Search NASA⌕ Search

SEARCH · Search NASA

Results for “System Level Verification”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 127 records · Page 7

SAFEGUARD: An Assured Safety Net Technology for UAS

As demands increase to use unmanned aircraft systems (UAS) for a broad spectrum of commercial applications, regulatory authorities are examining how to safely integrate them without loss of safety or major disruption to existing airspace operations. This work addresses the development of the Safeguard system as an assured safety net technology for UAS. The Safeguard system monitors and enforces conformance to a set of rules defined prior to flight (e.g., geospatial stay-out or stay-in regions, speed limits, altitude limits). Safeguard operates independently of the UAS autopilot and is strategically designed in a way that can be realized by a small set of verifiable functions to simplify compliance with regulatory standards for commercial aircraft. A framework is described that decouples the system from any other devices on the UAS as well as introduces complementary positioning source(s) for applications that require integrity and availability beyond what the Global Positioning System (GPS) can provide. Additionally, the high level logic embedded within the software is presented, as well as the steps being taken toward verification and validation (V&V) of proper functionality. Next, an initial prototype implementation of the described system is disclosed. Lastly, future work including development, testing, and system V&V is summarized.

Dill, Evan T.↗

The Space Shuttle's testing gauntlet

The Space Shuttle verification program is detailed, with verification network flowcharts. Performance qualification tests, life endurance tests, structural verification tests, and vibration/dynamic tests of components, subsystems, and major systems at various test levels are dealt with. Ground tests, static firings of the Shuttle main engine, external-tank separation tests, ground vibration tests of vehicle mated to external tank, and main propulsion tests and test scheduling are described. Functions of the Shuttle avionics integration laboratory and electronic systems test laboratory are discussed. Test preparations and procedures for orbital flight testing, launch pad tests, and Shuttle approach- and landing-tests are described.

Mcintosh, G. P.↗

MSAT boom joint testing and load absorber design

Through a series of component and system-level tests, the torque margin for the MSAT booms is being determined. The verification process has yielded a number of results and lessons that can be applied to many other types of deployable spacecraft mechanisms. The MSAT load absorber has proven to be an effective way to provide high energy dissipation using crushable honeycomb. Using two stages of crushable honeycomb and a fusible link, a complex crush load profile has been designed and implemented. The design features of the load absorber lend themselves to use in other spacecraft applications.

Klinker, D. H.↗

From Paper to Production to Test: An Update on NASA's J-2X Engine for Exploration

The NASA/industry team responsible for developing the J-2X upper stage engine for the Space Launch System (SLS) Program has made significant progress toward moving beyond the design phase and into production, assembly, and test of development hardware. The J-2X engine exemplifies the SLS Program goal of using proven technology and experience from more than 50 years of United States spaceflight experience combined with modern manufacturing processes and approaches. It will power the second stage of the fully evolved SLS Program launch vehicle that will enable a return to human exploration of space beyond low earth orbit. Pratt & Whitney Rocketdyne (PWR) is under contract to develop and produce the engine, leveraging its flight-proven LH2/LOX, gas generator cycle J-2 and RS-68 engine capabilities, recent experience with the X-33 aerospike XRS-2200 engine, and development knowledge of the J-2S tap-off cycle engine. The J- 2X employs a gas generator operating cycle designed to produce 294,000 pounds of vacuum thrust in primary operating mode with its full nozzle extension. With a truncated nozzle extension suitable to support engine clustering on the stage, the nominal vacuum thrust level in primary mode is 285,000 pounds. It also has a secondary mode, during which it operates at 80 percent thrust by altering its mixture ratio. The J-2X development philosophy is based on proven hardware, an aggressive development schedule, and early risk reduction. NASA Marshall Space Flight Center (MSFC) and PWR began development of the J-2X in June 2006. The government/industry team of more than 600 people within NASA and PWR successfully completed the Critical Design Review (CDR) in November 2008, following extensive risk mitigation testing. Assembly of the first development engine was completed in May 2011 and the first engine test was conducted at the NASA Stennis Space Center (SSC), test stand A2, on 14 July 2011. Testing of the first development engine will continue through the autumn of 2011, be paused for test stand modifications to the passive diffuser, and then restart in the spring of 2012. This testing will be followed by specialized powerpack testing intended to examine the design and operating margins of the engine turbomachinery. The development plan beyond this point leads through more system-level, engine testing of several samples, analytical model validation activities, functional and performance verification, and then ultimate certification to support human spaceflight. This paper will discuss the J-2X development background, provide top-level information on design and development planning, and will explore some of the development challenges and mitigation activities pursued to date.

Kynard, Michael↗

Fan Acoustic Issues in the NASA Space Flight Experience

Emphasis needs to be placed on choosing quiet fans compatible with systems design and specifications that control spec levels: a) Sound power; b) Choose quiet fan or plan to quiet it, early in program; c) Plan early verification that fan source allocations are met. Airborne noise: a) System design should function/play together with fans used (flow passages, restrictions, bends, expansions & contractions, and acoustics) vs. fan speed understood (nominal, worst case, & unplanned variances); b) Fan inlets treated, as required; c) Fan Outlets treated, as required; d) Ducted system inlets are outlets designed for acoustic compliance compatibility & designed so some late required modifications can be made without significant impacts. Structure Borne Noise: a) Structure borne noise dealt with as part of fan package or installation; b) Duct attachments and lines isolated. Case Radiated Noise: - Treatment added as much as possible to fan package (see example).

Allen, Christopher S.↗

Design of lightning protection for a full-authority digital engine control

The steps and procedures are described which are necessary to achieve a successful lightning-protection design for a state-of-the-art Full-Authority Digital Engine Control (FADEC) system. The engine and control systems used as examples are fictional, but the design and verification methods are real. Topics discussed include: applicable airworthiness regulation, selection of equipment transient design and control levels for the engine/airframe and intra-engine segments of the system, the use of cable shields, terminal-protection devices and filter circuits in hardware protection design, and software approaches to minimize upset potential. Shield terminations, grounding, and bonding are also discussed, as are the important elements of certification and test plans, and the role of tests and analyses. Also included are examples of multiple-stroke and multiple-burst testing. A review of design pitfalls and challenges, and status of applicable test standards such as RTCA DO-160, Section 22, are presented.

Dargi, M.↗

Real Time Nitrogen Monitoring and Quality Control System for NASA Astromaterials Collection

The Nitrogen system is a vital utility supporting the curation office within NASA's Astromaterials Re-search and Exploration Science (ARES) Division at the Johnson Space center (JSC). Since the Apollo samples were returned in 1969. It has played an essential role in preserving NASA’s astromaterial collections (now nine collections) by maintaining contamination-free, controlled environments required for long term curation and advanced scientific research. To meet the stringent purity requirements for contamination control, high purity modified Grade C Liquid Nitrogen (LN2) is delivered weekly by an industrial gas vendor to a 15,000-gallon tank located outside at NASA JSC near the ARES facility. This nitrogen is vital for creating an inert atmosphere to store the collection in, ensuring they are continuously shielded from contaminants and alterations through a constant N2purge. For most of the past 65 years deliveries of LN2 have required a CoA (Certificate of Analysis) prior to delivery. If those were not available, then LN2 deliver were sent to third-party laboratories for verification, creating an operational bottleneck and quality gap. To address this challenge and maintain rigorous quality control, NASA JSC Infrastructure and Astromaterials Acquisition & Curation Office initiated the development of an on-site Analytical Gas Sampling (AGS) Laboratory. Designed to streamline quality verification if a CoA unavailable, the AGS lab was constructed by a subcontractor in Newton, NJ. After a successful factory acceptance test conducted by the NASA ARES Infrastructure team, the lab was trans-ported to NASA JSC, where it was anchored and integrated into the site’s nitrogen pressure system using stainless steel, oxygen-cleaned tubing. The ARES nitrogen system was modified to provide parallel flows to the AGS lab for quality control and to the astromaterials collection labs for maintaining an inert environment. The AGS lab features two operational modes: (1)Primary: Gaseous Nitrogen (GN2) Quality Monitoring –The AGS system continuously samples the site’s GN2 supply every 15 minutes to ensure compliance with required purity levels. (2) Secondary: LN2 Quality Verification when a comprehensive CoA is not available, a cryogenic vaporizer converts LN2 to GN2, which is then analyzed for impurities: H₂, Ar, O₂, CO, CO₂, H₂O, and total hydrocarbons (THC). By significantly enhancing on-site analytical capabilities, the AGS lab eliminates reliance on external testing, ensures uninterrupted quality monitoring of the nitrogen pressure system, and reinforces NASA’s commitment to preserving pristine astromaterials under the highest standards of curation and research integrity.

glove box↗

Space construction system analysis. Part 2: Platform definition

The top level system requirements are summarized and the accompanying conceptual design for an engineering and technology verification platform (ETVP) system is presented. An encompassing statement of the system objectives which drive the system requirements is presented and the major mission and subsystem requirements are described with emphasis on the advanced communications technology mission payload. The platform design is defined and used as a reference configuration for an end to space construction analyses. The preferred construction methods and processes, the important interactions between the platform design and the construction system design and operation, and the technology development efforts required to support the design and space construction of the ETVP are outlined.

Hart, R. J.↗

Space Telescope precision pointing control system

The Hubble Space Telescope has the most stringent pointing requirements imposed on any spacecraft to date. The overall HST stability shall not exceed 0.007 arc-seconds rms. The Pointing Control System utilizes fine guidance sensors and rate gyros for attitude reference and rate information. Control torques are provided by reaction wheels. A digital computer collects the sensor data, performs the control law computations, and sends torque commands to the reaction wheels. To attain this precision pointing, improvements were made to the rate gyros to lower their noise characteristics and to the reaction wheels to reduce their emitted vibration levels. The control system design was validated in a test sequence which progressed from model verification tests on an air-bearing to operations-oriented, closed loop testing on the assembled vehicle. A test system is described which allowed the simultaneous production of test case command loads for the flight computer and plots of predicted profiles to assist in test data analysis. Workarounds were required during system test to accommodate gyro biases and noise introduced into the closed loop system. Testing and analysis indicate that the HST will provide the capability to meet the requirements for precision pointing.

Beals, G. A.↗

Robust Stability Analysis of the Space Launch System Control Design: A Singular Value Approach

Classical stability analysis consists of breaking the feedback loops one at a time and determining separately how much gain or phase variations would destabilize the stable nominal feedback system. For typical launch vehicle control design, classical control techniques are generally employed. In addition to stability margins, frequency domain Monte Carlo methods are used to evaluate the robustness of the design. However, such techniques were developed for Single-Input-Single-Output (SISO) systems and do not take into consideration the off-diagonal terms in the transfer function matrix of Multi-Input-Multi-Output (MIMO) systems. Robust stability analysis techniques such as H(sub infinity) and mu are applicable to MIMO systems but have not been adopted as standard practices within the launch vehicle controls community. This paper took advantage of a simple singular-value-based MIMO stability margin evaluation method based on work done by Mukhopadhyay and Newsom and applied it to the SLS high-fidelity dynamics model. The method computes a simultaneous multi-loop gain and phase margin that could be related back to classical margins. The results presented in this paper suggest that for the SLS system, traditional SISO stability margins are similar to the MIMO margins. This additional level of verification provides confidence in the robustness of the control design.

Pei, Jing↗

Heatshield for Extreme Entry Environment Technology (HEEET) Thermal Protection System (TPS)

Starting in 2013 and completing in 2019, the Heatshield for Extreme Entry Environment Technology (HEEET) project has been working to mature a 3-D Woven Thermal Protection System (TPS) to Technical Readiness Level (TRL) 6 to support future NASA missions to destinations with extreme entry environments such as Venus, Saturn, Uranus, Neptune and high-speed sample return missions to Earth. A key aspect of the project has been the building and testing of a 1-meter base diameter Engineering Test Unit (ETU) representative of what could be used for a Saturn probe. This paper provides a high-level overview of the HEEET project including manufacturing and testing of the ETU for structural model verification, establish system capability and verify manufacturing workmanship.

Extreme Entry Environment↗

Towards the Formal Verification of a Distributed Real-Time Automotive System

We present the status of a project which aims at building, formally and pervasively verifying a distributed automotive system. The target system is a gate-level model which consists of several interconnected electronic control units with independent clocks. This model is verified against the specification as seen by a system programmer. The automotive system is implemented on several FPGA boards. The pervasive verification is carried out using combination of interactive theorem proving (Isabelle/HOL) and model checking (LTL).

Endres, Erik↗

Hierarchical Design and Verification for VLSI

The specification and verification work is described in detail, and some of the problems and issues to be resolved in their application to Very Large Scale Integration VLSI systems are examined. The hierarchical design methodologies enable a system architect or design team to decompose a complex design into a formal hierarchy of levels of abstraction. The first step inprogram verification is tree formation. The next step after tree formation is the generation from the trees of the verification conditions themselves. The approach taken here is similar in spirit to the corresponding step in program verification but requires modeling of the semantics of circuit elements rather than program statements. The last step is that of proving the verification conditions using a mechanical theorem-prover.

Shostak, R. E.↗

DRS: Derivational Reasoning System

The high reliability requirements for airborne systems requires fault-tolerant architectures to address failures in the presence of physical faults, and the elimination of design flaws during the specification and validation phase of the design cycle. Although much progress has been made in developing methods to address physical faults, design flaws remain a serious problem. Formal methods provides a mathematical basis for removing design flaws from digital systems. DRS (Derivational Reasoning System) is a formal design tool based on advanced research in mathematical modeling and formal synthesis. The system implements a basic design algebra for synthesizing digital circuit descriptions from high level functional specifications. DRS incorporates an executable specification language, a set of correctness preserving transformations, verification interface, and a logic synthesis interface, making it a powerful tool for realizing hardware from abstract specifications. DRS integrates recent advances in transformational reasoning, automated theorem proving and high-level CAD synthesis systems in order to provide enhanced reliability in designs with reduced time and cost.

Bose, Bhaskar↗

James Webb Space Telescope (JWST) Integrated Science Instruments Module (ISIM) Cryo-Vacuum (CV) Test Campaign Summary

JWST Integrated Science Instruments Module (ISIM) has completed its system-level testing program at the NASA Goddard Space Flight Center (GSFC). In March 2016, ISIM was successfully delivered for integration with the Optical Telescope Element (OTE) after the successful verification of the system through a series of three cryo-vacuum (CV) tests. The first test served as a risk reduction test; the second test provided the initial verification of the fully-integrated flight instruments; and the third test verified the system in its final flight configuration. The complexity of the mission has generated challenging requirements that demand highly reliable system performance and capabilities from the Space Environment Simulator (SES) vacuum chamber. As JWST progressed through its CV testing campaign, deficiencies in the test configuration and support equipment were uncovered from one test to the next. Subsequent upgrades and modifications were implemented to improve the facility support capabilities required to achieve test requirements. This paper: (1) provides an overview of the integrated mechanical and thermal facility systems required to achieve the objectives of JWST ISIM testing, (2) compares the overall facility performance and instrumentation results from the three ISIM CV tests, and (3) summarizes lessons learned from the ISIM testing campaign.

Yew, Calinda↗

Supportability Technologies for Future Exploration Missions

Future long-duration human exploration missions will be challenged by resupply limitations and mass and volume constraints. Consequently, it will be essential that the logistics footprint required to support these missions be minimized and that capabilities be provided to make them highly autonomous from a logistics perspective. Strategies to achieve these objectives include broad implementation of commonality and standardization at all hardware levels and across all systems, repair of failed hardware at the lowest possible hardware level, and manufacture of structural and mechanical replacement components as needed. Repair at the lowest hardware levels will require the availability of compact, portable systems for diagnosis of failures in electronic systems and verification of system functionality following repair. Rework systems will be required that enable the removal and replacement of microelectronic components with minimal human intervention to minimize skill requirements and training demand for crews. Materials used in the assembly of electronic systems (e.g. solders, fluxes, conformal coatings) must be compatible with the available repair methods and the spacecraft environment. Manufacturing of replacement parts for structural and mechanical applications will require additive manufacturing systems that can generate near-net-shape parts from the range of engineering alloys employed in the spacecraft structure and in the parts utilized in other surface systems. These additive manufacturing processes will need to be supported by real-time non-destructive evaluation during layer-additive processing for on-the-fly quality control. This will provide capabilities for quality control and may serve as an input for closed-loop process control. Additionally, non-destructive methods should be available for material property determination. These nondestructive evaluation processes should be incorporated with the additive manufacturing process - providing an in-process capability to ensure that material deposited during layer-additive processing meets required material property criteria.

Watson, Kevin↗

Advanced Extravehicular Activity Pressure Garment Requirements Development

The NASA Johnson Space Center advanced pressure garment technology development team is addressing requirements development for exploration missions. Lessons learned from the Z‐2 high fidelity prototype development have reiterated that clear low‐level requirements and verification methods reduce risk to the government, improve efficiency in pressure garment design efforts, and enable the government to be a smart buyer. The expectation is to provide requirements at the specification level that are validated so that their impact on pressure garment design is understood. Additionally, the team will provide defined verification protocols for the requirements. However, in reviewing exploration space suit high level requirements there are several gaps in the team's ability to define and verify related lower level requirements. This paper addresses the efforts in requirement areas such as mobility/fit/comfort and environmental protection (dust, radiation, plasma, secondary impacts) to determine the by what method the requirements can be defined and use of those methods for verification. Gaps exist at various stages. In some cases component level work is underway, but no system level effort has begun, in other cases no effort has been initiated to close the gap. Status of ongoing efforts and potential approaches to open gaps are discussed.

Ross, Amy↗

Advanced Extra-Vehicular Activity Pressure Garment Requirements Development

The NASA Johnson Space Center advanced pressure garment technology development team is addressing requirements development for exploration missions. Lessons learned from the Z-2 high fidelity prototype development have reiterated that clear low-level requirements and verification methods reduce risk to the government, improve efficiency in pressure garment design efforts, and enable the government to be a smart buyer. The expectation is to provide requirements at the specification level that are validated so that their impact on pressure garment design is understood. Additionally, the team will provide defined verification protocols for the requirements. However, in reviewing exploration space suit high level requirements there are several gaps in the team's ability to define and verify related lower level requirements. This paper addresses the efforts in requirement areas such as mobility/fit/comfort and environmental protection (dust, radiation, plasma, secondary impacts) to determine the method by which the requirements can be defined and use of those methods for verification. Gaps exist at various stages. In some cases component level work is underway, but no system level effort has begun; in other cases no effort has been initiated to close the gap. Status of on-going efforts and potential approaches to open gaps are discussed.

Ross, Amy↗