Search NASA⌕ Search

SEARCH · Search NASA

Results for “Autonomous Mitigation”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 145 records · Page 8

An In-time Aviation Safety Management System Concept of Operations and Modernization of the National Airspace System​

The National Airspace System (NAS) is growing in complexity of aircraft, missions, and operations. In response, many organizations have published papers and concepts of operations (ConOps) for new and enhanced safety systems. The National Academies’ vision for an In-time Aviation Safety Management System (IASMS) is integral to Federal Aviation Administration (FAA) modernization efforts. The National Aeronautics and Space Administration (NASA) System-Wide Safety (SWS) project is conducting safety research, exploring solutions, and defining the safety needs of future missions, such as Advanced Air Mobility (AAM) and autonomous aircraft operating in a more connected, flexible, and dynamic airspace. IASMS enables and provides a path for bringing FAA’s operational vision to fruition through increasingly automated safety systems that integrate services, functions, and capabilities (SFCs). These SFCs provide the necessary responsiveness to monitor, assess, and mitigate known hazards and emergent risks. This paper describes how safety in today’s air transportation system will need to evolve, identifies key points regarding in-time safety, and explores the criticality of IASMS in the future NAS.

Airspace↗

Conjunction Assessment and Deconfliction Paradigm for Co-Located Satellite Constellations With on-Spacecraft “Autonomous” Flight Dynamics Control

Satellite constellations that employ on-spacecraft flight dynamics and conjunction assessment (CA) approaches face particular challenges. First, they must arrange to obtain and upload to the constellation satellite close approach information, such as Conjunction Data Messages, so that their on-board systems will have the data they need to make informed CA decisions. Second, given current latencies in obtaining CA screening information, such systems often cannot obtain dedicated screenings of their proposed maneuvers before they are executed. Third, they usually cannot engage in real time with owner/operators (O/Os) with whom they may come into conjunction, relying instead on pre-arranged courses of action that may or may not fit a given situation well. Despite these difficulties, it is nonetheless possible, as operators such as SpaceX have demonstrated, to operate safely using on-board CA calculations, in the presence of a largely collaborative operating environment. The situation breaks down, however, when two constellations that operate with such a paradigm are placed in the same orbital region and will experience conjunctions with each other. Each may have a vague idea of where the other’s satellites are, or perhaps even a somewhat precise idea if they exchange O/O ephemerides, but neither will know the other’s more immediate maneuver intentions, especially for situations in which they are in a high-risk conjunction with each other and a mitigation maneuver is required. As there is no formalized way for these automated systems to ascertain each other’s intentions for this type of conjunction, it is quite possible that each spacecraft may choose a maneuver that results in the two objects’ colliding. An opportunity to develop a solution to this problem was presented by the NASA “Starling” project, a small experimental constellation developed to demonstrate autonomous satellite control and constellation reconfiguration and for which a launch was obtained that, serendipitously, will place this constellation close to the SpaceX Starlink constellation. Because the NASA constellation is experimental, an extended mission part of the mission has been negotiated to implement and test mechanisms for resolving the problem of co-located constellations with on-board flight dynamics control. For the last eighteen months, a consortium among NASA Ames (the Starling satellite providers), NASA CARA (the Agency organization responsible for conjunction assessment), Space X, and the Department of Commerce (in observer status) has met regularly to assemble a concept of operations for a robust solution to this problem and has developed a prototype ground node that will serve as a needed CA screening and information dispensary. The approach and methods, as well as the active employment of the developed ground node, will be tested both in simulation before actual use and then in actual spacecraft operations, which are anticipated to begin in January 2024. This paper will describe the co-located autonomously-controlled constellation problem and the developed solution in detail, outlining what ground node (i.e., government) infrastructure and features are required, what particular capabilities are needed by the constellations themselves in order to make use of this deconfliction paradigm, and the migration path forward to allow such a capability set to be incorporated by the Department of Commerce’s space traffic coordination system.

Conjunction Assessment↗

Relative Sensor with 4Pi Coverage for Formation Flying Missions

The Terrestrial Planet Finder (TPF) pre-project, an element of NASA s Origins program, is currently developing two architectures for a mission to search for earth-like planets around nearby stars. One of the architectures being developed is the Formation Flying Interferometer (FFI). The FFI is envisioned to consist of up to seven spacecraft (as many as six "collectors" with IR telescopes, and a "combiner") flying in precise formation within +/-1 cm of pre-determined trajectories for synchronized observations. The spacecraft-to-spacecraft separations are variable between 20 m and 100 m or more during observations to support various configurations of the interferometer in the planet-finding mode. The challenges involved with TPF autonomous operations, ranging from formation acquisition and formation maneuvering to high precision formation control during science observations, are unprecedented. In this paper we discuss the development of the formation acquisition sensor, which uses novel modulation and duplexing schemes to enable fast signal acquisition, multiple-spacecraft operation, and mitigation of inherent jamming conditions, while providing precise formation sensing and integrated radar capability. This approach performs delay synthesis and carrier cycle ambiguity resolution to improve range measurement, and uses differential carrier cycle ambiguity resolution to make precise bearing angle measurements without calibration maneuvers.

Tien, Jeffrey Y.↗

Relative Sensor with 4(pi) Coverage for Formation Flying Missions

The Terrestrial Planet Finder (TPF) pre-project, an element of NASA's Origins program, is currently developing two architectures for a mission to search for earth-like planets around nearby stars. One of the architectures being developed is the Formation Flying Interferometer (FFI). The FFI is envisioned to consist of up to seven spacecraft (as many as six 'collectors' with IR telescopes, and a 'combiner') flying in precise formation within f 1 cm of pre-determined trajectories for synchronized observations. The spacecraft-to-spacecraft separations are variable between 20 m and 100 m or more during observations to support various configurations of the interferometer in the planet-finding mode. The challenges involved with TPF autonomous operations, ranging from formation acquisition and formation maneuvering to high precision formation control during science observations, are unprecedented. In this paper we discuss the development of the formation acquisition sensor, which uses novel modulation and duplexing schemes to enable fast signal acquisition, multiple-spacecraft operation, and mitigation of inherent jamming conditions, while providing precise formation sensing and integrated radar capability. This approach performs delay synthesis and carrier cycle ambiguity resolution to improve range measurement, and uses differential carrier cycle ambiguity resolution to make precise bearing angle measurements without calibration maneuvers.

formation flying sensors↗

Encealdus Orbilander: A Flagship Mission Concept for Astrobiology

"Whether life exists beyond Earth remains a fundamental question driving our exploration of the Solar System. At Saturn’s moon Enceladus, plumes of oceanic material vented into space allow the investigation of the astrobiological potential of an ocean world, hinted at by Cassini, without the necessity of drilling through kilometers of ice crust. The Enceladus Orbilander is a flagship ($2.56B in fiscal year 2025 dollars) mission concept created for the 2023–2033 Planetary Science Decadal Survey. Orbilander takes full advantage of the opportunity provided by Enceladus’ plumes to search for signs of life. A single spacecraft both orbits and lands, capturing samples from four distinct reservoirs offered by the plumes. These samples, both particulate and vapor, are then analyzed by the Life Detection Suite (LDS), a set of five instruments conducting complementary and orthogonal biosignature-seeking measurements. To provide the context that specifically enhances interpretation of LDS measurements, geochemical and geophysical investigations are conducted both in orbit and on the surface. These reveal the physio-chemical state of the ocean and core as well as the processes involved in ejection of plume material and how these affect the ocean material analyzed by the LDS. The Orbilander can be delivered to the Saturn system via several launch vehicle and trajectory options, including a direct trajectory (7-year cruise), a ∆V-EGA trajectory (9-year cruise) and several options using an inner cruise with Venus and Earth flybys (10-year cruise). Upon Saturn Orbit Insertion, a 4-year moon tour pumps down the Orbilander’s orbit to intercept Enceladus. The most optimal arrival times balance the Jupiter flyby opportunities of the late 2030s and solar illumination at the Enceladus high southern latitudes where plume material is most abundant. This mission concept therefore targets project start in 2030. Upon Enceladus Orbit Insertion, the Orbilander begins a 1.5-year-long campaign of landing site reconnaissance, remote sensing science, and collecting sufficient plume sample to run all but one of the LDS measurements. After successful landing, the Orbilander spends 2 years on the surface conducting multiple LDS measurements with all five instruments on actively and passively collected plume material, as well as seismic investigations. The schedule laid out here is well-defined, but the mission also has operational and resource flexibility should additional reconnaissance be needed. As part of the design study, mission and development risks were identified and mitigation strategies proposed. Technologies key to achieving the life detection science objectives include instrumentation matured under programs like COLDTech and ICEE-2, such as aspects of the sampling system and microfluidic devices, as well as well-known techniques like high-resolution and separation-capable mass spectrometers. Autonomous onboard navigation is planned to maintain a halo orbit around Enceladus to enable passive sampling from orbit as well as reconnaissance measurements for use in site selection and landing. Terrain relative navigation is included to ensure safe landing, given that targeted areas may contain landing hazards. Continued development of radioisotope thermoelectric generator (RTG) technology and long-life batteries is essential for this long duration mission. The Enceladus Orbilander represents an optimal point in the trade space of science value versus cost, taking advantage of the extensive knowledge of Enceladus provided by Cassini, how well Enceladus lends itself to a search for life in material from its ocean, and the flexibility afforded by the innovative design developed by the APL team. By taking full advantage of Enceladus’ plumes both in orbit and on the surface, Orbilander represents a robust search for life with complementary and orthogonal biosignatures as well as contextual geophysical and geochemical measurements, determining not only whether Enceladus is inhabited (at levels up to 500,000× scarcer than in Earth’s oceans) but also why. "

Exobiology↗

A Comprehensive Analysis of the X-15 Flight 3-65 Accident

The November 15, 1967, loss of X-15 Flight 3-65-97 (hereafter referred to as Flight 3-65) was a unique incident in that it was the first and only aerospace flight accident involving loss of crew on a vehicle with an adaptive flight control system (AFCS). In addition, Flight 3-65 remains the only incidence of a single-pilot departure from controlled flight of a manned entry vehicle in a hypersonic flight regime. To mitigate risk to emerging aerospace systems, the NASA Engineering and Safety Center (NESC) proposed a comprehensive review of this accident. The goal of the assessment was to resolve lingering questions regarding the failure modes of the aircraft systems (including the AFCS) and thoroughly analyze the interactions among the human agents and autonomous systems that contributed to the loss of the pilot and aircraft. This document contains the outcome of the accident review.

Dennehy, Cornelius J.↗

An Approach for Identifying IASMS Services, Functions, and Capabilities From Data Sources

Assuring safety in the NAS with the inclusion of new entrants that are part of Advanced Air Mobility (AAM) will require overcoming unique safety challenges that result from combining innovative technologies with novel airspace concepts for moving people and cargo using semi-autonomous/autonomous vehicles. Overcoming these AAM safety assurance challenges is the focus of the In-time Aviation Safety Management System (IASMS). The IASMS Concept of Operations (ConOps) describes an interconnected set of services, functions, and capabilities (SFCs)designed to manage operational risks, identify unknown risks, and inform system design to mitigate risk. This paper describes a broad approach for identifying SFCs involving technology trends in research, assessment of known and unknown risks in safety reports, and causal and contributing factors in aviation accidents and incidents. This approach leverages these sources to identify potential SFCs that enable the Monitor, Assess, and Mitigate (M-A-M)functionality that represents the enabling framework of the IASMS.

Kyle Ellis↗

Smart Habitat: Identifying Technological Countermeasures to Address Health and Performance Risks during Long-Duration Exploration Missions

During proposed long-duration Exploration Missions, crews must become increasingly autonomous, as they will be unable to rely on consistent input and guidance from ground-based mission control operations. While it is known that smart technologies will play a crucial role in future long-duration Exploration Missions, it is not known which manner of devices and systems may best mitigate the expected risks to crew. The purpose of this project was to identify both current and emerging technologies which may act as health and performance countermeasures on long-duration Exploration Missions.

Ryan A. Lange↗

In-Time Non-Participant Casualty Risk Assessment to Support Onboard Decision Making for Autonomous Unmanned Aircraft

Numerous operational paradigms, technologies, and missions are emerging as newcomers to the National Airspace System (NAS) develop small Unmanned Aircraft Systems (sUAS), personal air vehicles and other Urban Air Mobility (UAM) concepts. As the list of applications expands, maintaining the safety of the current airspace system remains one of the core concerns preventing widespread commercial implementation of these concepts. Further, the risks associated with unmanned aircraft operations themselves have to be recognized and mitigated in a timely manner. Safety-critical risks include, but are not limited to, flight outside of approved airspace, unsafe proximity to people or property, critical system failures, loss-of control, and cyber-security related risks. Instead of reacting to accidents, a set of predictive and data-driven risk monitoring, assessment, and mitigation capabilities are envisioned to help capture and eliminate hazards as these systems become operational. NASA’s System-wide Safety project is performing R&D on such a safety assurance concept. As part of this concept, this paper describes an architecture that continuously monitors a diverse set of onboard and ground-based sources to estimate and predict non-participant casualty risk during flight. Timely identification of the changing nature of this risk can inform decision making processes to mitigate current and impending situations.

Ancel, Ersin↗

Evaluating the Medical Kit System for the International Space Station(ISS) - A Paradigm Revisited

Medical capabilities aboard the International Space Station (ISS) have been packaged to help astronaut crew medical officers (CMO) mitigate both urgent and non-urgent medical issues during their 6-month expeditions. Two ISS crewmembers are designated as CMOs for each 3-crewmember mission and are typically not physicians. In addition, the ISS may have communication gaps of up to 45 minutes during each orbit, necessitating medical equipment that can be reliably operated autonomously during flight. The retirement of the space shuttle combined with ten years of manned ISS expeditions led the Space Medicine Division at the NASA Johnson Space Center to reassess the current ISS Medical Kit System. This reassessment led to the system being streamlined to meet future logistical considerations with current Russian space vehicles and future NASA/commercial space vehicle systems. Methods The JSC Space Medicine Division coordinated the development of requirements, fabrication of prototypes, and conducted usability testing for the new ISS Medical Kit System in concert with implementing updated versions of the ISS Medical Check List and associated in-flight software applications. The teams constructed a medical kit system with the flexibility for use on the ISS, and resupply on the Russian Progress space vehicle and future NASA/commercial space vehicles. Results Prototype systems were developed, reviewed, and tested for implementation. Completion of Preliminary and Critical Design Reviews resulted in a streamlined ISS Medical Kit System that is being used for training by ISS crews starting with Expedition 27 (June 2011). Conclusions The team will present the process for designing, developing, , implementing, and training with this new ISS Medical Kit System.

Hailey, Melinda J.↗

Informing New Concepts for UAS and Autonomous System Safety Management using Disaster Management and First Responder Scenarios

As emerging flight operations become more prevalent and increasingly automated and distributed, the capabilities for managing safety of vehicles and operations will also need to evolve. To address this challenge, the National Academies has envisioned an In-Time Aviation Safety Management System (IASMS) capability for a wide range of aviation operations including current commercial operations as well as new entrants envisioned with advanced air mobility (AAM). The suite of IASMS services, functions, and capabilities (SFCs) would be implemented in a federated approach and would address trends as well as individual operations. Through predictive modeling and data analysis, IASMS is envisioned to identify arising risks so that they can be mitigated, in-time, before a safety incident occurs. IASMS and its requisite set of SFCs must leverage a wide range of information to perform. To better understand these new needs, FSF worked with the aviation and humanitarian communities to develop and validate scenarios that include traditional aviation operations and UAS operations intermingled as they are deployed for disaster management and first responder (DMFR) situations. The three scenarios developed include: • Post Natural disaster response, such as a hurricane, involving multiple parties utilizing traditional aviation and UAS to support rescue operations, surveil damage, and locate survivors needing assistance. • Wildfire fighting in remote locations with traditional aircraft for transport and fire-retardant delivery combined with UAS for surveillance of fire locations as well as to track individual firefighter locations. • Medical Operations and AAM in Urban Environments including passenger-carrying helicopters and AAM vehicles, medical missions (such as transport of radio-pharmaceuticals), and other UAS delivery operations (such as the delivery of defibrillators). Each scenario was developed and validated by representatives with expertise in humanitarian operations, urban and rural emergency response, air traffic management, UAS operations, and traditional flight operations. The scenario definitions address roles and responsibilities of individual actors, the appropriate utilization of UAS, and the actions taken by those actors to appropriately manage risks associated with the mission and environment. The risks to aviation traffic and to people on the ground explored included potential risks arising from incompatibilities in calculating reference altitudes (eg, differing uses of AGL, MSL, barometric, or GPS-derived values), loss of command and control (C2) communications, rapid changes in weather and winds, and physical interference. For each risk, IASMS SFCs were postulated in the context of monitoring services, risk assessment capabilities, and identifying appropriate mitigation strategies. The identified SFC capabilities were envisioned from known services postulated for IASMS and for UTM. For these unique environments, IASMS SFCs are needed to address conditions such as hazardous payloads, micro-climates and urban canyons, and the need to keep uninvolved air traffic out of the area where DMFR operations are being conducted. The second phase of analysis focused on inferring the specific information needs and the SFCs for IASMS, utilizing a structure of 16 information classes to organize requirements. For each of the risks identified in the workshops, it was postulated what data sources would be necessary to monitor critical aspects of the risk (eg, surrounding air traffic, ground population, terrain, etc). to be directly measured as well as data that would be derived, which implies additional SFCs for different actors to understand what information would likely be exchanged between parties. For an IASMS to be effective, additional research is needed to develop the advanced algorithms that can address the increasingly autonomous and complex operations in differing environments and to develop means of identifying unknown risks. Looking at these scenarios highlighted a number of research issues. These include the ability to quickly "cordon off" airspace thru temporary flight restrictions (TFRs) or other means, developing clear definitions to enable automation-based algorithms for prioritizing operations, defining airspace density metrics, standardization of altitude reporting, and establishing a basis for safety data metrics definition and collection. This paper seeks to outline the development of an IASMS in the context of the DMFR scenarios and resulting demonstrations. Utilizing this contextual approach, NASA will generate recommendations for an assured safety framework for AAM operations that enables AAM operations to safely access the NAS.

In Time Aviation Safety Management System↗

A Conceptual Study for the Autonomous Direct Forming of Lunar Regolith into Flexlock (Trademark) Geomats for Lunar Surface Operations

We describe the conceptual method of an autonomously operable Direct Forming machine that would consume regolith or regolith slag to mold intimately, interlinked elements in a continuous process. The resulting product, one to three meter wide geomats, would be deployed over commonly traversed areas to isolate the astronauts and equipment from underlying dust. The porous geotextile would provide areas for dust settling, thereby mitigating dust impingement on astronaut suits or surface structures. Because of their self-supporting yet flexible structure, these geomats could be assembled into shields and buttresses to protect lunar habitants from radiation, forming a "flexoskeleton" from in situ materials.

Robertson, Luke B.↗

Datascope to Enable Earth Independent Medical Operations (EIMO)

BACKGROUND: NASA has amassed sixty years of knowledge and experience relevant to maintenance of crew health and performance in low earth orbit. The Apollo Program introduced the importance of ensuring progressively autonomous operational capability. Earth Independent Medical Operations (EIMO) will require a gradual shift in the balance of medical responsibility, management, and authority from terrestrial to space-based assets. Terrestrial assets will continue to be essential for pre-mission screening and planning in addition to maintenance of crew health and performance. However, new capabilities are needed to enable EIMO and the amount of data required to support these systems, and mitigate the impacts of data transmission delays and reduced bandwidth coupled with lack of cloud-like resources and on-board computing capacity that is currently unclear or operationally insufficient. OVERVIEW: The overall goal of EIMO is to develop artificial intelligence (AI)-based solutions to analyze crew health and performance data utilizing a clinical decision support system (CDSS) to provide crew medical officers (CMO) with the equivalent of real-time, on-board medical consults. The EIMO ecosystem is envisioned as a “system of systems” where embedded reference databases and real-time data streams from multiple input vectors continuously and seamlessly assess crew health and performance. EIMO will be designed to make recommendations to the CMO using multi-modal AI-based natural language processing and machine learning methods with interoperability to push/pull data within and between multiple vehicle and habitat architectures. DISCUSSION: Data flows and storage/retrieval capacity are severely constrained during space missions and the challenges will become even greater during exploration missions. Just as each past program from Mercury to the International Space Station (ISS) required rethinking the interaction between ground-based controllers and space-based crew, so too will future missions to the Moon and Mars. While the NASA High-Performance Spaceflight Computing Processor project aims to increase computational capacity by 100 times over current spaceflight computers, the projected deliverable still lags considerably behind what will be needed to enable an AI-driven CDSS. Restrictions in processing speed and data storage capacity, coupled with transmission bottlenecks and delays, necessitate definition and optimization of an integrated data architecture to enable a progressively autonomous medical capability.

Medical operations↗

Biocybernetic Closed-Loop System for Mitigating Hazardous States of Awareness

The past century of passenger flight has seen continuous improvement in aviation safety by the aerospace industry. However, while commercial aviation accident rates have continued to decline, human error-related incident and accident rates remain remarkably constant across all types of aviation (Shappell, et al., 2007). Unfortunately, this level of human error is unacceptable when considering projections for increased traffic volume (FAA, 2009), and is likely to yield more incidents and accidents unless a more complete understanding of operator error is achieved and remediations are implemented. One area of interest highlighted by researchers is Hazardous States of Awareness (HSAs) that can result from deficiencies in the design and inappropriate use of human-machine interfaces. Identifying and mitigating HSAs is critical for reducing operator errors. One promising approach uses psychophysiological measures which enable automated systems to adapt to the operator?s state and modify modes of operation to support optimal human performance (Scerbo, 2007). This paper will survey previous research and describe future directions for the application of psychophysiological measures of operators derived from cortical and autonomic assessment to perform real-time adaptive modulation of human-automation task mode mixes. The authors will present a summary of previous work done at NASA LaRC and Old Dominion University using a Psychophysiologically Adaptive System (PAS) in which the level of automation of the NASA Multi-Attribute Task Battery was modulated based on Engagement Indices derived from the users? electroencephalogram (Pope, Bogart, & Bartolome, 1995; for review see, Scerbo, Freeman, & Mikulka, 2003). Future theoretical and methodological directions for this type of closed-loop research will be discussed. Specifically, the capacity for this type of PAS to maintain effective operator state and to enable validation of candidate physiological indices will be described. Consideration will also be given to critical system characteristics (e.g., engagement indices, methods for invoking changes among system states, individual differences among users, etc.) that have been or still need to be studied. The potential of the PAS approach for interactive system design and prototyping will also be described. Examples of adaptive automation flight deck concepts in recent experiments will be highlighted and discussed.

Chad L Stephens↗

Evidence Report: Risk of Inadequate Human-Computer Interaction

Human-computer interaction (HCI) encompasses all the methods by which humans and computer-based systems communicate, share information, and accomplish tasks. When HCI is poorly designed, crews have difficulty entering, navigating, accessing, and understanding information. HCI has rarely been studied in an operational spaceflight context, and detailed performance data that would support evaluation of HCI have not been collected; thus, we draw much of our evidence from post-spaceflight crew comments, and from other safety-critical domains like ground-based power plants, and aviation. Additionally, there is a concern that any potential or real issues to date may have been masked by the fact that crews have near constant access to ground controllers, who monitor for errors, correct mistakes, and provide additional information needed to complete tasks. We do not know what types of HCI issues might arise without this "safety net". Exploration missions will test this concern, as crews may be operating autonomously due to communication delays and blackouts. Crew survival will be heavily dependent on available electronic information for just-in-time training, procedure execution, and vehicle or system maintenance; hence, the criticality of the Risk of Inadequate HCI. Future work must focus on identifying the most important contributing risk factors, evaluating their contribution to the overall risk, and developing appropriate mitigations. The Risk of Inadequate HCI includes eight core contributing factors based on the Human Factors Analysis and Classification System (HFACS): (1) Requirements, policies, and design processes, (2) Information resources and support, (3) Allocation of attention, (4) Cognitive overload, (5) Environmentally induced perceptual changes, (6) Misperception and misinterpretation of displayed information, (7) Spatial disorientation, and (8) Displays and controls.

Kritina Holden↗

A Human-In-The-Loop Simulation for Urban Air Mobility in the Terminal Area

In this presentation we propose a human-in-the-loop experiment to study the potential impact of human engagement in tactical mitigation of delay in terminal area air taxi operations. The air taxi operations being considered herein is an advanced air transportation concept called Urban Air Mobility (UAM). The UAM concept aims to support not only air taxi operations, but also package delivery and emergency response among other use cases. The key innovation over current air transportation lies with the introduction of autonomous aircraft and autonomous air traffic management systems. Development of the UAM system will include transitional midterm phases where some operational services will be provided by a mixture of automation and human actors. Midterm operations present a unique challenge, since the scope of responsibility of automated systems is largely undefined, suggesting the need for direct human participation with little to inform how much human intervention is necessary. Here we assume that traffic management responsibilities require coordination between human actors and automated systems and focus on arrival flows for midterm operations. In the proposed human-in-the-loop simulation, virtual UAM traffic is strategically deconflicted by a Provider of Services for UAM at departure, then tactically managed by a human at the arrival facility. Generated traffic consists of UAM participants flying in UAM exclusive airspace structures, thus isolated from traditional traffic. The human operator is tasked with managing spacing of arrival traffic and executing speed adjustments as deemed necessary. We propose the investigation of three levels of automation assistance: 1) no assistance; 2) spacing violation detection; 3) spacing violation detection and speed adjustment recommendations. Quantitative measures like throughput and delay are used to assess the human's capacity for accommodating airborne delays. Qualitative evaluations such as surveys and open-ended feedback are used to gain insight into human factors. These factors could introduce additional capacity constraints on traffic, independent of physical or technical constraints. Although findings for this study will not be reported as the study has not yet been executed, we conclude with potential outcomes informed by previous simulations in the literature and suggestions for the structure and procedures of midterm human-automation air traffic management.

UAM↗

Enhanced Formation Flying for the Earth Observing-1 (EO-1) New Millennium Mission

With scientific objectives for Earth observation programs becoming more ambitious and spacecraft becoming more autonomous, the need for new technical approaches on the feasibility of achieving and maintaining formations of spacecraft has come to the forefront. The trend to develop small low cost spacecraft has led many scientists to recognize the advantage of flying several spacecraft in formation, an example of which is shown in the figure below, to achieve the correlated instrument measurements formerly possible only by flying many instruments on a single large platform. Yet, formation flying imposes additional complications on orbit maintenance, especially when each spacecraft has its own orbit requirements. However, advances in automation proposed by GSFC Codes 550 and 712 allow more of the burden in maneuver planning and execution to be placed onboard the spacecraft, mitigating some of the associated operational concerns. The purpose of this analysis is to develop the fundamentals of formation flying mechanics, concepts for understanding the relative motion of free flying spacecraft, and an operational control theory for formation maintenance of the Earth Observing-1 (EO-l) spacecraft that is part of the New Millennium. Results of this development can be used to determine the appropriateness of formation flying for a particular case as well as the operational impacts. Applications to the Mission to Planet Earth (MTPE) Earth Observing System (EOS) and New Millennium (NM) were highly considered in analysis and applications. This paper presents the proposed methods for the guidance and control of the EO-1 spacecraft to formation fly with the Landsat-7 spacecraft using an autonomous closed loop three axis navigation control, GPS, and Cross link navigation support. Simulation results using various fidelity levels of modeling, algorithms developed and implemented in MATLAB, and autonomous 'fuzzy logic' control using AutoCon will be presented. The results of these analysis on the ability to meet mission and formation flying requirements will be presented.

Folta, David↗

SpaceCube v2.0 Space Flight Hybrid Reconfigurable Data Processing System

This paper details the design architecture, design methodology, and the advantages of the SpaceCube v2.0 high performance data processing system for space applications. The purpose in building the SpaceCube v2.0 system is to create a superior high performance, reconfigurable, hybrid data processing system that can be used in a multitude of applications including those that require a radiation hardened and reliable solution. The SpaceCube v2.0 system leverages seven years of board design, avionics systems design, and space flight application experiences. This paper shows how SpaceCube v2.0 solves the increasing computing demands of space data processing applications that cannot be attained with a standalone processor approach.The main objective during the design stage is to find a good system balance between power, size, reliability, cost, and data processing capability. These design variables directly impact each other, and it is important to understand how to achieve a suitable balance. This paper will detail how these critical design factors were managed including the construction of an Engineering Model for an experiment on the International Space Station to test out design concepts. We will describe the designs for the processor card, power card, backplane, and a mission unique interface card. The mechanical design for the box will also be detailed since it is critical in meeting the stringent thermal and structural requirements imposed by the processing system. In addition, the mechanical design uses advanced thermal conduction techniques to solve the internal thermal challenges.The SpaceCube v2.0 processing system is based on an extended version of the 3U cPCI standard form factor where each card is 190mm x 100mm in size The typical power draw of the processor card is 8 to 10W and scales with application complexity. The SpaceCube v2.0 data processing card features two Xilinx Virtex-5 QV Field Programmable Gate Arrays (FPGA), eight memory modules, a monitor FPGA with analog monitoring, Ethernet, configurable interconnect to the Xilinx FPGAs including gigabit transceivers, and the necessary voltage regulation. The processor board uses a back-to-back design methodology for common parts that maximizes the board real estate available. This paper will show how to meet the IPC 6012B Class 3A standard with a 22-layer board that has two column grid array devices with 1.0mm pitch. All layout trades such as stack-up options, via selection, and FPGA signal breakout will be discussed with feature size results. The overall board design process will be discussed including parts selection, circuit design, proper signal termination, layout placement and route planning, signal integrity design and verification, and power integrity results. The radiation mitigation techniques will also be detailed including configuration scrubbing options, Xilinx circuit mitigation and FPGA functional monitoring, and memory protection.Finally, this paper will describe how this system is being used to solve the extreme challenges of a robotic satellite servicing mission where typical space-rated processors are not sufficient enough to meet the intensive data processing requirements. The SpaceCube v2.0 is the main payload control computer and is required to control critical subsystems such as autonomous rendezvous and docking using a suite of vision sensors and object avoidance when controlling two robotic arms.

Xilinx FPGA↗