Search NASA⌕ Search

SEARCH · Search NASA

Results for “safety certification”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 109 records · Page 6

In-Time Safety Management for Part 139 Airports

Today’s airports are complex multi-faceted ecosystems. Currently, of the 517 certificated airports, 270 are required to use safety management systems (SMSs) to identify and mitigate known hazards and emergent risks and to voluntarily share safety data with commercial operators and tenants. Airports manage a wide variety of hazards. These traffic hubs have direct responsibilities, such as removing foreign object debris from runways and taxiways and configuring runways to help prevent against incursions and tail strikes during takeoff. To ensure safety in the future NAS, the National Academies recommended an In-time Aviation Safety Management System (IASMS). An IASMS will employ services, functions, and capabilities (SFCs) to identify and mitigate hazards that are proactively and predictively managed based on data analytics of detected anomalies, precursors, and trends. SFCs would scale with airport complexity and environmental conditions using increasingly automated systems to respond proactively to hazards and, by using integrated data sources and predictive safety analytical methods, discover new, never before seen risks.

IASMS↗

Assessment of Aircraft Electric Engine Regulatory Special Conditions

This report provides a regulatory gap assessment of the Federal Aviation Administration (FAA) and the European Union Aviation Safety Agency (EASA) Special Conditions (SC) for electric engines. This information is presented to support ongoing international harmonization efforts for electric engine certification, to establish a level of safety consistent across regulatory bodies and equivalent to that of existing combustion engines. HS Advanced Concepts LLC assembled a team of subject-matter experts to develop a comprehensive comparison of the regulatory text of EASA SC E-19 and the FAA special conditions for the certification of electric engines. The team included Mr. Chris Baczynski of BAC Aerospace Inc. and Mr. Zach Kaufman, formerly with magniX.

aircraft certification↗

Fabrication Lessons Learned of Transportation Packaging from the Perspective of a Design Authority - 20322

This paper presents lessons learned regarding fabricating packaging systems from the perspective of a design authority (DA). Capturing and implementing lessons learned is critical for an organization to reduce systematic project risk and thereby promote the likelihood of project success. This paper defines the design authority as the organization responsible for technical design, resolving technical design issues, quality assurance program, and maintenance of the packaging system license. A package system is defined as the packaging, its contents, and auxiliary equipment. Packages are certified by the NRC under 10 CFR 71[1] for transportation by ground. The following lessons learned subjects are presented in the paper: quality assurance, interpretation of drawing dimensional requirements, execution of manufacturing processes, hardware dimensional inspection, and leakage rate testing. All discrepancies presented in this paper have been resolved as described in the appropriate final data package. All described package systems are in compliance with their Safety Analysis Report (SAR) and certificate of conformance requirements. The intent of this paper is to identify opportunities for improving the outcome of future projects and to mitigate fabrication challenges proactively. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Structures and materials technology for hypersonic aerospacecraft

Major considerations in structural design of a transatmospheric aerospacecraft are discussed. The general direction of progress in structures and materials technology is indicated, and technical areas in structures and materials where further research and development is necessary are indicated. Various structural concepts under study and materials which appear to be most applicable are discussed. Structural design criteria are discussed with particular attention to the factor-of-safety approach and the probabilistic approach. Structural certification requirements for the aerospacecraft are discussed. The kinds of analyses and tests which would be required to certify the structural integrity, safety, and durability of the aerospacecraft are discussed, and the type of test facility needed to perform structural certification tests is identified.

Mccomb, Harvey G., Jr.↗

Evidence Arguments for Using Formal Methods in Software Certification

We describe a generic approach for automatically integrating the output generated from a formal method/tool into a software safety assurance case, as an evidence argument, by (a) encoding the underlying reasoning as a safety case pattern, and (b) instantiating it using the data produced from the method/tool. We believe this approach not only improves the trustworthiness of the evidence generated from a formal method/tool, by explicitly presenting the reasoning and mechanisms underlying its genesis, but also provides a way to gauge the suitability of the evidence in the context of the wider assurance case. We illustrate our work by application to a real example-an unmanned aircraft system- where we invoke a formal code analysis tool from its autopilot software safety case, automatically transform the verification output into an evidence argument, and then integrate it into the former.

Argumentation↗

Human workload in aviation

The application of human-factors analysis techniques to the evaluation of aircraft-crew workloads is discussed in an introductory overview. Consideration is given to the importance of workload for safety, crew size, automation, and certification; the definition and measurement of workload, physical vs mental workloads, subjective ratings, secondary tasks, biocybernetic measures, and attention and workload. Recent studies of pilot and ATC workloads are reviewed, and typical data are presented in graphs. Future trends are discussed, and it is predicted that increased cockpit automation will eventually require new methods to maintain operator attention rather than reduce workload.

Kantowitz, Barry H.↗

High-speed civil transport flight- and propulsion-control technological issues

Technology advances required in the flight and propulsion control system disciplines to develop a high speed civil transport (HSCT) are identified. The mission and requirements of the transport and major flight and propulsion control technology issues are discussed. Each issue is ranked and, for each issue, a plan for technology readiness is given. Certain features are unique and dominate control system design. These features include the high temperature environment, large flexible aircraft, control-configured empennage, minimizing control margins, and high availability and excellent maintainability. The failure to resolve most high-priority issues can prevent the transport from achieving its goals. The flow-time for hardware may require stimulus, since market forces may be insufficient to ensure timely production. Flight and propulsion control technology will contribute to takeoff gross weight reduction. Similar technology advances are necessary also to ensure flight safety for the transport. The certification basis of the HSCT must be negotiated between airplane manufacturers and government regulators. Efficient, quality design of the transport will require an integrated set of design tools that support the entire engineering design team.

Ray, J. K.↗

A Tool for Verification and Validation of Neural Network Based Adaptive Controllers for High Assurance Systems

High reliability of mission- and safety-critical software systems has been identified by NASA as a high-priority technology challenge. We present an approach for the performance analysis of a neural network (NN) in an advanced adaptive control system. This problem is important in the context of safety-critical applications that require certification, such as flight software in aircraft. We have developed a tool to measure the performance of the NN during operation by calculating a confidence interval (error bar) around the NN's output. Our tool can be used during pre-deployment verification as well as monitoring the network performance during operation. The tool has been implemented in Simulink and simulation results on a F-15 aircraft are presented.

Gupta, Pramod↗

Closing the Certification Gaps in Adaptive Flight Control Software

Over the last five decades, extensive research has been performed to design and develop adaptive control systems for aerospace systems and other applications where the capability to change controller behavior at different operating conditions is highly desirable. Although adaptive flight control has been partially implemented through the use of gain-scheduled control, truly adaptive control systems using learning algorithms and on-line system identification methods have not seen commercial deployment. The reason is that the certification process for adaptive flight control software for use in national air space has not yet been decided. The purpose of this paper is to examine the gaps between the state-of-the-art methodologies used to certify conventional (i.e., non-adaptive) flight control system software and what will likely to be needed to satisfy FAA airworthiness requirements. These gaps include the lack of a certification plan or process guide, the need to develop verification and validation tools and methodologies to analyze adaptive controller stability and convergence, as well as the development of metrics to evaluate adaptive controller performance at off-nominal flight conditions. This paper presents the major certification gap areas, a description of the current state of the verification methodologies, and what further research efforts will likely be needed to close the gaps remaining in current certification practices. It is envisioned that closing the gap will require certain advances in simulation methods, comprehensive methods to determine learning algorithm stability and convergence rates, the development of performance metrics for adaptive controllers, the application of formal software assurance methods, the application of on-line software monitoring tools for adaptive controller health assessment, and the development of a certification case for adaptive system safety of flight.

Jacklin, Stephen A.↗

NASA-STD-6001B Test 1 Upward Flame Propagation; Sample Length Impact on MOC Investigation

Understanding the combustion behavior of materials in the elevated oxygen environments of habitable spacecraft is of utmost importance to crew safety and mission success. Currently, certification for unrestricted flight usage of a material with respect to flammability involves passing the Upward Flame Propagation Test of NASA-STD-6001B (Test 1). This test evaluates materials in a standardized test configuration for two failure criteria: self-extinguishment within 15 cm (6 in.) and the propensity of flame propagation by means of flaming material transfer. By the NASA standard, full-length samples are 30 cm (12 in.) in length; however, factors independent of the test method such as limited material availability or various nonstandard test configurations limit the full pretest sample lengths available for test. This paper characterizes the dependence, if any, of pretest sample length on NASA-STD-6001B Test 1 results. Testing was performed using the Maximum Oxygen Concentration (MOC) Threshold Method to obtain a data set for each sample length tested. In addition, various material types, including cloth (Nomex), foam (TA-301) and solids (Ultem), were tested to investigate potential effects of test specimen types. Though additional data needs to be generated to provide statistical confidence, preliminary findings are that use of variable sample lengths has minimal impact on NASA-STD-6001B flammability performance and MOC determination.

Harper, Susana Tapia↗

Ensuring Safety of Government Personnel During Suborbital Spaceflight

The NASA Suborbital Crew (SubC) project is focused on enabling flights by NASA civil servants, such as scientists and engineers conducting research, on suborbital vehicles. A broader goal is ensuring that commercial human spaceflight is both viable and safe. Within the Commercial Crew Program (CCP), the SubC project is exploring game-changing methods to perform safety assessments to enable NASA personnel to fly on suborbital missions. Commercial suborbital space flight capabilities are anticipated to be more accessible, affordable, and available than missions to the International Space Station and could provide additional opportunities for testing and qualification of space flight hardware, human-tended microgravity research, and further cutting-edge research enabled by the space environment. Although NASA currently permits human tended suborbital payloads for non-civil servants under auspices of NASA’s Flight Opportunities Program, the SubC effort will enable civil servant scientists, researchers, and even engineers to accompany their experiments and tests into the space microgravity environment. Figure 1 illustrates how the SubC program complements other microgravity experimental platforms. The targeted scope for SubC includes end-to-end suborbital capabilities reaching ~80km with several minutes of sustained microgravity (Table 1). The NASA SubC project office is working with the Federal Aviation Administration’s Office of Commercial Space Transportation (FAA-AST) and the commercial suborbital space transportation industry to develop an efficient and holistic approach to a safety review and eventual government participation in suborbital flight. The current FAA certification process for suborbital launches is congressionally mandated to only consider public safety. NASA is responsible for understanding the risks to its employees should they fly on a commercially available suborbital flight. The SubC project is employing a Safety Case approach, applied to commercial suborbital providers, which is not a traditional certification process as was used for the SpaceX Dragon and Boeing Starliner vehicles. Rather, it is an assessment using elements of NASA’s Risk-Informed Safety Case and the Armstrong Flight Research Center’s Airworthiness Assessment process.

Elizabeth C Blome↗

NASA Crew Transportation System Certification Plan

NASA Crew Transportation System (CTS) Certification is the authorization granted by the Agency that allows the use of a Commercial Provider’s CTS to transport NASA Crew to and from the ISS. The CTS Certification decision is made by the NASA Associate Administrator based on the comprehensive assessment of the Certification Review Board and recommendations from the CCP and ISS Program Managers and the NASA Associate Administrator of Space Operations Mission Directorate. The Commercial Provider is responsible for developing and executing its plan for certifying the CTS. The Commercial Crew Program (CCP) with the International Space Station (ISS) Program must substantiate the Commercial Provider’s certification assertion of compliance with NASA requirements and NASA Crew safety.

CCP↗

Safety Characteristics in System Application of Software for Human Rated Exploration Missions for the 8th IAASS Conference

NASA and its industry and international partners are embarking on a bold and inspiring development effort to design and build an exploration class space system. The space system is made up of the Orion system, the Space Launch System (SLS) and the Ground Systems Development and Operations (GSDO) system. All are highly coupled together and dependent on each other for the combined safety of the space system. A key area of system safety focus needs to be in the ground and flight application software system (GFAS). In the development, certification and operations of GFAS, there are a series of safety characteristics that define the approach to ensure mission success. This paper will explore and examine the safety characteristics of the GFAS development. The GFAS system integrates the flight software packages of the Orion and SLS with the ground systems and launch countdown sequencers through the 'agile' software development process. A unique approach is needed to develop the GFAS project capabilities within this agile process. NASA has defined the software development process through a set of standards. The standards were written during the infancy of the so-called industry 'agile development' movement and must be tailored to adapt to the highly integrated environment of human exploration systems. Safety of the space systems and the eventual crew on board is paramount during the preparation of the exploration flight systems. A series of software safety characteristics have been incorporated into the development and certification efforts to ensure readiness for use and compatibility with the space systems. Three underlining factors in the exploration architecture require the GFAS system to be unique in its approach to ensure safety for the space systems, both the flight as well as the ground systems. The first are the missions themselves, which are exploration in nature, and go far beyond the comfort of low Earth orbit operations. The second is the current exploration system will launch only one mission per year even less during its developmental phases. Finally, the third is the partnered approach through the use of many different prime contractors, including commercial and international partners, to design and build the exploration systems. These three factors make the challenges to meet the mission preparations and the safety expectations extremely difficult to implement. As NASA leads a team of partners in the exploration beyond earth's influence, it is a safety imperative that the application software used to test, checkout, prepare and launch the exploration systems put safety of the hardware and mission first. Software safety characteristics are built into the design and development process to enable the human rated systems to begin their missions safely and successfully. Exploration missions beyond Earth are inherently risky, however, with solid safety approaches in both hardware and software, the boldness of these missions can be realized for all on the home planet.

capability↗

Sample Return Primer and Handbook

This three-part Sample Return Primer and Handbook provides a road map for conducting the terminal phase of a sample return mission. The main chapters describe element-by-element analyses and trade studies, as well as required operations plans, procedures, contingencies, interfaces, and corresponding documentation. Based on the experiences of the lead Stardust engineers, the topics include systems engineering (in particular range safety compliance), mission design and navigation, spacecraft hardware and entry, descent, and landing certification, flight and recovery operations, mission assurance and system safety, test and training, and the very important interactions with external support organizations (non-NASA tracking assets, landing site support, and science curation).

Stardust↗

Adaptive Stress Testing: Using Reinforcement Learning to Find Failures in Safety-Critical Systems

Emerging applications in artificial intelligence, such as driverless cars and autonomous aircraft promise to be more efficient, cheaper to operate, and always available. However, ensuring the safety of these systems remains a major challenge to their certification and adoption. These autonomous systems are expected to routinely make safety-critical decisions where failures can have serious consequences including loss of life and property. Testing and validation techniques aim to identify and diagnose potential failures before the system is deployed. However, finding failure scenarios in autonomous systems can be very challenging due to high-dimensional and continuous state spaces, interaction with large environments over many time steps, and the rarity of failures. This talk presents Adaptive Stress Testing (AST), a simulation-based testing framework for finding the most likely path to a failure event of a safety-critical system. The key idea of AST is that stress testing can be formulated as a Partially Observable Markov Decision Process (POMDP), which enables reinforcement learning techniques to be used for finding failure events. Reinforcement learning algorithms can efficiently explore the search space and have been shown to scale to very large systems. We present applications of AST to find failures in various safety-critical systems including the aircraft collision avoidance systems, autonomous cars, and small unmanned aerial vehicles.

autonomous vehicles↗

Climbing the Extravehicular Activity (EVA) Wall - Safely

The success of the EVA team, that includes the EVA project office, Crew Office, Mission Operations, Engineering and Safety, is assured by the full integration of all necessary disciplines. Safety participation in all activities from hardware development concepts, certification and crew training, provides for a strong partnership within the team. Early involvement of Safety on the EVA team has mitigated risk and produced a high degree of mission success.

Fuentes, Jose↗

Human Factors Process Task Analysis Liquid Oxygen Pump Acceptance Test Procedure for the Advanced Technology Development Center

A process task analysis effort was undertaken by Dynacs Inc. commencing in June 2002 under contract from NASA YA-D6. Funding was provided through NASA's Ames Research Center (ARC), Code M/HQ, and Industrial Engineering and Safety (IES). The John F. Kennedy Space Center (KSC) Engineering Development Contract (EDC) Task Order was 5SMA768. The scope of the effort was to conduct a Human Factors Process Failure Modes and Effects Analysis (HF PFMEA) of a hazardous activity and provide recommendations to eliminate or reduce the effects of errors caused by human factors. The Liquid Oxygen (LOX) Pump Acceptance Test Procedure (ATP) was selected for this analysis. The HF PFMEA table (see appendix A) provides an analysis of six major categories evaluated for this study. These categories include Personnel Certification, Test Procedure Format, Test Procedure Safety Controls, Test Article Data, Instrumentation, and Voice Communication. For each specific requirement listed in appendix A, the following topics were addressed: Requirement, Potential Human Error, Performance-Shaping Factors, Potential Effects of the Error, Barriers and Controls, Risk Priority Numbers, and Recommended Actions. This report summarizes findings and gives recommendations as determined by the data contained in appendix A. It also includes a discussion of technology barriers and challenges to performing task analyses, as well as lessons learned. The HF PFMEA table in appendix A recommends the use of accepted and required safety criteria in order to reduce the risk of human error. The items with the highest risk priority numbers should receive the greatest amount of consideration. Implementation of the recommendations will result in a safer operation for all personnel.

Diorio, Kimberly A.↗

Zero/zero rotorcraft certification issues. Volume 1: Executive summary

This report analyzes the Zero/Zero Rotorcraft Certification Issues from the perspectives of manufacturers, operators, researchers and the FAA. The basic premise behind this analysis is the zero/zero, or at least extremely low visibility, rotorcraft operations are feasible today from both a technological and an operational standpoint. The questions and issues that need to be resolved are: What certification requirements do we need to ensure safety. Can we develop procedures which capitalize on the performance and maneuvering capabilities unique to rotorcraft. Will exptremely low visibility operations be economically feasible. This is Volume 1 of three. It provides an overview of the Certification Issues Forum held in Phoenix, Arizona in August of 1987. It presents a consensus of 48 experts from government, manufacturer, and research communities on 50 specific Certification Issues. The topics of Operational Requirements, Procedures, Airworthiness, and Engineering Capabilities are discussed.

Adams, Richard J.↗