Search NASA⌕ Search

SEARCH · Search NASA

Results for “Assurance Cases”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 127 records · Page 7
All sourcesNASA NTRSDOE OSTI
NASA NTRS2017

Comprehensive Lifecycle for Assuring System Safety

CLASS is a novel approach to the enhancement of system safety in which the system safety case becomes the focus of safety engineering throughout the system lifecycle. CLASS also expands the role of the safety case across all phases of the system's lifetime, from concept formation to decommissioning. As CLASS has been developed, the concept has been generalized to a more comprehensive notion of assurance becoming the driving goal, where safety is an important special case. This report summarizes major aspects of CLASS and contains a bibliography of papers that provide additional details.

Knight, John C.↗
DOE OSTI2020

Technical Qualification of New Materials for High Efficiency Coal-Fired Boilers and Other Advanced FE Concepts: Haynes® 282® ASME Boiler and Pressure Vessel Code Case

This DOE Fossil Energy project, FEAA117, addressed materials issues relevant to qualifying and deploying a Ni-base alloy for a new application in an advanced ultra-supercritical coal-fired boiler. The goal was the deployment of Haynes International alloy Haynes® 282® for applications in superheaters, reheaters, and steam delivery pipes, by completing base metal, cross-weld and all-weld metal mechanical testing needed for an ASME Boiler and Pressure Vessel Code Case and the associated microstructural analyses needed for assurance of boiler-relevant lifetimes. The alloy also is of interest for other applications including supercritical CO₂ power generation cycles. Tensile testing was completed from 20°-927°C on the three base metal alloy 282 heats, two sets of cross-weld specimens and all weld metal specimens. A total of 148 creep tests with over 565,000 h of cumulative testing was completed on base metal, cross-weld and all weld metal specimens. This project was performed with cost share from Haynes International.

01 COAL, LIGNITE, AND PEAT↗
NASA NTRS1999

Employee Assistance Program Issues

Employee Assistance Program (EAP) officers, as well as personnel in other disciplines from eight NASA Centers, attended this breakout session. Ms. Brenda Blair, MA, CEAP, a guest speaker at the conference, also attended as a consultant. Representatives from the NASA Centers introduced themselves and spoke briefly about their programs. In a discussion related to the conference theme on benchmarking, quality control issues within the EAP community and adequate documentation of cases were addressed. Disposition and provision for quality assurance checks for EAP providers in single person offices were also discussed. Ms. Blair presented methods for consulting with other NASA personnel in single person EAP offices as a quality control measure. EAP intervention in critical incidents was discussed. The question of whether EAP assistance is an asset or a potential liability in those situations was addressed. Suggestions were made of topics for future EAP video-teleconference topics. A program on EAP ethics was planned for a September video teleconference. Each person was asked to provide intake forms they use to Mr. Gettleman or Ms. Blair. Ms. Blair said she would review the forms to ensure that adequate notification is provided to the client for confidentiality. She would also review them to ensure they have adequate limits of confidentiality--a topic for future video teleconferencing. Mr. Gettleman described the NASA initiative to reduce stresses in the workplace, and the activities of an ad-hoc EAP group that will make recommendations to NASA senior management. Alternative training methods were discussed for reaching target audiences such as employees at risk, supervisors, and others. Pfc. David A. Pendleton, Victim Assistance Coordinator, U.S. Capitol Police. U.S. House of Representatives made a special presentation. Pfc. Pendleton was on duty during the tragic shooting of two Federal guards at the U.S. Capitol. He related the events immediately after the incident. He described the nature and structure of the EAP's and the separate nature of the House and Senate programs. This episode was a particularly difficult situation as large numbers of tourists were involved. William S. Barry, MD, the new Manager of the NASA Occupational Health Program Office was introduced to those attending the breakout session.

Gettleman, Alan G.↗
NASA NTRS2008

AERONET-OC: Strengths and Weaknesses of a Network for the Validation of Satellite Coastal Radiometric Products

The Ocean Color component of the Aerosol Robotic Network (AERONET-OC) has been implemented to support long-term satellite ocean color investigations through cross-site consistent and accurate measurements collected by autonomous radiometer systems deployed on offshore fixed platforms. The ultimate purpose of AERONET-OC is the production of standardized measurements performed at different sites with identical measuring systems and protocols, calibrated using a single reference source and method, and processed with the same code. The AERONET-OC primary data product is the normalized water leaving radiance determined at center-wavelengths of interest for satellite ocean color applications, with an uncertainty lower than 5% in the blue-green spectral regions and higher than 8% in the red. Measurements collected at 6 sites counting the northern Adriatic Sea, the Baltic Proper, the Gulf of Finland, the Persian Gulf, and, the northern and southern margins of the Middle Atlantic Bay, have shown the capability of producing quality assured data over a wide range of bio-optical conditions including Case-2 yellow substance- and sedimentdominated waters. This work briefly introduces network elements like: deployment sites, measurement method, instrument calibration, processing scheme, quality-assurance, uncertainties, data archive and products accessibility. Emphases is given to those elements which underline the network strengths (i.e., mostly standardization of any network element) and its weaknesses (i.e., the use of consolidated, but old-fashioned technology). The work also addresses the application of AERONET-OC data to the validation of primary satellite radiometric products over a variety of complex coastal waters and finally provides elements for the identification of new deployment sites most suitable to support satellite ocean color missions.

Zibordi, Giuseppe↗
NASA NTRS2015

NASA System Safety Handbook. Volume 2: System Safety Concepts, Guidelines, and Implementation Examples

This is the second of two volumes that collectively comprise the NASA System Safety Handbook. Volume 1 (NASASP-210-580) was prepared for the purpose of presenting the overall framework for System Safety and for providing the general concepts needed to implement the framework. Volume 2 provides guidance for implementing these concepts as an integral part of systems engineering and risk management. This guidance addresses the following functional areas: 1.The development of objectives that collectively define adequate safety for a system, and the safety requirements derived from these objectives that are levied on the system. 2.The conduct of system safety activities, performed to meet the safety requirements, with specific emphasis on the conduct of integrated safety analysis (ISA) as a fundamental means by which systems engineering and risk management decisions are risk-informed. 3.The development of a risk-informed safety case (RISC) at major milestone reviews to argue that the systems safety objectives are satisfied (and therefore that the system is adequately safe). 4.The evaluation of the RISC (including supporting evidence) using a defined set of evaluation criteria, to assess the veracity of the claims made therein in order to support risk acceptance decisions.

Safety Case↗
NASA NTRS2023

Dragonfly: A Case Study in Dynamic Stability Characterization

Next decade, the Dragonfly probe will enter Titan’s atmosphere on a mission to explore and characterize its unique and complex organic chemistry. In contrast to Mars entry missions, where the challenge is to slow down in its tenuous atmosphere before impacting the surface, Titan’s thick atmosphere provides generous drag. However, Titan has its own unique EDL challenges. Among these challenges is the long time (on the order of 90 minutes!) the vehicle will need to descend unguided through flow regimes where blunt-body entry probes are known to be dynamically unstable. This elongated timeline, both prior to drogue parachute deployment, and during the ensuing descent, has the potential to allow adverse dynamic instability properties to produce large amplitude oscillations in angle-of-attack. This, in-turn may lead to non-compliance in vehicle attitude requirements for EDL events such as parachute deployment, and lander release, or in the most extreme case, tumbling of the aeroshell and near-assured loss of mission.

EDL↗
NASA NTRS2023

Dragonfly: A Case Study in Dynamic Stability Characterization

Next decade, the Dragonfly probe will enter Titan’s atmosphere on a mission to explore and characterize its unique and complex organic chemistry. In contrast to Mars entry missions, where the challenge is to slow down in its tenuous atmosphere before impacting the surface, Titan’s thick atmosphere provides generous drag. However, Titan has its own unique EDL challenges. Among these challenges is the long time (on the order of 90 minutes!) the vehicle will need to descend unguided through flow regimes where blunt-body entry probes are known to be dynamically unstable. This elongated timeline, both prior to drogue parachute deployment, and during the ensuing descent, has the potential to allow adverse dynamic instability properties to produce large amplitude oscillations in angle-of-attack. This, in-turn may lead to non-compliance in vehicle attitude requirements for EDL events such as parachute deployment, and lander release, or in the most extreme case, tumbling of the aeroshell and near-assured loss of mission.

EDL↗
NASA NTRS2014

Querying Safety Cases

Querying a safety case to show how the various stakeholders' concerns about system safety are addressed has been put forth as one of the benefits of argument-based assurance (in a recent study by the Health Foundation, UK, which reviewed the use of safety cases in safety-critical industries). However, neither the literature nor current practice offer much guidance on querying mechanisms appropriate for, or available within, a safety case paradigm. This paper presents a preliminary approach that uses a formal basis for querying safety cases, specifically Goal Structuring Notation (GSN) argument structures. Our approach semantically enriches GSN arguments with domain-specific metadata that the query language leverages, along with its inherent structure, to produce views. We have implemented the approach in our toolset AdvoCATE, and illustrate it by application to a fragment of the safety argument for an Unmanned Aircraft System (UAS) being developed at NASA Ames. We also discuss the potential practical utility of our query mechanism within the context of the existing framework for UAS safety assurance.

Safety Case↗
NASA NTRS2020

NASA Quality Assurance in an MBSE world

Over the past decade or so, the emergence of Model Based Systems Engineering (MBSE) has demonstrated its desirability and value in terms of 1) being a single source of truth, 2) unambiguous definitions and relationships, and 3) after representation, the ability to explore/extract any sets of data on demand. While much work has been done in showing the value to the system engineering discipline in these areas, how does that value translate to the Safety and Mission Assurance (S&MA) world? This paper provides a vision of a very desirable future of NASA S&MA after it is fully integrated into the MBSE framework. We explore the impact and consequences of the MBSE Value items discussed above and how they impact the disciplines of quality assurance, reliability and maintainability, system safety, and software assurance. We provide insight into how the MBSE modeling tools can be used to define S&MA processes (ideally as a result of Use Case [1] elaboration of processes represented in MagicDraw®), produce S&MA products (ViewEditor output of various items), and represent S&MA disciplines (S&MA inside of MagicDraw). We also provide insight into the degree to which some elements can be directly integrated into a SysML® model and when, as often happens, an interface to some external source must be provided. The desirability of this future is part of the reason for the NASA Office of Safety and Mission Assurance’s (OSMA) recent creation of a Model Based Mission Assurance (MBMA) Program [2] and the MBMA annual workshops. We briefly summarize the efforts to date to generate S&MA Use Cases for eventual deployment into pilot and project efforts. Even simple use of the SysML modeling tools can be used to capture quality assurance tasks and integrate them with the systems engineering and produce products that are easy to use by quality practitioners that are unfamiliar with these methods. We anticipate finding opportunities to pilot and implement various Quality Assurance (QA) Use Cases in FY20. The MBMA Program is focused on implementation; the NASA Office of the Chief Engineer's Community of Practice, as well as the SmallSat communities, are very interested in the integration of S&MA. Finally, as projects move forward utilizing whatever efficiency increases they can find in a cost-constrained environment, the S&MA community cannot be caught unawares and needs to continue preparing for the ever-growing implementation of MBSE across NASA and our government and commercial partners.

Evans, John W↗
NASA NTRS1976

Stabilizing feedback control for dynamical systems with bounded uncertainty

The theories of differential games and generalized dynamic systems are used to deduce stabilizing controllers for quasi-linear systems. Attention is given to a class of dynamic systems subject to parameter and input uncertainty whose values range in a given compact set. Using a worst case design philosophy, a feedback control is derived that assures uniform asymptotic (Liapunov) stability of the origin under all admissible uncertainties.

Gutman, S.↗
NASA NTRS1990

Hubble space telescope six-battery test bed

A test bed for a large space power system breadboard for the Hubble Space Telescope (HST) was designed and built to test the system under simulated orbital conditions. A discussion of the data acquisition and control subsystems designed to provide for continuous 24 hr per day operation and a general overview of the test bed is presented. The data acquisition and control subsystems provided the necessary monitoring and protection to assure safe shutdown with protection of test articles in case of loss of power or equipment failure over the life of the test (up to 5 years).

Pajak, J. A.↗
NASA NTRS1999

Utilizing Advanced Vibration Isolation Technology to Enable Microgravity Science Operations

Microgravity scientific research is performed in space to determine the effects of gravity upon experiments. Until recently, experiments had to accept the environment aboard various carriers: reduced-gravity aircraft, sub-orbital payloads, Space Shuttle, and Mir. If the environment is unacceptable, then most scientists would rather not expend the resources without the assurance of true microgravity conditions. This is currently the case on the International Space Station, because the ambient acceleration environment will exceed desirable levels. For this reason, the g-LIMIT (Glovebox Integrated Microgravity Isolation Technology) system is currently being developed to provide a quiescent acceleration environment for scientific operations. This sub-rack isolation system will provide a generic interface for a variety of experiments for the Microgravity Science Glovebox. This paper describes the motivation for developing of the g-LIMIT system, presents the design concept and details some of the advanced technologies utilized in the g-LIMIT flight design.

Alhorn, Dean Carl↗
NASA NTRS2016

Deformation of Cases in High Capacitance Value Wet Tantalum Capacitors under Environmental Stresses

Internal gas pressure in hermetic wet tantalum capacitors is created by air, electrolyte vapor, and gas generated by electrochemical reactions at the electrodes. This pressure increases substantially with temperature and time of operation due to excessive leakage currents. Deformation of the case occurs when the internal pressure exceeds pressure of the environments and can raise significantly when a part operates in space. Contrary to the cylinder case wet tantalum capacitors that have external sealing by welding and internal sealing provided by the Teflon bushing and crimping of the case, no reliable internal sealing exists in the button case capacitors. Single seal design capacitors are used for high capacitance value wet tantalum capacitors manufactured per DLA L&M drawings #04003, 04005, and 10011, and require additional analysis to assure their reliable application in space systems. In this work, leakage currents and case deformation of button case capacitors were measured during different environmental test conditions. Recommendations for derating, screening and qualification testing are given. This work is a continuation of a series of NEPP reports related to quality and reliability of wet tantalum capacitors.

Tantalum Capacitors↗
NASA NTRS2004

Evaluation of Open-Source Hard Real Time Software Packages

Reliable software is, at times, hard to find. No piece of software can be guaranteed to work in every situation that may arise during its use here at Glenn Research Center or in space. The job of the Software Assurance (SA) group in the Risk Management Office is to rigorously test the software in an effort to ensure it matches the contract specifications. In some cases the SA team also researches new alternatives for selected software packages. This testing and research is an integral part of the department of Safety and Mission Assurance. Real Time operation in reference to a computer system is a particular style of handing the timing and manner with which inputs and outputs are handled. A real time system executes these commands and appropriate processing within a defined timing constraint. Within this definition there are two other classifications of real time systems: hard and soft. A soft real time system is one in which if the particular timing constraints are not rigidly met there will be no critical results. On the other hand, a hard real time system is one in which if the timing constraints are not met the results could be catastrophic. An example of a soft real time system is a DVD decoder. If the particular piece of data from the input is not decoded and displayed to the screen at exactly the correct moment nothing critical will become of it, the user may not even notice it. However, a hard real time system is needed to control the timing of fuel injections or steering on the Space Shuttle; a delay of even a fraction of a second could be catastrophic in such a complex system. The current real time system employed by most NASA projects is Wind River's VxWorks operating system. This is a proprietary operating system that can be configured to work with many of NASA s needs and it provides very accurate and reliable hard real time performance. The down side is that since it is a proprietary operating system it is also costly to implement. The prospect of replacing this somewhat costly implementation is the focus of one of the SA group s current research projects. The explosion of open source software in the last ten years has led to the development of a multitude of software solutions which were once only produced by major corporations. The benefits of these open projects include faster release and bug patching cycles as well as inexpensive if not free software solutions. The main packages for hard real time solutions under Linux are Real Time Application Interface (RTAI) and two varieties of Real Time Linux (RTL), RTLFree and RTLPro. During my time here at NASA I have been testing various hard real time solutions operating as layers on the Linux Operating System. All testing is being run on an Intel SBC 2590 which is a common embedded hardware platform. The test plan was provided to me by the Software Assurance group at the start of my internship and my job has been to test the systems by developing and executing the test cases on the hardware. These tests are constructed so that the Software Assurance group can get hard test data for a comparison between the open source and proprietary implementations of hard real time solutions.

Mattei, Nicholas S.↗
NASA NTRS1979

Manufacturing methods of a composite cell case for a Ni-Cd battery

Basic manufacturing method refinements for using graphite epoxy material for a nickel cadmium battery cell case were performed to demonstrate production feasibility. The various facets of production scale-up, i.e., process and tooling development, together with material and process control, were integrated into a comprehensive manufacturing process that assures production reproducibility and product uniformity. Test results substantiate that a battery cell case produced from graphite epoxy pre-impregnated material, utilizing the internal pressure bag fabrication method, is feasible.

Bauer, J. L.↗
DOE OSTI2024

Relating Measured Component Damage to Assessed Component Reliability in Reliability Integrity Management (RIM)

There is currently no widely agreed detailed general method for licensing a novel plant incorporating novel materials (or materials being deployed in novel environments); in many such situations, there are no directly applicable engineering code cases for decision-makers (including regulators) to rely on. It may be possible to develop an approach to licensing such a plant that is based on the Reliability and Integrity Management (RIM) approach delineated in ASME BPVC Section XI Division 2. NRC Regulatory Guide 1.246, Rev.0, endorses, with conditions, the subject portion of the ASME Code. But that portion of the ASME code is written at a very high level, and there are fundamental technical challenges associated with applying it literally to licensing a real plant. In the RIM approach, applicants need to do the following (among other things): • Allocate target reliabilities to structures, systems, and components (SSCs) that collectively support the top-level plant safety and availability objectives; • Understand failure modes of those SSCs, and the degradation mechanisms that could lead to those failure modes; • Develop and propose a program of surveillances that will identify degradation prior to failure of SSCs; • Provide a means of reporting results, taking actions for anomalous or undesirable conditions, and give the regulator assurance of continued safe operations. Applying RIM in a specific case will call for advances in the state of practice of relating physical observables to functional reliability of certain component types. Except where a given level of damage corresponds to a failed (or nearly failed) state, it is not practical to establish a precise quantitative relationship between physical observables and reliability. This paper focuses on managing risk of passive component failures based on observable damage parameters. A simple approach to cumulative damage modeling will be illustrated with a view to possible use in RIM applications.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
NASA NTRS1983

A proposed approach to the application of nonlinear irreversible thermodynamics to fracture in composite materials

The fracture criteria upon which most fracture mechanics is based involves an energy balance that is not appropriate for the fracture mechanics of viscoelastic materials such as polymer matrix composites. A more appropriate criterion based upon nonequilibrium thermodynamics and involving a power balance rather than an energy balance is proposed. This crierion is based upon a reformulation of the second law of thermodynamics which focuses attention on the total Legendre transform of energy expressed as a functional over time and space. This excess energy functional can be shown to be equivalent to the Rice J integral if the only irreversible process is the propogation of a single crack completely through the thickness of the specimen and if the crack propogation is assured to be independent of time. For the more general case of more than one crack in a viscoelastic medium integration over both time and space is required. Two experimentally measurable parameters are proposed which should permit the evaluation of this more general fracture criterion.

Lindenmeyer, P. H.↗
NASA NTRS1992

Optimistic barrier synchronization

Barrier synchronization is fundamental operation in parallel computation. In many contexts, at the point a processor enters a barrier it knows that it has already processed all the work required of it prior to synchronization. The alternative case, when a processor cannot enter a barrier with the assurance that it has already performed all the necessary pre-synchronization computation, is treated. The problem arises when the number of pre-sychronization messages to be received by a processor is unkown, for example, in a parallel discrete simulation or any other computation that is largely driven by an unpredictable exchange of messages. We describe an optimistic O(log sup 2 P) barrier algorithm for such problems, study its performance on a large-scale parallel system, and consider extensions to general associative reductions as well as associative parallel prefix computations.

Nicol, David M.↗