Search NASA⌕ Search

SEARCH · Search NASA

Results for “Safety Design Approach”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 145 records · Page 8

Assessment and Control of Spacecraft Charging Risks on the International Space Station

The International Space Station (ISS) operates in the F2 region of Earth's ionosphere, orbiting at altitudes ranging from 350 to 450 km at an inclination of 51.6 degrees. The relatively dense, cool F2 ionospheric plasma suppresses surface charging processes much of the time, and the flux of relativistic electrons is low enough to preclude deep dielectric charging processes. The most important spacecraft charging processes in the ISS orbital environment are: 1) ISS electrical power system interactions with the F2 plasma, 2) magnetic induction processes resulting from flight through the geomagnetic field and, 3) charging processes that result from interaction with auroral electrons at high latitude. Recently, the continuing review and evaluation of putative ISS charging hazards required by the ISS Program Office revealed that ISS charging could produce an electrical shock hazard to the ISS crew during extravehicular activity (EVA). ISS charging risks are being evaluated in an ongoing measurement and analysis campaign. The results of ISS charging measurements are combined with a recently developed model of ISS charging (the Plasma Interaction Model) and an exhaustive analysis of historical ionospheric variability data (ISS Ionospheric Specification) to evaluate ISS charging risks using Probabilistic Risk Assessment (PRA) methods. The PRA combines estimates of the frequency of occurrence and severity of the charging hazards with estimates of the reliability of various hazard controls systems, as required by NASA s safety and risk management programs, to enable design and selection of a hazard control approach that minimizes overall programmatic and personnel risk. The PRA provides a quantitative methodology for incorporating the results of the ISS charging measurement and analysis campaigns into the necessary hazard reports, EVA procedures, and ISS flight rules required for operating ISS in a safe and productive manner.

Koontz, Steve↗

Probabilistic Risk-Based Approach to Aeropropulsion System Assessment Developed

In an era of shrinking development budgets and resources, where there is also an emphasis on reducing the product development cycle, the role of system assessment, performed in the early stages of an engine development program, becomes very critical to the successful development of new aeropropulsion systems. A reliable system assessment not only helps to identify the best propulsion system concept among several candidates, it can also identify which technologies are worth pursuing. This is particularly important for advanced aeropropulsion technology development programs, which require an enormous amount of resources. In the current practice of deterministic, or point-design, approaches, the uncertainties of design variables are either unaccounted for or accounted for by safety factors. This could often result in an assessment with unknown and unquantifiable reliability. Consequently, it would fail to provide additional insight into the risks associated with the new technologies, which are often needed by decisionmakers to determine the feasibility and return-on-investment of a new aircraft engine.

Tong, Michael T.↗

Safety Verification of the Small Aircraft Transportation System Concept of Operations

A critical factor in the adoption of any new aeronautical technology or concept of operation is safety. Traditionally, safety is accomplished through a rigorous process that involves human factors, low and high fidelity simulations, and flight experiments. As this process is usually performed on final products or functional prototypes, concept modifications resulting from this process are very expensive to implement. This paper describe an approach to system safety that can take place at early stages of a concept design. It is based on a set of mathematical techniques and tools known as formal methods. In contrast to testing and simulation, formal methods provide the capability of exhaustive state exploration analysis. We present the safety analysis and verification performed for the Small Aircraft Transportation System (SATS) Concept of Operations (ConOps). The concept of operations is modeled using discrete and hybrid mathematical models. These models are then analyzed using formal methods. The objective of the analysis is to show, in a mathematical framework, that the concept of operation complies with a set of safety requirements. It is also shown that the ConOps has some desirable characteristic such as liveness and absence of dead-lock. The analysis and verification is performed in the Prototype Verification System (PVS), which is a computer based specification language and a theorem proving assistant.

Carreno, Victor↗

Achieving the Proper Balance Between Crew and Public Safety

A paramount objective of all human-rated launch and reentry vehicle developers is to ensure that the risks to both the crew onboard and the public are minimized within reasonable cost, schedule, and technical constraints. Past experience has shown that proper attention to range safety requirements necessary to ensure public safety must be given early in the design phase to avoid additional operational complexities or threats to the safety of people onboard, and the design engineers must give these requirements the same consideration as crew safety requirements. For human spaceflight, the primary purpose and operational concept for any flight safety system is to protect the public while maximizing the likelihood of crew survival. This paper will outline the policy considerations, technical issues, and operational impacts regarding launch and reentry vehicle failure scenarios where crew and public safety are intertwined and thus addressed optimally in an integrated manner. An overview of existing range and crew safety policy requirements will be presented. Application of these requirements and lessons learned from both the Space Shuttle and Constellation Programs will also be discussed. Using these past programs as examples, the paper will detail operational, design, and analysis approaches to mitigate and balance the risks to people onboard and in the public. Manned vehicle perspectives from the Federal Aviation Administration (FAA) and Air Force organizations that oversee public safety will be summarized as well. Finally, the paper will emphasize the need to factor policy, operational, and analysis considerations into the early design trades of new vehicles to help ensure that both crew and public safety are maximized to the greatest extent possible.

Gowan, John↗

Towards Designing Graceful Degradation into Trajectory Based Operations: A Human-Systems Integration Approach

One of the most fundamental changes to the air traffic management system in NextGen is the concept of trajectory based operations (TBO). With the introduction of such change, system safety and resilience is a critical concern, in particular, the ability of systems to gracefully degrade. In order to design graceful degradation into a TBO envrionment, knowledge of the potential causes of degradation, and appropriate solutions, is required. In addition, previous research has predominantly explored the technological contribution to graceful degradation, frequently neglecting to consider the role of the human operator, specifically, air traffic controllers (ATCOs). This is out of step with real-world operations, and potentially limits an ecologically valid understanding of achieving graceful degradation in an air traffic control (ATC) environment. The following literature review aims to identify and summarize the literature to date on the potential causes of degradation in ATC and the solutions that may be applied within a TBO context, with a specific focus on the contribution of the air traffic controller. A framework of graceful degradation, developed from the literature, is presented. It is argued that in order to achieve graceful degradation within TBO, a human-system integration approach must be applied.

human-system integration↗

Towards Designing Graceful Degradation into Trajectory Based Operations: A Human-Machine System Integration Approach

One of the most fundamental changes to the air traffic management system in NextGen is the concept of trajectory based operations (TBO). With the introduction of such change, system safety and resilience is a critical concern, in particular, the ability of systems to gracefully degrade. In order to design graceful degradation into a TBO envrionment, knowledge of the potential causes of degradation, and appropriate solutions, is required. In addition, previous research has predominantly explored the technological contribution to graceful degradation, frequently neglecting to consider the role of the human operator, specifically, air traffic controllers (ATCOs). This is out of step with real-world operations, and potentially limits an ecologically valid understanding of achieving graceful degradation in an air traffic control (ATC) environment. The following literature review aims to identify and summarize the literature to date on the potential causes of degradation in ATC and the solutions that may be applied within a TBO context, with a specific focus on the contribution of the air traffic controller. A framework of graceful degradation, developed from the literature, is presented. It is argued that in order to achieve graceful degradation within TBO, a human-system integration approach must be applied.

human-system integration↗

Towards Designing Graceful Degradation into Trajectory Based Operations: A Human-Machine System Integration Approach

One of the most fundamental changes to the air traffic management system in NextGen is the concept of trajectory based operations (TBO). With the introduction of such change, system safety and resilience is a critical concern, in particular, the ability of systems to gracefully degrade. In order to design graceful degradation into a TBO envrionment, knowledge of the potential causes of degradation, and appropriate solutions, is required. In addition, previous research has predominantly explored the technological contribution to graceful degradation, frequently neglecting to consider the role of the human operator, specifically, air traffic controllers (ATCOs). This is out of step with real-world operations, and potentially limits an ecologically valid understanding of achieving graceful degradation in an air traffic control (ATC) environment. The following literature review aims to identify and summarize the literature to date on the potential causes of degradation in ATC and the solutions that may be applied within a TBO context, with a specific focus on the contribution of the air traffic controller. A framework of graceful degradation, developed from the literature, is presented. It is argued that in order to achieve graceful degradation within TBO, a human-system integration approach must be applied.

trajectory based operations↗

Design and selection of bypass diodes

Topics concerning the design and use of bypass diodes are investigated. Energy output, service life, safety, cell mounting approach, thermal capability, and cost analysis are also considered.

Shepard, N. F., Jr.↗

Advanced EMU electrochemically regenerable CO2 and moisture absorber module breadboard

The applicability of the Electrochemically Regenerable Carbon Dioxide and Moisture Absorption Technology to the advanced extravehicular mobility unit was demonstrated by designing, fabricating, and testing a breadboard Absorber Module and an Electrochemical Regenerator. Test results indicated that the absorber module meets or exceeds the carbon dioxide removal requirements specified for the design and can meet the moisture removal requirement when proper cooling is provided. CO2 concentration in the vent gas stream was reduced from 0.52 to 0.027 kPa (3.9 to 0.20 mm Hg) for the full five hour test period. Vent gas dew point was reduced from inlet values of 294 K (69 F) to 278 K (41 F) at the outlet. The regeneration of expended absorbent was achieved by the electrochemical method employed in the testing. An absorbent bed using microporous hydrophobic membrane sheets with circulating absorbent is shown to be the best approach to the design of an Absorber Module based on sizing and performance. Absorber Module safety design, comparison of various absorbents and their characteristics, moisture absorption and cooling study and subsystem design and operation time-lining study were also performed.

Lee, M. C.↗

Five-Segment Reusable Solid Rocket Booster Upgrade

The Five Segment Reusable Solid Rocket Booster (RSRB) feasibility status is presented in viewgraph form. The Five Segment Booster (FSB) objective is to provide a low cost, low risk approach to increase reliability and safety of the Shuttle system. Topics include: booster upgrade requirements; design summary; reliability issues; booster trajectories; launch site assessment; and enhanced abort modes.

Sauvageau, Don↗

Composites for Advanced Drive Systems, A Systems Analysis-Revolutionary Vertical Lift Technology (RVLT)

Rotorcraft propulsion systems are continually looking to improve power density; that is reducing weight and increasing power throughput. In order to advance rotorcraft propulsion system technology, NASA Glenn Research Center (NGRC) contracted Boeing Vertical Lift (Contract #NNA15AB12B, Task Order NNA16BE07T) to perform system level benefit assessments for incorporation of composite materials into rotorcraft transmission gear and shaft systems, in the rotating frame. In general, the environment inside a typical rotorcraft transmission is aggressive for typical composite materials. Design challenges in the rotating frame and related safety risks must be understood and accounted for in the design. Boeing developed a technical approach that evaluated a relatively large population of rotorcraft main transmissions. This technical approach took rotorcraft from various size classes and configurations and applied parametric weight estimating principles to assess the performance impact of composite hybrid technologies inside transmissions, in the rotating frame. Parametric weight estimates showed that composite hybrid technologies account for an average 9% weight savings over the baseline transmissions. More weight savings may be observed when accounting for quantity of transmissions in an aircraft configuration and benefits to airframe, landing gear, and fuel systems. A weight reduction of 595 lbs was calculated for NASA's Large Civil Tilt Rotor (LCTR2) by utilizing composite hybrid components inside the Prop-Rotor Transmission in the rotating frame and accounting for design changes to the airframe, landing gear, and fuel system. In order to develop composite hybrid technologies, sub-scale and full-scale testing should continue, building on the work that NGRC has begun. Design and testing efforts should focus on technical challenges, such as joint and attachment interfaces, temperature effects, inspection procedures, and fault detection. It is recommended to address technical challenges with targeted research and development efforts, conducted at relevant scale, prior to incorporating composite hybrid technologies within the rotating frame of helicopter transmissions.

Darmstadt, Patrick R.↗

Developing Controlled Conductive Boundaries for JWST Cryogenic Testing

In 2017, the James Webb Space Telescope (JWST) underwent functional testing and optical metrology verification of the combined Optical Telescope Element and Integrated Science Instrument Module (OTIS) under cryogenic vacuum conditions in Chamber A at the Johnson Space Center. Maintaining flight-like thermal boundary conditions was a critical requirement for optical testing and required unique and challenging Ground Support Equipment (GSE) design solutions. Two such GSE systems, the Integrated Science Instrument Module (ISIM) Precool Straps and the Hardpoint Struts were direct conduction interfaces to the flight hardware. Hardware safety during cooldown required detailed design of their conductivity, and thermal balance testing required "zero-Q" (0-Q) heater implementation to bring the heat flow to zero, thereby cutting off these non-flight conductive links after operating temperatures were achieved. This paper describes the design considerations and approach implemented to achieve the required flight hardware cool down and return to ambient conditions, ensure flight hardware safety, and minimize the non-flight-like heat flows to or from the observatory during cryo-stable testing.

Cooke, D.↗

Developing Controlled Conductive Boundaries for JWST Cryogenic Testing

In 2017, the James Webb Space Telescope (JWST) underwent functional testing and optical metrology verification of the combined Optical Telescope Element and Integrated Science Instrument Module (OTIS) under cryogenic vacuum conditions in Chamber A at the Johnson Space Center. Maintaining flight-like thermal boundary conditions was a critical requirement for optical testing and required unique and challenging Ground Support Equipment (GSE) design solutions. Two such GSE systems, the Integrated Science Instrument Module (ISIM) Precool Straps and the Hardpoint Struts were direct conduction interfaces to the flight hardware. Hardware safety during cooldown required detailed design of their conductivity, and thermal balance testing required zero-Q (0-Q) heater implementation to bring the heat flow to zero, thereby cutting off these non-flight conductive links after operating temperatures were achieved. This paper describes the design considerations and approach implemented to achieve the required flight hardware cool down and return to ambient conditions, ensure flight hardware safety, and minimize the non-flight-like heat flows to or from the observatory during cryo-stable testing.

Cooke, Dwight A.↗

Practical Application of PRA as an Integrated Design Tool for Space Systems

This paper presents the application of the first comprehensive Probabilistic Risk Assessment (PRA) during the design phase of a joint NASA/NOAA weather satellite program, Geostationary Operational Environmental Satellite Series R (GOES-R). GOES-R is the next generation weather satellite primarily to help understand the weather and help save human lives. PRA has been used at NASA for Human Space Flight for many years. PRA was initially adopted and implemented in the operational phase of manned space flight programs and more recently for the next generation human space systems. Since its first use at NASA, PRA has become recognized throughout the Agency as a method of assessing complex mission risks as part of an overall approach to assuring safety and mission success throughout project lifecycles. PRA is now included as a requirement during the design phase of both NASA next generation manned space vehicles as well as for high priority robotic missions. The influence of PRA on GOES-R design and operation concepts are discussed in detail. The GOES-R PRA is unique at NASA for its early implementation. It also represents a pioneering effort to integrate risks from both Spacecraft (SC) and Ground Segment (GS) to fully assess the probability of achieving mission objectives. PRA analysts were actively involved in system engineering and design engineering to ensure that a comprehensive set of technical risks were correctly identified and properly understood from a design and operations perspective. The analysis included an assessment of SC hardware and software, SC fault management system, GS hardware and software, common cause failures, human error, natural hazards, solar weather and infrastructure (such as network and telecommunications failures, fire). PRA findings directly resulted in design changes to reduce SC risk from micro-meteoroids. PRA results also led to design changes in several SC subsystems, e.g. propulsion, guidance, navigation and control (GNC), communications, mechanisms, and command and data handling (C&DH). The fault tree approach assisted in the development of the fault management system design. Human error analysis, which examined human response to failure, indicated areas where automation could reduce the overall probability of gaps in operation by half. In addition, the PRA brought to light many potential root causes of system disruptions, including earthquakes, inclement weather, solar storms, blackouts and other extreme conditions not considered in the typical reliability and availability analyses. Ultimately the PRA served to identify potential failures that, when mitigated, resulted in a more robust design, as well as to influence the program's concept of operations. The early and active integration of PRA with system and design engineering provided a well-managed approach for risk assessment that increased reliability and availability, optimized lifecyc1e costs, and unified the SC and GS developments.

Kalia, Prince↗

Reliability and Maintainability Engineering - A Major Driver for Safety and Affordability

The United States National Aeronautics and Space Administration (NASA) is in the midst of an effort to design and build a safe and affordable heavy lift vehicle to go to the moon and beyond. To achieve that, NASA is seeking more innovative and efficient approaches to reduce cost while maintaining an acceptable level of safety and mission success. One area that has the potential to contribute significantly to achieving NASA safety and affordability goals is Reliability and Maintainability (R&M) engineering. Inadequate reliability or failure of critical safety items may directly jeopardize the safety of the user(s) and result in a loss of life. Inadequate reliability of equipment may directly jeopardize mission success. Systems designed to be more reliable (fewer failures) and maintainable (fewer resources needed) can lower the total life cycle cost. The Department of Defense (DOD) and industry experience has shown that optimized and adequate levels of R&M are critical for achieving a high level of safety and mission success, and low sustainment cost. Also, lessons learned from the Space Shuttle program clearly demonstrated the importance of R&M engineering in designing and operating safe and affordable launch systems. The Challenger and Columbia accidents are examples of the severe impact of design unreliability and process induced failures on system safety and mission success. These accidents demonstrated the criticality of reliability engineering in understanding component failure mechanisms and integrated system failures across the system elements interfaces. Experience from the shuttle program also shows that insufficient Reliability, Maintainability, and Supportability (RMS) engineering analyses upfront in the design phase can significantly increase the sustainment cost and, thereby, the total life cycle cost. Emphasis on RMS during the design phase is critical for identifying the design features and characteristics needed for time efficient processing, improved operational availability, and optimized maintenance and logistic support infrastructure. This paper discusses the role of R&M in a program acquisition phase and the potential impact of R&M on safety, mission success, operational availability, and affordability. This includes discussion of the R&M elements that need to be addressed and the R&M analyses that need to be performed in order to support a safe and affordable system design. The paper also provides some lessons learned from the Space Shuttle program on the impact of R&M on safety and affordability.

Safie, Fayssal M.↗

Airframe Design and Integration

The objectives of the project this viewgraph presentation summarizes include the following: (1) Decompose operational, safety, and cost requirements into a comprehensive and consistent set of design criteria for different structural and material concepts for Reusable Launch Vehicles (RLVs); (2) Develop compliance methods to ensure that different structural and material concepts are assessed at a consistent and adequate level of fidelity and safety; (3) Develop and assess weight reduction potential of integrated airframe concepts for RLVs, e.g., Thermal Protection System (TPS)/TPS Support/Cryogenic Tank System; (4) Compare performance and weight of various airframe structural and material concepts and structural arrangements and identify technology development needs; and (5) Develop high fidelity parametric models that include airframe structural interactions and major design drivers. The approaches taken to complete these objectives include the definition of vehicle requirements, airframe structural design requirements, load conditions, factors of safety, and integrated concepts.

Scotti, Stephen↗

A review of wiring system safety in space power systems

Wiring system failures have resulted from arc propagation in the wiring harnesses of current aerospace vehicles. These failures occur when the insulation becomes conductive upon the initiation of an arc. In some cases, the conductive path of the carbon arc track displays a high enough resistance such that the current is limited, and therefore may be difficult to detect using conventional circuit protection. Often, such wiring failures are not simply the result of insulation failure, but are due to a combination of wiring system factors. Inadequate circuit protection, unforgiving system designs, and careless maintenance procedures can contribute to a wiring system failure. This paper approaches the problem with respect to the overall wiring system, in order to determine what steps can be taken to improve the reliability, maintainability, and safety of space power systems. Power system technologies, system designs, and maintenance procedures which have led to past wiring system failures will be discussed. New technologies, design processes, and management techniques which may lead to improved wiring system safety will be introduced.

Stavnes, Mark W.↗

Interchangeable Tools for Remote Manipulators

Report presents concepts and specifications for set of interchangeable end-effector tools used on remotely operated manipulator to work on satellites in orbit. Tools make urgent repairs, do routine maintenance, transfer fluids, construct and assemble satellites, and deploy and retract appendages. With modifications, tool concepts and systematic approach to tool design applicable to such terrestrial uses as industrial robots, manually operated tools, and safety equipment. Report discusses concept for tool-storage system that holds tools securely when not used but kept accessible to manipulator.

Cody, J. C.↗