Search NASA⌕ Search

SEARCH · Search NASA

Results for “risk requirements architectures”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 127 records · Page 7

MACHETE: Environment for Space Networking Evaluation

Space Exploration missions requires the design and implementation of space networking that differs from terrestrial networks. In a space networking architecture, interplanetary communication protocols need to be designed, validated and evaluated carefully to support different mission requirements. As actual systems are expensive to build, it is essential to have a low cost method to validate and verify mission/system designs and operations. This can be accomplished through simulation. Simulation can aid design decisions where alternative solutions are being considered, support trade-studies and enable fast study of what-if scenarios. It can be used to identify risks, verify system performance against requirements, and as an initial test environment as one moves towards emulation and actual hardware implementation of the systems. We describe the development of Multi-mission Advanced Communications Hybrid Environment for Test and Evaluation (MACHETE) and its use cases in supporting architecture trade studies, protocol performance and its role in hybrid simulation/emulation. The MACHETE environment contains various tools and interfaces such that users may select the set of tools tailored for the specific simulation end goal. The use cases illustrate tool combinations for simulating space networking in different mission scenarios. This simulation environment is useful in supporting space networking design for planned and future missions as well as evaluating performance of existing networks where non-determinism exist in data traffic and/or link conditions.

Jennings, Esther H.↗

Potential Lunar In-Situ Resource Utilization Experiments and Mission Scenarios

The extraction and use of resources on the Moon, known as In-Situ Resource Utilization (ISRU), can potentially reduce the cost and risk of human lunar exploration while also increasing science achieved. By not having to bring all of the shielding and mission consumables from Earth and being able to make products on the Moon, missions may require less mass to accomplish the same objectives, carry more science equipment, go to more sites of exploration, and/or provide options to recover from failures not possible with delivery of spares and consumables from Earth alone. The concept of lunar ISRU has been considered and studied for decades, and scientists and engineers were theorizing and even testing concepts for how to extract oxygen from lunar soil even before the Apollo 11 mission to the Moon. There are four main areas where ISRU can significantly impact how human missions to the Moon will be performed: mission consumable production, civil engineering and construction, energy production, storage, and transfer, and manufacturing and repair. The area that has the greatest impact on mission mass, hardware design and selection, and mission architecture is mission consumable production, in particular, the ability to make propellants, life support consumables, and fuel cell reagents. Mission consumable production allows for refueling and reuse of spacecraft, increasing power production and storage, and increased capabilities and failure tolerance for crew life support. The other three areas allow for decreased mission risk due to radiation and plume damage, alternative power systems, and failure recover capabilities while also enabling infrastructure growth over Earth delivered assets. However, while lunar ISRU has significant potential for mass, cost, and risk reduction for human lunar missions, it has never been demonstrated before in space. To demonstrate that ISRU can meet mission needs and to increase confidence in incorporating ISRU capabilities into mission architectures, terrestrial laboratory and analog field testing along with robotic precursor missions are required. A stepwise approach with international collaboration is recommended. The first step is to understand the resources available through orbital and surface exploration missions. Resources of particular interest are hydrogen, hydroxyl, water, and other polar volatile resources recently measured by Chandrayaan, Lunar Reconnaissance Orbiter (LRO), and the Lunar Crater Observation and Sensing Satellite (LCROSS). The second step is to demonstrate critical aspects of ISRU systems to prove ISRU is feasible under lunar environmental and resource conditions (ex. subscale oxygen extraction from regolith). The third step is to perform integrated missions with ISRU and other connected systems, such as power, consumable storage, surface mobility, and life support at a relevant mission scale to demonstrate ISRU capabilities as well as the critical interfaces with other exploration systems. If possible, the mission should demonstrate the use of ISRU products (ex. in a rocket engine or fuel cell). This dress rehearsal mission would be the final step before full implementation of ISRU into human missions, and may be performed during human lunar exploration activities. This stepwise approach is the most conservative approach, and may only be possible with international cooperation due to the limited number of robotic missions each nation/space agency can perform within their budget.

Sanders, Gerald B.↗

In-situ Resource Utilization (ISRU) to Support the Lunar Outpost and the Rationale for Precursor Missions

One of the ways that the Constellation Program can differ from Apollo is to employ a live-off-the-land or In-Situ Resource Utilization (ISRU) supported architecture. The options considered over the past decades for using indigenous materials have varied considerably in terms of what resources to attempt to acquire, how much to acquire, and what the motivations are to acquiring these resources. The latest NASA concepts for supporting the lunar outpost have considered many of these plans and compared these options to customers requirements and desires. Depending on the architecture employed, ISRU technologies can make a significant contribution towards a sustainable and affordable lunar outpost. While extensive ground testing will reduce some mission risk, one or more flight demonstrations prior to the first crew's arrival will build confidence and increase the chance that outpost architects will include ISRU as part of the early outpost architecture. This presentation includes some of the options for using ISRU that are under consideration for the lunar outpost, the precursor missions that would support these applications, and a notional timeline to allow the lessons learned from the precursor missions to support outpost hardware designs.

Simon, Thomas M.↗

Space-Based Reconfigurable Software Defined Radio Test Bed Aboard International Space Station

The National Aeronautical and Space Administration (NASA) recently launched a new software defined radio research test bed to the International Space Station. The test bed, sponsored by the Space Communications and Navigation (SCaN) Office within NASA is referred to as the SCaN Testbed. The SCaN Testbed is a highly capable communications system, composed of three software defined radios, integrated into a flight system, and mounted to the truss of the International Space Station. Software defined radios offer the future promise of in-flight reconfigurability, autonomy, and eventually cognitive operation. The adoption of software defined radios offers space missions a new way to develop and operate space transceivers for communications and navigation. Reconfigurable or software defined radios with communications and navigation functions implemented in software or VHDL (Very High Speed Hardware Description Language) provide the capability to change the functionality of the radio during development or after launch. The ability to change the operating characteristics of a radio through software once deployed to space offers the flexibility to adapt to new science opportunities, recover from anomalies within the science payload or communication system, and potentially reduce development cost and risk by adapting generic space platforms to meet specific mission requirements. The software defined radios on the SCaN Testbed are each compliant to NASA's Space Telecommunications Radio System (STRS) Architecture. The STRS Architecture is an open, non-proprietary architecture that defines interfaces for the connections between radio components. It provides an operating environment to abstract the communication waveform application from the underlying platform specific hardware such as digital-to-analog converters, analog-to-digital converters, oscillators, RF attenuators, automatic gain control circuits, FPGAs, general-purpose processors, etc. and the interconnections among different radio components.

Communications↗

Nuclear Electric Propulsion Brayton Power Conversion Working Fluid Considerations

NASA has considered Nuclear Electric Propulsion (NEP) for high ∆V missions since the late 1950s, but the current technology readiness level of the requisite power-train needs to be raised for such a mission. The powertrain includes reactor, power conversion, power management, electric propulsion, and thermal management components that must be integrated to minimize system a (kg/kWe) and to finalize a propulsion system architecture within the 2025-2027 timeframe requires advancing these component technologies to technology readiness level (TRL) 5 and Advancement Degree of Difficulty (AD2) 3 in an expeditious manner with minimal risks. This paper will only address the power conversion (heat to electric) components of that system. Based on both internal and industry studies, a primary conclusion of this work is that a single-spool supercritical Xe-He radial flux Brayton heat engine combined with a permanent magnet synchronous alternator can potentially be developed with the least technical risk to meet the technology readiness schedule and required NEP system performance metrics.

Nuclear Electric Propulsion (NEP)↗

Nuclear Electric Propulsion Brayton Power Conversion Working Fluid Considerations

NASA has considered Nuclear Electric Propulsion (NEP) for high V missions since the late 1950’s, but the current technology readiness level of the requisite powertrain needs to be raised for such a mission. The powertrain includes reactor, power conversion, power management, electric propulsion, and thermal management components that must be integrated to minimize system (kg/kWe) and to finalize a propulsion system architecture within the 2025-2027 timeframe requires advancing these component technologies to technology readiness level (TRL) 5 and Advancement Degree of Difficulty (AD2) 3 in an expeditious manner with minimal risks. This paper will only address the power conversion (heat to electric) components of that system. Based on both internal and industry studies, a primary conclusion of this work is that a single-spool supercritical Xe-He radial flux Brayton heat engine combined with a permanent magnet synchronous alternator can potentially be developed with the least technical risk to meet the technology readiness schedule and required NEP system performance metrics.

Nuclear↗

System-Level Integration of Modular Language Models for Real-Time Risk Assessment in Third-Party Risk Management Systems

Large enterprises typically rely on dedicated teams to govern and implement security measures throughout their supply chains, ensuring compliance with enterprise security procedures. There is a significant reliance on Third-Party Risk Management (TPRM) platforms, which often require complete, highly structured information from potential vendors. The review and compliance assurance processes are time- and labor intensive, often requiring several rounds of review between the supply chain security risk management teams, business users, and potential vendors, leading to delays in the supply chain processing and consumer experience. Significant challenges in the risk management paradigm include handling unstructured data in various formats and providing real-time feedback to users to reduce the required review time. This paper presents a novel solution to these challenges. A modular multi-step system architecture is proposed using advances in language processing, specifically for unstructured responses and provides real-time feedback (i.e., 3 seconds) so that users can improve their responses before the TPSRM team review. This novel system architecture will increase information accuracy and significantly reduce time and labor during the review process.

99 - GENERAL AND MISCELLANEOUS↗

Integrated Space Transportation Plan: Defining Technology Requirements and Next Generation Launch Systems to Meet Commercial and Government Needs

NASA continues to focus on improving safety and reliability while reducing the annual cost of meeting human space flight and unique ISS and exploration needs. NASA's Space Transportation Architecture Study (STAS) Phase 2 in early 1998 focused on space transportation options. Subsequently, NASA directed parallel industry and government teams to conduct the Integrated Space Transportation Plan effort (STAS Phase 3). The objective of ISTP was to develop technology requirements, roadmaps, and risk reduction portfolio that considered expanded definition of "clean-sheet" and Shuttle-derived second generation ETO transportation systems in support of a 2005 RLV competition for NASA missions beginning 2010. NASA provided top-level requirements for improvements in safety, reliability, and cost and a set of design reference missions representing NASA ISS, human exploration, commercial, and other civil and government needs. This paper addresses the challenges of meeting NASA's objectives while servicing the varied market segments represented in the ISTP design reference missions and provides a summary of technology development needs and candidate system concepts. A comparison of driving requirements, architectures and technology needs is discussed and descriptions of viable Shuttle-derived and next generation systems to meet the market needs are presented.

Davidoff, Larry D.↗

Methods for estimating X-ray machine output through measurement and simulation

We report ball grid arrays are increasingly being applied in the electronics industry and may require X-ray inspection to ensure the integrity and correct placement of solder pins. However, as the architecture of integrated circuits continues to narrow while simultaneously growing more complex, the risk of electronic failure due to radiation damage increases. While medical X-ray devices have been held to high standards and are repeatedly shown to be well characterized, devices used for electronic inspection are often lacking detailed characterization. This study presents unique methods to solve for important properties in X-ray inspection devices such as source to object distance and energy spectrum. This information can then be applied to Monte Carlo models to achieve better overall dose estimates to electronics, which will lead to superior manufactured products. Since X-ray devices can vary greatly in source characteristics, this work investigates spectral measurement and Monte Carlo representation of three X-ray devices. For a Philips SRO 33 100 medical diagnostic device, the spectral output followed expected trends given by the prediction software SpekCalc and Spektr. For the Dage XD7500NT, direct measurement showed a spectral artifact that through the use of Gafchromic films, was shown to be a contributing effect in the dose output. For the Rad Source RS1800, a high powered irradiation device, direct spectral measurement was not achieved. However, a Monte Carlo model using an assumed spectra was found to match ion chamber measurements to a high degree.

47 OTHER INSTRUMENTATION↗

Robosphere: Self Sustaining Robotic Ecologies as Precursors to Human Planetary Exploration

The present sequential mission oriented approach to robotic planetary exploration, could be changed to an infrastructure building approach where a robotic presence is permanent, self sustaining and growing with each mission. We call this self-sustaining robotic ecology approach robosphere and discuss the technological issues that need to be addressed before this concept can be realized. One of the major advantages of this approach is that a robosphere would include much of the infrastructure required by human explorers and would thus lower the preparation and risk threshold inherent in the transition from robotic to human exploration. In this context we discuss some implications for space architecture.

Colombano, Silvano P.↗

Tool Use Within NASA Software Quality Assurance

As space mission software systems become larger and more complex, it is increasingly important for the software assurance effort to have the ability to effectively assess both the artifacts produced during software system development and the development process itself. Conceptually, assurance is a straightforward idea - it is the result of activities carried out by an organization independent of the software developers to better inform project management of potential technical and programmatic risks, and thus increase management's confidence in the decisions they ultimately make. In practice, effective assurance for large, complex systems often entails assessing large, complex software artifacts (e.g., requirements specifications, architectural descriptions) as well as substantial amounts of unstructured information (e.g., anomaly reports resulting from testing activities during development). In such an environment, assurance engineers can benefit greatly from appropriate tool support. In order to do so, an assurance organization will need accurate and timely information on the tool support available for various types of assurance activities. In this paper, we investigate the current use of tool support for assurance organizations within NASA, and describe on-going work at JPL for providing assurance organizations with the information about tools they need to use them effectively.

software assurance↗

Fe(exp3) - A Monte Carlo Simulation Capability for Evaluation of New Air Traffic Management Concepts

The concepts of unmanned aircraft system traffic management (UTM) and urban air mobility (UAM) introduce high-density operations in low-altitude airspace and will change the paradigm of the traditional air traffic system. The Flexible engine for Fast-time evaluation of Flight environments (Fe3) provides the capability of statistically analyzing high-density, high-fidelity, and low-altitude traffic system without conducting infeasible and cost-prohibitive flight tests that involve a large volume of aerial vehicles. With this simulation capability, stakeholders can study the impacts of critical factors, define requirements, policies, and protocols needed to support a safe yet efficient traffic system, assess operational risks, and optimize flight schedules. This work provides an introduction to this simulation tool including its architecture and various models involved. Its performance and applications in high density air traffic operations are also presented.

Paralellization↗

Constellation Program Life-cycle Cost Analysis Model (LCAM)

The Constellation Program (CxP) is NASA's effort to replace the Space Shuttle, return humans to the moon, and prepare for a human mission to Mars. The major elements of the Constellation Lunar sortie design reference mission architecture are shown. Unlike the Apollo Program of the 1960's, affordability is a major concern of United States policy makers and NASA management. To measure Constellation affordability, a total ownership cost life-cycle parametric cost estimating capability is required. This capability is being developed by the Constellation Systems Engineering and Integration (SE&I) Directorate, and is called the Lifecycle Cost Analysis Model (LCAM). The requirements for LCAM are based on the need to have a parametric estimating capability in order to do top-level program analysis, evaluate design alternatives, and explore options for future systems. By estimating the total cost of ownership within the context of the planned Constellation budget, LCAM can provide Program and NASA management with the cost data necessary to identify the most affordable alternatives. LCAM is also a key component of the Integrated Program Model (IPM), an SE&I developed capability that combines parametric sizing tools with cost, schedule, and risk models to perform program analysis. LCAM is used in the generation of cost estimates for system level trades and analyses. It draws upon the legacy of previous architecture level cost models, such as the Exploration Systems Mission Directorate (ESMD) Architecture Cost Model (ARCOM) developed for Simulation Based Acquisition (SBA), and ATLAS. LCAM is used to support requirements and design trade studies by calculating changes in cost relative to a baseline option cost. Estimated costs are generally low fidelity to accommodate available input data and available cost estimating relationships (CERs). LCAM is capable of interfacing with the Integrated Program Model to provide the cost estimating capability for that suite of tools.

Prince, Andy↗

Long Duration Space Missions: Human Subsystem Risks and Requirements

This viewgraph presentation reviews the human health and performance risks associated with long duration space flight beyond low earth orbit. The contents include: 1) Human Research Program; 2) Human Subsystem Risks; 3) Human Exploration Framework Team (HEFT) Architecture Elements; 4) Potentially Unacceptable Risks -1; 5) Potentially Unacceptable Risks-2; and 6) Major Mission Drivers of Risk.

Kundrot, Criag E.↗

Constellation's Command, Control, Communications and Information (C3I) Architecture

Operations concepts are highly effective for: 1) Developing consensus; 2) Discovering stakeholder needs, goals, objectives; 3) Defining behavior of system components (especially emergent behaviors). An interoperability standard can provide an excellent lever to define the capabilities needed for system evolution. Two categories of architectures are needed in a program of this size are: 1) Generic - Needed for planning, design and construction standards; 2) Specific - Needed for detailed requirement allocations, interface specs. A wide variety of architectural views are needed to address stakeholder concerns, including: 1) Physical; 2) Information (structure, flow, evolution); 3) Processes (design, manufacturing, operations); 4) Performance; 5) Risk.

constellation↗

Bumper 3 Update for IADC Protection Manual

The Bumper code has been the standard in use by NASA and contractors to perform meteoroid/debris risk assessments since 1990. It has undergone extensive revisions and updates [NASA JSC HITF website; Christiansen et al., 1992, 1997]. NASA Johnson Space Center (JSC) has applied BUMPER to risk assessments for Space Station, Shuttle, Mir, Extravehicular Mobility Units (EMU) space suits, and other spacecraft (e.g., LDEF, Iridium, TDRS, and Hubble Space Telescope). Bumper continues to be updated with changes in the ballistic limit equations describing failure threshold of various spacecraft components, as well as changes in the meteoroid and debris environment models. Significant efforts are expended to validate Bumper and benchmark it to other meteoroid/debris risk assessment codes. Bumper 3 is a refactored version of Bumper II. The structure of the code was extensively modified to improve maintenance, performance and flexibility. The architecture was changed to separate the frequently updated ballistic limit equations from the relatively stable common core functions of the program. These updates allow NASA to produce specific editions of the Bumper 3 that are tailored for specific customer requirements. The core consists of common code necessary to process the Micrometeoroid and Orbital Debris (MMOD) environment models, assess shadowing and calculate MMOD risk. The library of target response subroutines includes a board range of different types of MMOD shield ballistic limit equations as well as equations describing damage to various spacecraft subsystems or hardware (thermal protection materials, windows, radiators, solar arrays, cables, etc.). The core and library of ballistic response subroutines are maintained under configuration control. A change in the core will affect all editions of the code, whereas a change in one or more of the response subroutines will affect all editions of the code that contain the particular response subroutines which are modified. Note that the Bumper II program is no longer maintained or distributed by NASA.

Christiansen, Eric L.↗

The Design and Evaluation of Zero Trust Architecture for Electric Vehicle Charging Infrastructure: EVs @ Scale Series on EV Charging Station Cybersecurity

Implementing a zero trust architecture can significantly bolster the security of electric vehicle (EV) charging infrastructure. EV charging infrastructure includes numerous networked interfaces, each of which can present potential vulnerabilities. When these vulnerabilities are exploited, they can compromise the entire system, leading to severe operational and security risks. Zero trust is a security model that operates on the principle of "never trust, always verify," which helps manage the attack surface and limit the scope of any potential compromises. Fundamentally, this model ensures that no entity, whether inside or outside the network, is trusted by default. The design principles of zero trust include continuous verification, strict deny-by-default access controls, and micro-segmentation. Continuous verification ensures that every request is thoroughly checked, regardless of its origin. Strict access controls enforce the principle of least privilege, allowing users and devices only the minimum necessary access to perform their functions. Micro-segmentation involves dividing the network into smaller, isolated segments to prevent lateral movement in case of a breach. In the context of EV charging infrastructure, zero trust can be implemented through various strategies. For example, multi-factor authentication (MFA) can be required for engineers to access the management interfaces and control systems of charging stations. Real-time monitoring and analysis of network traffic can help detect and respond to anomalies. Systems that do not need to communicate with each other can be micro-segmented to enhance security. All communications should adhere to predefined policies to be permitted. Additionally, encrypting communications can protect sensitive information exchanged between chargers and management systems. This paper presents a zero trust architecture specifically designed for EV charging infrastructure. Implementing zero trust not only mitigates risks but also builds a resilient infrastructure capable of withstanding and quickly recovering from cyber threats. The architecture addresses six defined security objectives. A comprehensive test plan is developed to assess the architecture against these objectives, and the results of the evaluation are reported. This approach is essential for maintaining the reliability and integrity of EV charging services in an increasingly interconnected and vulnerable digital landscape. This is the first in a planned series of papers exploring the implementation of zero trust in EV charging infrastructure. Each paper will delve into different aspects and applications of zero trust, highlighting how various work processes and requirements can lead to distinct architectural designs. These architectures will be tailored to address specific security challenges and operational needs within the EV charging ecosystem, ensuring a robust and adaptable security framework.

33 ADVANCED PROPULSION SYSTEMS↗

Low Activity Waste Tuning Feed Material Testing VSL-18R4350-1 (Final Report)

High level waste (HLW) from the Hanford tank farms will be retrieved and transferred to the Hanford Tank Waste Treatment and Immobilization Plant (WTP). The waste will be pretreated to separate the soluble chemical salts (mostly sodium nitrate/nitrite and sodium hydroxide) from the bulk of the radioactive materials. This decontaminated salt solution is the low activity waste (LAW) stream which constitutes most of the total waste volume. The remaining HLW contains most of the radioactive materials but a fraction of the volume. Each of these waste streams is directed to an independent processing facility where the waste is mixed with glass forming chemicals (mostly silica and borax or boric acid) and fed into the melters for stabilization by conversion into glass. The molten glass is poured into stainless steel containers to produce packages for disposal: local shallow burial for the LAW containers and a future geologic repository for the HLW containers. The LAW facility melters produce significant quantities of NOx-laden off-gas that require abatement in accordance with 10 CFR 830 and air emission requirements. The NOx emissions also pose a safety risk. The LAW facility commissioning sequence requires that the melters be operated and process control loops tuned prior to introducing waste or waste feed materials that produce NOx. Therefore, a temporary or permanent system architecture is needed that provides a feed supply to the melters for the purpose of melter testing and off-gas tuning that does not result in the production of significantly hazardous off-gas products.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗