Search NASA⌕ Search

SEARCH · Search NASA

Results for “Safety Design Approach”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,135 records · Page 63

Minimum-Variance Control Allocation Considering Parametric Model Uncertainty

The control allocation problem was investigated for linear dynamical systems with known parametric uncertainty. Minimizing a cost function that penalizes the variance of the error in achieving commanded forces and moments on the vehicle resulted in a special case of the weighted pseudo-inverse allocator. Rather than an engineer designing the weighting matrix, it is computed from the covariances of the control effectiveness parameters. This minimum-variance allocator balances the effectiveness of the control inputs against the corresponding levels of uncertainty. The approach was demonstrated using simulations of aircraft with realistic uncertainty levels operating in open-loop and closed-loop configurations. Results showed that when model uncertainty is known, significant, and unevenly distributed amongst the controls, the minimum-variance allocator more often achieves the intended forces and moments on the vehicle in comparison to other allocators, which can lead to increased performance, reliability, and safety during flight tests. The cost for this robustness is a diminished achievable moment space for the vehicle.

Control allocation↗

Identifying Human Errors and Error Mechanisms From Accident Reports Using Large Language Models

Emerging operational concepts for aviation hinge on novel paradigms for human machine interaction. Critical to their safe operation is early consideration of human error into the design process. Existing methods for consideration of human error require significant expert input, which is challenging both in early design and in novel systems for which there is little existing safety expertise. In this research, we propose a methodology for identifying human error, error producing factors, and mechanisms in early design from historical incident reports. Additionally, we hypothesize that cross-domain sharing of lessons learned can aid with early design human considerations in circumstances where data is not relevant or incomplete. This is addressed by identifying causes of human error in aviation and railway domains through applying state-of-the art natural language processing techniques to historical incident reports. Using this method, it is possible to extract extensive reports on human error from past incidents. Using the proposed approach, we identify nine human errors from railway reports and fourteen from aviation reports, with three errors common to both domains. There is at least one error producing conditions for each human error while a majority of the errors have more than one error mechanism. We also found that a majority of the human errors, error producing factors, and error mechanisms (even if they are not common between the domains) can be used to inform safe operations across domains as long as the errors are not domain specific and are interpreted and contextualized using engineering judgement.

Human Errors↗

Standards Roadmapping for Mission Assurance in Commercial Spaceflight

This paper explores the application of established roadmapping approaches in standards planning and roadmap development to support mission assurance objectives. Mission assurance requires proactive planning across multiple domains including technical, schedule, cost, organizational, and policy. The intersection of these domains happens at the enterprise level, and enterprise systems engineering processes can systematically guide mission assurance activities, including development of standards roadmaps. Standards planning and development is a critical contributor to an effective mission assurance strategy, although standards are often developed and adopted reactively. Technology and standards planning is a key Enterprise Process Management activity, as identified by the Systems Engineering Body of Knowledge, and technology and standards roadmaps are strategic tools used to enable that process. Technology roadmapping has proven effective in guiding enterprise architecture and concept design, and standards planning supports enterprise requirements definition and management. However, there are limited methodologies to guide such standards planning activities. The application of technology roadmapping principles to standards planning formalizes the process and establishes a repeatable framework for standards development and integration. The framework development described in this paper fills a methodological gap by adapting proven roadmapping techniques to standards planning. Through a comparison of roadmapping methodologies and a case study analysis, this approach outlines a systematic process for anticipating and planning standards needs. In the case of developing a standards integration roadmap for NASA’s Office of Safety and Mission Assurance (OSMA), technology roadmapping principles were adapted to develop a roadmap framework to allow NASA and OSMA to define an agency-wide standards integration plan for commercial and industry safety and mission assurance standards. The outcome highlights key adaptations required for roadmapping in a standards context and describes the process steps to formalize a standards planning activity. The roadmapping framework adapted for standards development and integration enables more strategic, forward-looking standards planning and allows for better alignment between evolving capabilities and mission assurance requirements. Beyond its application to mission assurance, this methodology can be transferred to other domains requiring standards development, providing a systematic approach that integrates systems engineering principles into policy strategy and decision-making processes.

Enterprise Systems Engineering↗

Moon to Mars (M2M) Habitation Considerations: A Snap Shot As of January 2022

The following NASA Technical Memorandum (TM) is intended to provide a snapshot in time of NASA’s current considerations (ground rules and assumptions, functional allocations, logistics) for habitation systems for the lunar surface (non-roving) and Mars transits. As NASA continues to refine the reference designs to meet the needs of an evolving architecture, it is expected that this information will also be updated as a result. Where appropriate, relevant publicly released documents will be referenced to provide further detail. NASA’s human lunar exploration plan under the Artemis program calls for achieving the goal of sending the first woman and first person of color to the surface of the Moon in the mid- 2020s and working toward sustainable exploration by the end of the decade. Working with both commercial and international partners, NASA will establish a permanent human presence on the Moon to uncover new scientific discoveries and lay the foundation for private companies to build a lunar economy. Longer duration missions on the lunar surface and in lunar orbit will also serve as a test bed for technologies to support future Mars exploration campaigns. The agency will use what we learn on the Moon to prepare for humanity's next giant leap – sending astronauts to Mars. NASA intends to establish a sustained lunar presence with the development of the Artemis Base Camp to prove technologies and capabilities that will one day enable humans to live and work on Mars, beginning with core elements including the Lunar Terrain Vehicle (LTV), the Pressurized Rover (PR), the lunar Surface Habitat (SH), power systems, and in-situ resource utilization (ISRU) systems. For in space operations and eventual transport of humans to Mars, NASA will utilize a Mars Transit Habitat (TH). Following deployment, the TH will complete a series of longer duration missions and shakedown testing while docked at Gateway, leveraging Gateway’s habitation redundancy for safety measures. Proposed Gateway-TH missions will far exceed the longest duration cislunar human missions to date. They will be the first operational readiness tests of our long-duration deep space systems, and of the split crew (two crew on the surface, two crew in space) operations that are vital to the approach for the first human Mars mission. Both the SH and TH are major architectural elements of NASA’s Moon to Mars (M2M) approach, each with very different concepts of operation. The SH is intended for use on the lunar surface as a home for astronauts, surface operations base, science facility, hub for communications, extravehicular activity (EVA) equipment repair site, waste processing facility, and supply hub. It serves as an enabler for a sustained surface presence and preparation for partial gravity operations during Mars missions. The SH will be designed to be self-sufficient for operations on the lunar surface. The SH will independently provide several functions, including its own power generation, energy storage capability, sleep quarters, hygiene areas, work areas, and dining areas. It will be capable of communicating with surface assets, orbital assets, and directly with Earth ground stations. It is planned to operate with two crew in the habitat for ~28- day stays with crew swap-outs in which the PR crew of two trades places with the habitat crew. During the swap-out, the habitat will nominally support four crew for a short period of time. For contingency scenarios, the habitat must also be capable of supporting four crew for up to 7 days. The TH will be designed to be capable of up to ~1,200-day Mars missions with the ability to carry all food and supplies needed to support a crew of four for this duration. An assumed Mars mission profile for the TH is to carry crew and supplies for ~850-day roundtrips between Earth and Mars orbit that allows 30-day stays on the Martian surface. To test the systems for this long journey, the TH will be used to extend the duration of missions at Gateway, enabling the orbiting outpost to be used as a Mars analog. These analog missions will be accomplished by attaching the TH to Gateway and conducting lunar surface operations from the TH. The TH may also need to perform free-flying shakedown missions to test out all systems prior to leaving for Mars. The habitat provides many critical functions including: a contingency airlock, crew quarters, galley, hygiene areas, safe haven capability, and science equipment. It can receive docked items from either axial end or on a radial port.

Habitat↗

Technology Development for Under Tank Inspection of Double-Shell Tanks - 20045

The Department of Energy (DOE) Office of River Protection (DOE-ORP) is responsible for management and cleanup of the tank farms located at the Hanford Site. Nuclear waste at Hanford is stored in 149 single-shell tanks (SSTs) and 27 double-shell tanks (DSTs). The vast majority of the liquid radioactive waste is stored in the DSTs. The 27 DSTs, located in six tank farms, were constructed from 1967 to 1986 and, compared to the SSTs, provide greatly improved protection from leakage and better accessibility for inspection. The DSTs and ancillary equipment are expected to exceed their design life before their waste is removed and sent to the Waste Treatment and Immobilization Plant. The DST Integrity Project (DSTIP) must ensure that the DST system can meet the River Protection Project mission goals. This paper provides a programmatic overview of the DSTIP with a focus on development of under-tank inspection technologies. Currently, two categories of nondestructive examination (NDE) techniques for DSTs are implemented on the Hanford site: (1) surface (SNDE) and (2) volumetric (VNDE). Further discussion on current inspection techniques is provided in this paper. The technology development approach for advanced VNDE techniques will also be generally discussed as a precursor for another more detailed WM2020 paper and presentation by PNNL. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Evaluating design safety margins in the American Society of Mechanical Engineers graphite core components design-by-analysis assessments

Graphite is an important material being used for core components in next-generation high-temperature gas-cooled nuclear reactors. The selection of graphite grade for a specific Designer is a complex task, dependent on reactor conditions, component functionality, and required reliability. The American Society of Mechanical Engineers (ASME) provides two semi-probabilistic design-by-analysis assessments to evaluate graphite core components against design reliability targets. The simplified assessment uses a 2-parameter Weibull distribution to describe the graphite grade’s tensile-strength distribution to establish component stress limits. The full assessment uses the 3-parameter Weibull distribution and a modified Weakest-Link Theory approach to calculate a component design probability of failure. The paper defines recommended assessment rules, which are the as-written simplified assessment and the full assessment with parameter lower bounds, the modulus update with threshold reduction, and the 2027 grouping rules. Code rules are applied to three grades: 2114, IG-110, and NBG-18. The baseline margin calculation is developed using the experimental tensile dogbone specimen. Percent margin is defined as the percent reduction in the median experimental load to obtain the allowable load per ASME assessments. Under the recommended rules, the SRC–1 margin in the simplified assessment ranged from 40.2 % to 52.7 % among the grades in this study and from 36.1 % to 49.8 % in the full assessment. The full assessment only decreases the margins by 2.5–4.5 % for the SRC-1 components and 0–1.5 % for the SRC-2 components for this baseline case. Margin is inversely related to material median strength (i.e., the strongest grade, 2114, has the lowest margin).

11 - NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

Adaptive Protection and Validated Models to Enable Deployment of High Penetrations of Solar PV (PV-MOD)

The availability and validation of various PV models in commercial tools differ, with some models not yet thoroughly validated for advanced inverter functionalities and reliable performance under weak system conditions. Many existing models do not fully incorporate new inverter control functions, which can affect system stability. The increasing deployment of solar PV and other inverter-based resources (IBRs), including distributed energy resources (DERs), is influencing the reliable operation of protection schemes in distribution systems and microgrids. Emerging adaptive protection schemes (APS) offer new opportunities for protecting these systems during varying configurations and DER operating conditions, though their demonstration and validation remain limited. Adaptive protection schemes face similar challenges, as they are typically designed for specific configurations. There is a growing need for tools and methodologies to streamline the deployment of adaptive protection for safe and reliable DER integration. The project main objective was to develop and validate high-fidelity generic models of solar PV facilities for stability, protection, EMT, and QSTS analyses. This objective was achieved, and these models can now be integrated into commercial software tools, enabling utilities, vendors, and developers to study high-penetration PV systems more confidently. The project also demonstrated advanced applications of these models, including the design and deployment of adaptive protection schemes in high-penetration field applications and microgrids, supporting grid safety and reliability. Several milestones were reached by the end of the project. A sophisticated inverter test plan was developed, and inverters representative of the North American marketplace were selected. EPRI and NREL tested various inverters, conforming to IEEE standards. Improvements were made to existing generic models of IBR units, IBR plants, and aggregated feeders for various analyses. The first generic electromagnetic transient (EMT) model for a solar PV plant was developed, conforming to IEEE Std 2800™-2022 and validated against laboratory measurements of a 2.2 MVA large-scale battery energy storage system (BESS) inverter. That model was then used to produce reference responses illustrating examples of validated and verified IBR plant models that pass or fail tests for technical minimum capability and performance as specified in the IEEE standard. The developed, tested, and validated generic models can be used for transmission planning, stability assessments, expansion planning, and evaluating potential future IBR interconnection requirements. They can also support interconnection screens and conformity assessments of IBR plants, including solar PV. The project significantly contributed to the ongoing standardization and model-based representation and verification of IBR responses. The project further addressed challenges of common distribution protection schemes with increasing deployment of DER by developing, validating, and demonstrating adaptive protection schemes (APS) that can improve the reliable and safe integration of DER into distribution systems. New APS were designed using improved DER models for three common distribution systems: a radial feeder, a meshed network, and a microgrid. Modeling and hardware-in-the-loop (HIL) testing of the APS were conducted, successfully showing their effectiveness and selectivity. Proof-of-concept field demonstration was achieved for two APS, i.e., one on a radial feeder and another one in a microgrid. Field demonstration could not be achieved for the APS on a meshed network, primarily due apprehension of one utility partner and also due to limited access to the protective algorithms in the network protectors. Guidelines developed from the lessons learned in the project lay out the general process followed in the design, installation, and commissioning of APS for various distribution systems. Distribution utility partners’ apprehension about field demonstration of the new APS were addressed—with varying success—by taking a stepped risk-management approach of modeling of a wide range of sensitivities first, performing in-depth proof-of-concept testing in the laboratory including HIL next, and finally deliberately implementing and commissioning the actual protection equipment and algorithms into parts of—or in parallel operation to—the three real distribution systems. Future work should include pilot projects that further show the acceptable performance of the developed APS before these schemes be rolled out more widely. Inclusion of both utility and original equipment manufacturers (OEMs) in future projects could increase chances of successful field demonstration. Despite challenges in achieving the field demonstration goal of the project for all three APS, the research significantly contributed to the innovation of adaptive protection solutions for scalable and reliable DER integration into distribution systems. This project significantly enhances the understanding of the impact of using appropriate inverter models on distribution and transmission (T&D) systems. By addressing the limitations of existing generic models, the project introduces high-fidelity models for stability, protection, electromagnetic transient (EMT), and quasi-static time series (QSTS) analyses. These models, integrated into commercial software tools, enable utilities, vendors, and developers to confidently study high-penetration PV systems. The project also demonstrates advanced applications, including adaptive protection schemes (APS) for distribution systems and microgrids, ensuring grid safety and reliability. The technical effectiveness and economic feasibility of the methods are evident through the development and validation of sophisticated inverter test plans and the selection of representative inverters. Testing by EPRI and NREL on retail, commercial, and utility-scale inverters, conforming to IEEE standards, underscores the robustness of the models. Improvements to existing generic models for various analyses further enhance their validity and applicability. The project also identifies gaps in common distribution protection schemes and designed new APS using improved DER models, demonstrating their effectiveness through modeling and hardware-in-the-loop (HIL) testing. The project’s benefits to the public are manifold. By advancing the standardization and model-based representation of IBR response, it supports transmission planning, stability assessments, and future IBR interconnection requirements. The generic models can facilitate better communication between transmission planners and developers, supporting expected IBR plant capability and performance. Additionally, the development of APS for radial feeders, meshed networks, and microgrids supports the integration of distributed energy resources (DERs) into distribution systems, enhancing grid reliability and safety. The project’s emphasis on thorough testing and simplicity in design ensures practical and scalable solutions for DER integration.

14 SOLAR ENERGY↗

Burnup Monitoring for Pebble Bed Reactor Systems

A pebble burnup monitoring system is a required component for domestic reactor safety and safeguards applications associated with pebble bed reactors (PBRs). One of the main requirements of a PBR burnup monitoring system is that it needs to be capable of rapid measurements to assess the burnup of each individual pebble to determine whether to recirculate it in the reactor or discard it as spent fuel. This report considers three different approaches for a burnup monitoring system for pebbles discharged from the reactor core in a pebble bed modular reactor-400: • passive gamma spectrometry measurement, • passive neutron coincidence measurement, and • active neutron counter based on the differential die-away technique. Conceptual designs have been created for each of these detectors, and preliminary analysis has been performed using Monte Carlo N-Particle and Oak Ridge Isotope Generation code simulations. The advantages and practical limitations (e.g., high radiation background) of each system were identified. Simulations suggest that each of the three measurement techniques can be successfully employed to distinguish between pebbles based on their number of passes through the core and to quantify the burnup of pebbles.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Safety considerations for fabricating lithium battery packs

Lithium cell safety is a major issue with both manufacturers and end users. Most manufacturers have taken great strides to develop the safest cells possible while still maintaining performance characteristics. The combining of lithium cells for higher voltages, currents, and capacities requires the fabricator of lithium battery packs to be knowledgable about the specific electrochemical system being used. Relatively high rate, spirally wound (large surface area) sulfur oxychloride cells systems, such as Li/Thionyl or Sulfuryl chloride are considered. Prior to the start of a design of a battery pack, a review of the characterization studies for the cells should be conducted. The approach for fabricating a battery pack might vary with cell size.

Ciesla, J. J.↗

Aerospace Safety Advisory Panel

This annual report is based on the activities of the Aerospace Safety Advisory Panel in calendar year 2000. During this year, the construction of the International Space Station (ISS) moved into high gear. The launch of the Russian Service Module was followed by three Space Shuttle construction and logistics flights and the deployment of the Expedition One crew. Continuous habitation of the ISS has begun. To date, both the ISS and Space Shuttle programs have met or exceeded most of their flight objectives. In spite of the intensity of these efforts, it is clear that safety was always placed ahead of cost and schedule. This safety consciousness permitted the Panel to devote more of its efforts to examining the long-term picture. With ISS construction accelerating, demands on the Space Shuttle will increase. While Russian Soyuz and Progress spacecraft will make some flights, the Space Shuttle remains the primary vehicle to sustain the ISS and all other U.S. activities that require humans in space. Development of a next generation, human-rated vehicle has slowed due to a variety of technological problems and the absence of an approach that can accomplish the task significantly better than the Space Shuttle. Moreover, even if a viable design were currently available, the realities of funding and development cycles suggest that it would take many years to bring it to fruition. Thus, it is inescapable that for the foreseeable future the Space Shuttle will be the only human-rated vehicle available to the U.S. space program for support of the ISS and other missions requiring humans. Use of the Space Shuttle will extend well beyond current planning, and is likely to continue for the life of the ISS.

Source record↗

Fiber-Optic Communication Links Suitable for On-Board Use in Modern Aircraft

The role of the Advanced Air Transportation Technologies program undertaken at the NASA Glenn Research Centers has been focused mainly on the improvement of air transportation safety, with particular emphasis on air transportation communication systems in on-board aircraft. The conventional solutions for digital optical communications systems specifically designed for local/metro area networks are, unfortunately, not capable of transporting the microwave and millimeter RF signals used in avionics systems. Optical networks capable of transporting RF signals are substantially different from the standard digital optical communications systems. The objective of this paper is to identify a number of different communication link architectures for RF/fiber optic transmission using a single backbone fiber for carrying VHF and UHF RF signals in the aircraft. To support these architectures, two approaches derived from both hybrid RF-optical and all-optical processing methodologies are discussed with single and multiple antennas for explicitly transporting VHF and UHF signals, while the relative merits and demerits of each architecture are also addressed. Furthermore, the experimental results of wavelength division multiplexing (WDM) link architecture from our test-bed platform, configured for aircraft environment to support simultaneous transmission of multiple RF signals over a single optical fiber, exhibit no appreciable signal degradation at wavelengths of both 1330 and 1550 nm, respectively. Our measurements of signal to noise ratio carried out for the transmission of FM and AM analog modulated signals at these wavelengths indicate that WDM is a fiber optic technology which is potentially suitable for avionics applications.

Nguyen, Hung↗

Materials and Process Activities for NASA's Composite Crew Module

In January 2007, the NASA Administrator and Associate Administrator for the Exploration Systems Mission Directorate chartered the NASA Engineering and Safety Center (NESC) to design, build, and test a full-scale Composite Crew Module (CCM). The overall goal of the CCM project was to develop a team from the NASA family with hands-on experience in composite design, manufacturing, and testing in anticipation of future space exploration systems being made of composite materials. The CCM project was planned to run concurrently with the Orion project s baseline metallic design within the Constellation Program so that features could be compared and discussed without inducing risk to the overall Program. The materials and process activities were prioritized based on a rapid prototype approach. This approach focused developmental activities on design details with greater risk and uncertainty, such as out-of-autoclave joining, over some of the more traditional lamina and laminate building block levels. While process development and associated building block testing were performed, several anomalies were still observed at the full-scale level due to interactions between process robustness and manufacturing scale-up. This paper describes the process anomalies that were encountered during the CCM development and the subsequent root cause investigations that led to the final design solutions. These investigations highlight the importance of full-scale developmental work early in the schedule of a complex composite design/build project.

Polis, Daniel L.↗

Predicting opioid receptor binding affinity of pharmacologically unclassified designer substances using molecular docking

Opioids represent a highly-abused and highly potent class of drugs that have become a significant threat to public safety. Often there are little to no pharmacological and toxicological data available for new, illicitly used and abused opioids, and this has resulted in a growing number of serious adverse events, including death. The large influx of new synthetic opioids permeating the street-drug market, including fentanyl and fentanyl analogs, has generated the need for a fast and effective method to evaluate the risk a substance poses to public safety. In response, the US FDA’s Center for Drug Evaluation and Research (CDER) has developed a rapidly-deployable, multi-pronged computational approach to assess a drug’s risk to public health. A key component of this approach is a molecular docking model to predict the binding affinity of biologically uncharacterized fentanyl analogs to the mu opioid receptor. The model was validated by correlating the docking scores of structurally diverse opioids with experimentally determined binding affinities. Fentanyl derivatives with subnanomolar binding affinity at the mu receptor (e.g. carfentanil and lofentanil) have significantly lower binding scores, while less potent fentanyl derivatives have increased binding scores. The strong correlation between the binding scores and the experimental binding affinities suggests that this approach can be used to accurately predict the binding strength of newly identified fentanyl analogs at the mu receptor in the absence of in vitro data and may assist in the temporary scheduling of those substances that pose a risk to public safety.

60 APPLIED LIFE SCIENCES↗

Hanford Direct Feed Low Activity Waste Real Time Monitoring Program - 18336

Effective operation of the Low-Activity Waste (LAW) Facility at Hanford will rely on information provided from monitoring and control of chemical process streams to maintain safety and environmental compliance, product quality, and operational efficiency. The LAW Facility has been designed as a contact-maintained facility and it was recognized that establishing a real time, in-line monitoring program could have substantial benefits to the U.S. Department of Energy, Office of River Protection in the long-term, which include significant time savings, increased processing efficiency and effectiveness, reducing worker exposure to radiation and chemical hazards, reducing secondary wastes, and a better understanding of the flowsheet to support direct-feed LAW (DFLAW). The Assistant Manager/Federal Project Director for the Waste Treatment and Immobilization Plant (WTP) Project chartered a multidisciplinary integrated technical team comprised of federal, contractor, and national laboratory staff to develop a phased program to support this initiative. A three-phase approach was adopted: - Phase 1: Requirements and Opportunities Analysis for Sampling Reduction; - Phase 2: Applications and Benefits Determination; - Phase 3: Qualification and Demonstration. The focus of Phase 1 is to identify the drivers behind any requirements for sampling and any opportunities to benefit from a real-time monitoring program. The effort identified 18 sample points and approximately 2,600 potential samples to be collected annually with analytical methods to be performed approximately 18,000 times annually. Based on Savannah River National Laboratory experience and discussions with WTP Analytical Laboratory personnel, these sample analyses will generate approximately 5,000 L of liquid secondary waste and approximately 1,300 m{sup 3} of solid secondary waste each year. Additional solid and liquid secondary wastes will be generated from sample collection. A preliminary evaluation indicates that employing real-time, in-line monitoring, mass balances, and periodic sampling could significantly reduce the number of samples collected, analytical methods performed, and secondary waste generated. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Parallel runway requirement analysis study. Volume 1: The analysis

The correlation of increased flight delays with the level of aviation activity is well recognized. A main contributor to these flight delays has been the capacity of airports. Though new airport and runway construction would significantly increase airport capacity, few programs of this type are currently underway, let alone planned, because of the high cost associated with such endeavors. Therefore, it is necessary to achieve the most efficient and cost effective use of existing fixed airport resources through better planning and control of traffic flows. In fact, during the past few years the FAA has initiated such an airport capacity program designed to provide additional capacity at existing airports. Some of the improvements that that program has generated thus far have been based on new Air Traffic Control procedures, terminal automation, additional Instrument Landing Systems, improved controller display aids, and improved utilization of multiple runways/Instrument Meteorological Conditions (IMC) approach procedures. A useful element to understanding potential operational capacity enhancements at high demand airports has been the development and use of an analysis tool called The PLAND_BLUNDER (PLB) Simulation Model. The objective for building this simulation was to develop a parametric model that could be used for analysis in determining the minimum safety level of parallel runway operations for various parameters representing the airplane, navigation, surveillance, and ATC system performance. This simulation is useful as: a quick and economical evaluation of existing environments that are experiencing IMC delays, an efficient way to study and validate proposed procedure modifications, an aid in evaluating requirements for new airports or new runways in old airports, a simple, parametric investigation of a wide range of issues and approaches, an ability to tradeoff air and ground technology and procedures contributions, and a way of considering probable blunder mechanisms and range of blunder scenarios. This study describes the steps of building the simulation and considers the input parameters, assumptions and limitations, and available outputs. Validation results and sensitivity analysis are addressed as well as outlining some IMC and Visual Meteorological Conditions (VMC) approaches to parallel runways. Also, present and future applicable technologies (e.g., Digital Autoland Systems, Traffic Collision and Avoidance System II, Enhanced Situational Awareness System, Global Positioning Systems for Landing, etc.) are assessed and recommendations made.

Ebrahimi, Yaghoob S.↗

Implementation of an Adaptive Controller System from Concept to Flight Test

The National Aeronautics and Space Administration Dryden Flight Research Center (Edwards, California) is conducting ongoing flight research using adaptive controller algorithms. A highly modified McDonnell-Douglas NF-15B airplane called the F-15 Intelligent Flight Control System (IFCS) was used for these algorithms. This airplane has been modified by the addition of canards and by changing the flight control systems to interface a single-string research controller processor for neural network algorithms. Research goals included demonstration of revolutionary control approaches that can efficiently optimize aircraft performance for both normal and failure conditions, and to advance neural-network-based flight control technology for new aerospace systems designs. Before the NF-15B IFCS airplane was certified for flight test, however, certain processes needed to be completed. This paper presents an overview of these processes, including a description of the initial adaptive controller concepts followed by a discussion of modeling formulation and performance testing. Upon design finalization, the next steps are: integration with the system interfaces, verification of the software, validation of the hardware to the requirements, design of failure detection, development of safety limiters to minimize the effect of erroneous neural network commands, and creation of flight test control room displays to maximize human situational awareness.

Larson, Richard R.↗

Some Challenges in the Design of Human-Automation Interaction for Safety-Critical Systems

Increasing amounts of automation are being introduced to safety-critical domains. While the introduction of automation has led to an overall increase in reliability and improved safety, it has also introduced a class of failure modes, and new challenges in risk assessment for the new systems, particularly in the assessment of rare events resulting from complex inter-related factors. Designing successful human-automation systems is challenging, and the challenges go beyond good interface development (e.g., Roth, Malin, & Schreckenghost 1997; Christoffersen & Woods, 2002). Human-automation design is particularly challenging when the underlying automation technology generates behavior that is difficult for the user to anticipate or understand. These challenges have been recognized in several safety-critical domains, and have resulted in increased efforts to develop training, procedures, regulations and guidance material (CAST, 2008, IAEA, 2001, FAA, 2013, ICAO, 2012). This paper points to the continuing need for new methods to describe and characterize the operational environment within which new automation concepts are being presented. We will describe challenges to the successful development and evaluation of human-automation systems in safety-critical domains, and describe some approaches that could be used to address these challenges. We will draw from experience with the aviation, spaceflight and nuclear power domains.

systems engineering↗

Predicting Adverse Events and their Precursors in Aviation Using Multi-Class Multiple-Instance Learning

In recent years, there has been a rapid growth in the application of machine learning techniques that leverage aviation data collected from commercial airline operations to improve safety. Anomaly detection and predictive maintenance have been the main targets for machine learning applications. However, this paper focuses on the identification of precursors, which is a relatively newer application. Precursors are events correlated with adverse events that happen prior to the adverse event itself. Therefore, precursor mining provides many benefits including understanding the reasons behind a safety incident and the ability to identify signatures, which can be tracked throughout a flight to alert the operators of an potential upcoming adverse event. This work proposes using the multiple-instance learning (MIL) framework, a weakly supervised learning task, combined with a carefully designed Multi-Head Convolutional Neural Networks-Recurrent Neural Networks (MHCNN-RNN) architecture to predict different type of adverse events for any given flights and identify their precursors with little to no post-processing.Results obtained show that the MHCNN-RNN is able to accurately forecast high speed and high path angle events during the approach, and that it is also capable of determining the aircraft’s parameters that are correlated to these events. These parameters can be considered precursors to the events.

multiple instance learning↗