monitoring functions, and configuration functions. These functions can be implemented in either a central or distributed manner. The Fiber Distributed Data Interface Medium Access Control and Station Management protocols provide an example of distributed implementation. Relative information is presented here in outline form.

Johnson, Marjory J.↗
NASA NTRS1994

Enhancements to the KATE model-based reasoning system

KATE (Knowledge-based Autonomous Test Engineer) is a model-based software system developed in the Artificial Intelligence Laboratory at the Kennedy Space Center for monitoring, fault detection, and control of launch vehicles and ground support systems. This report describes two software efforts which enhance the functionality and usability of KATE. The first addition, a flow solver, adds to KATE a tool for modeling the flow of liquid in a pipe system. The second addition adds support for editing KATE knowledge base files to the Emacs editor. The body of this report discusses design and implementation issues having to do with these two tools. It will be useful to anyone maintaining or extending either the flow solver or the editor enhancements.

Thomas, Stan J.↗