Search NASA⌕ Search

SEARCH · Search NASA

Results for “criticality safety evaluation”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 145 records · Page 8

Novel Concepts for Radiation Shielding Materials

It is critical that safety factors be maximized with respect to long duration, extraterrestrial space flight. Any significant improvement in radiation protection will be critical in ensuring the safety of crew and hardware on such missions. The project goal is to study novel concepts for radiation shielding materials that can be used for long-duration space missions. As part of this project we will investigate the use of thin films for the evaluation of a containment system that can retain liquid hydrogen and provide the necessary hydrogen density for effective shielding.

Technology Portfolio System↗

NASA Engineering and Safety Center Technical Bulletin No 12-01: Simulation Framework for Rapid Entry, Descent, and Landing Analysis

The NASA Engineering and Safety Center has archived a number of key historic Entry, Descent, and Landing (EDL) simulation models and developed several new models to enhance the capability of the Agency to evaluate a wide range of EDL systems for system analysis studies, preliminary design, mission development and execution, and time-critical assessments. The simulation models developed in this activity can be used to help define the required architectures and investment strategies for future robotic and human exploration missions.

Simulation Framework↗

Battery Separator Characterization and Evaluation Procedures for NASA's Advanced Lithium-Ion Batteries

To address the future performance and safety requirements for the electrical energy storage technologies that will enhance and enable future NASA manned aerospace missions, advanced rechargeable, lithium-ion battery technology development is being pursued within the scope of the NASA Exploration Technology Development Program s (ETDP's) Energy Storage Project. A critical cell-level component of a lithium-ion battery which significantly impacts both overall electrochemical performance and safety is the porous separator that is sandwiched between the two active cell electrodes. To support the selection of the optimal cell separator material(s) for the advanced battery technology and chemistries under development, laboratory characterization and screening procedures were established to assess and compare separator material-level attributes and associated separator performance characteristics.

Baldwin, Richard S.↗

Modified Advanced Crew Escape Suit Intravehicular Activity Suit for Extravehicular Activity Mobility Evaluations

The use of an intravehicular activity (IVA) suit for a spacewalk or extravehicular activity (EVA) was evaluated for mobility and usability in the Neutral Buoyancy Laboratory (NBL) environment at the Sonny Carter Training Facility near NASA Johnson Space Center in Houston, Texas. The Space Shuttle Advanced Crew Escape Suit was modified to integrate with the Orion spacecraft. The first several missions of the Orion Multi-Purpose Crew Vehicle will not have mass available to carry an EVA-specific suit; therefore, any EVA required will have to be performed by the Modified Advanced Crew Escape Suit (MACES). Since the MACES was not designed with EVA in mind, it was unknown what mobility the suit would be able to provide for an EVA or whether a person could perform useful tasks for an extended time inside the pressurized suit. The suit was evaluated in multiple NBL runs by a variety of subjects, including crewmembers with significant EVA experience. Various functional mobility tasks performed included: translation, body positioning, tool carrying, body stabilization, equipment handling, and tool usage. Hardware configurations included with and without Thermal Micrometeoroid Garment, suit with IVA gloves and suit with EVA gloves. Most tasks were completed on International Space Station mock-ups with existing EVA tools. Some limited tasks were completed with prototype tools on a simulated rocky surface. Major findings include: demonstrating the ability to weigh-out the suit, understanding the need to have subjects perform multiple runs prior to getting feedback, determining critical sizing factors, and need for adjusting suit work envelope. Early testing demonstrated the feasibility of EVA's limited duration and limited scope. Further testing is required with more flight-like tasking and constraints to validate these early results. If the suit is used for EVA, it will require mission-specific modifications for umbilical management or Primary Life Support System integration, safety tether attachment, and tool interfaces. These evaluations are continuing through calendar year 2014.

Watson, Richard D.↗

Usability Evaluation of a Flight-Deck Airflow Hazard Visualization System

Many aircraft accidents each year are caused by encounters with unseen airflow hazards near the ground, such as vortices, downdrafts, low level wind shear, microbursts, or turbulence from surrounding vegetation or structures near the landing site. These hazards can be dangerous even to airliners; there have been hundreds of fatalities in the United States in the last two decades attributable to airliner encounters with microbursts and low level wind shear alone. However, helicopters are especially vulnerable to airflow hazards because they often have to operate in confined spaces and under operationally stressful conditions (such as emergency search and rescue, military or shipboard operations). Providing helicopter pilots with an augmented-reality display visualizing local airflow hazards may be of significant benefit. However, the form such a visualization might take, and whether it does indeed provide a benefit, had not been studied before our experiment. We recruited experienced military and civilian helicopter pilots for a preliminary usability study to evaluate a prototype augmented-reality visualization system. The study had two goals: first, to assess the efficacy of presenting airflow data in flight; and second, to obtain expert feedback on sample presentations of hazard indicators to refine our design choices. The study addressed the optimal way to provide critical safety information to the pilot, what level of detail to provide, whether to display specific aerodynamic causes or potential effects only, and how to safely and effectively shift the locus of attention during a high-workload task. Three-dimensional visual cues, with varying shape, color, transparency, texture, depth cueing, and use of motion, depicting regions of hazardous airflow, were developed and presented to the pilots. The study results indicated that such a visualization system could be of significant value in improving safety during critical takeoff and landing operations, and also gave clear indications of the best design choices in producing the hazard visual cues.

Aragon, Cecilia R.↗

Cascade Distillation System Design for Safety and Mission Assurance

Per the NASA Human Health, Life Support and Habitation System Technology Area 06 report "crewed missions venturing beyond Low-Earth Orbit (LEO) will require technologies with improved reliability, reduced mass, self-sufficiency, and minimal logistical needs as an emergency or quick-return option will not be feasible." To meet this need, the development team of the second generation Cascade Distillation System (CDS 2.0) opted a development approach that explicitely incorporate consideration of safety, mission assurance, and autonomy. The CDS 2.0 prelimnary design focused on establishing a functional baseline that meets the CDS core capabilities and performance. The critical design phase is now focused on incorporating features through a deliberative process of establishing the systems failure modes and effects, identifying mitigative strategies, and evaluating the merit of the proposed actions through analysis and test. This paper details results of this effort on the CDS 2.0 design.

Sargusingh, Miriam J.↗

Cascade Distillation System Design for Safety and Mission Assurance

Per the NASA Human Health, Life Support and Habitation System Technology Area 06 report "crewed missions venturing beyond Low-Earth Orbit (LEO) will require technologies with improved reliability, reduced mass, self-sufficiency, and minimal logistical needs as an emergency or quick-return option will not be feasible".1 To meet this need, the development team of the second generation Cascade Distillation System (CDS 2.0) chose a development approach that explicitly incorporate consideration of safety, mission assurance, and autonomy. The CDS 2.0 preliminary design focused on establishing a functional baseline that meets the CDS core capabilities and performance. The critical design phase is now focused on incorporating features through a deliberative process of establishing the systems failure modes and effects, identifying mitigation strategies, and evaluating the merit of the proposed actions through analysis and test. This paper details results of this effort on the CDS 2.0 design.

Sarguisingh, Miriam↗

Machine Learning Based Path Planning for Improved Rover Navigation

Enhanced AutoNav (ENav), the baseline surface navigation software for NASA’s Perseverance rover, sorts a list of candidate paths for the rover to traverse, then uses the Approximate Clearance Evaluation (ACE) algorithm to evaluate whether the most highly ranked paths are safe. ACE is crucial for maintaining the safety of the rover, but is computationally expensive. If the most promising candidates in the list of paths are all found to be infeasible, ENav must continue to search the list and run time-consuming ACE evaluations until a feasible path is found. In this paper, we present two heuristics that, given a terrain heightmap around the rover, produce cost estimates that more effectively rank the candidate paths before ACE evaluation. The first heuristic uses Sobel operators and convolution to incorporate the cost of traversing high-gradient terrain. The second heuristic uses a machine learning (ML) model to predict areas that will be deemed untraversable by ACE. We used physics simulations to collect training data for the ML model and to run Monte Carlo trials to quantify navigation performance across a variety of terrains with various slopes and rock distributions. Compared to ENav's baseline performance, integrating the heuristics can lead to a significant reduction in ACE evaluations and average computation time per planning cycle, increase path efficiency, and maintain or improve the rate of successful traverses. This strategy of targeting specific bottlenecks with ML while maintaining the original ACE safety checks provides an example of how ML can be infused into planetary science missions and other safety-critical software.

Yue, Yisong↗

Crew Exploration Vehicle Ascent Abort Coverage Analysis

An important element in the design of NASA's Crew Exploration Vehicle (CEV) is the consideration given to crew safety during various ascent phase failure scenarios. To help ensure crew safety during this critical and dynamic flight phase, the CEV requirements specify that an abort capability must be continuously available from lift-off through orbit insertion. To address this requirement, various CEV ascent abort modes are analyzed using 3-DOF (Degree Of Freedom) and 6-DOF simulations. The analysis involves an evaluation of the feasibility and survivability of each abort mode and an assessment of the abort mode coverage using the current baseline vehicle design. Factors such as abort system performance, crew load limits, thermal environments, crew recovery, and vehicle element disposal are investigated to determine if the current vehicle requirements are appropriate and achievable. Sensitivity studies and design trades are also completed so that more informed decisions can be made regarding the vehicle design. An overview of the CEV ascent abort modes is presented along with the driving requirements for abort scenarios. The results of the analysis completed as part of the requirements validation process are then discussed. Finally, the conclusions of the study are presented, and future analysis tasks are recommended.

Abadie, Marc J.↗

Development of Critical Profilometers to Meet Current and Future NASA Composite Overwrapped Pressure Vessel (COPV) Inspection Needs

This project is part of a multi-center effort to develop and validate critical NDE techniques which can be implemented into current and future NASA spacecraft COPV manufacturing processes. After decades of COPV development, manufacturing variance is still high and has necessitated higher safety factors and additional mass to be flown on spacecraft (reducing overall performance). Additionally, the NASA Engineering and Safety Center (NESC) indicated that nondestructive evaluation (NDE) was not adequately implemented during Shuttle and International Space Station (ISS) COPV manufacturing and provisions were not made for on-going structural integrity and health checks during the various spacecraft programs. This project helps to provide additional data needed to help address these issues. This project seeks to develop and install internal and external laser profilometers at COPV manufacturing facilities to provide data needed to improve COPV quality and consistency. This project also investigates other scanning techniques that will enhance the system to more completely meet manufacturing needs, thus transforming the profilometer into what has been termed the "Universal Manufacturing COPV Scanner".

Saulsberry, Regor↗

MARGInS: Model-Based Analysis of Realizable Goals in Systems

Under NASAs Constellation effort, the Exploration Technology Development Program funded research toward a system validation capability that applied machine learning and test-case generation techniques to the analysis of black-box system behavior. The behavior analysis capability scaled to spaces of hundreds of input parameters and tens of thousands of test cases. Aerospace systems at the vehicle level, especially those systems which contain some level of autonomy, are best described by hybrid and non-linear mathematics. Even simplified models of such systems need parameter dimensionalities in the hundreds or thousands of parameters in order to capture sufficient fidelity. The System Safety Assessments (such as those described in the SAE ARP 4761A Safety Assessment Process guidelines) for these systems are prone to errorinteractions between the vehicles subsystems are complex, and can display emergent behaviors. NASA captured this new analysis in the Model-based Analysis of Realizable Goals in Systems (MARGInS) tool and applied it to the Pad Abort 1 (PA-1) simulation as part of the independent validation and verification cycle before the PA-1 flight test in May of 2010. MARGInS evaluated the adherence of the high-fidelity simulation to its requirements, and deter- mined the margins to failure from the expected nominal input conditions. Following the PA-1 test, the capabilities within the MARGInS framework have been extended with sophisticated statistical and white-box test case generation techniques and applied to other NASA missions. The frame- work now includes a critical factors analysis that was applied to NASAs Orion simulation and design. NASAs Aeronautics Research Mission Directorate (ARMD) leveraged the existing MARGInS framework for work on aviation safety for civil transport vehicles and for research on autonomy issues. The NASA ARMD effort created a time series output prediction capability that has been used to characterize trajectories for a plane with an adaptive control system, and a safety boundary detection capability that has been applied to an air traffic control concept of operation for the Federal Aviation Administration. The statistical and machine- learning based techniques within MARGInS have been successfully combined with concolic execution to improve the coverage of a critical unit by driving system-level inputs. The use case driving the concolic execution and MARGInS integration was inspired by the Air France 447 disaster in which the loss of a critical functionality (the airspeed calculation from the pitot tubes) led to loss of the entire plane with the people aboard. To illustrate capabilities and limitations, we will highlight the analyses for the applications listed above. We will then discuss the future plans for MARGInS and its interfaces with other tools.

Validation↗

Satellite Broadcast of Graphical Weather Data Flight Tested

NASA Glenn Research Center at Lewis Field's aviation Weather Information Communications (WINCOMM) and NASA Langley Research Center's Aviation Weather Information (AWIN) programs collaborated in a flight test and evaluation of a worldwide weather data-link capability using satellites. This successful flight testing moves NASA closer to its goal of developing advanced communications and information technologies to enable high-quality and timely dissemination of aviation weather information to all relevant users on the aviation information network. Recognized as a major contributing factor in aviation accidents and incidents, weather contributes directly or indirectly to nearly 80 percent of fatal general aviation (small private aircraft) accidents. In 1997, the Aeronautics Safety Investment Strategy Team s weather team produced a prioritized list of investment areas under weather accident prevention. Weather data dissemination is the most critical and highest ranked priority on the list. NASA's Aviation Safety Program founded the Aviation Weather Information initiative to focus efforts on significantly reducing the number of weather-related aviation fatalities. Access to accurate and timely weather data could contribute to a major reduction of weather-related incidents and accidents. However, a cost-effective solution has eluded most general aviation pilots because of the high cost of onboard weather radar equipment. Rockwell Collins, through a contract with NASA and in cooperation with WorldSpace Corporation, successfully completed ground and flight testing of a receiver and antenna in Johannesburg, South Africa. This NASA/Rockwell Collins project is an evaluation of worldwide weather data-link capability using transmissions from the Satellite Digital Audio Radio Services (S DARS) AfriStar satellite. Owned and operated by WorldSpace, AfriStar is a geostationary satellite that broadcasts commercial digital audio services to stationary and mobile platforms. S DARS satellites are the most powerful communications satellites produced to date, allowing users to receive signals using simple, low-cost patch antennas instead of more expensive, beam-steered antenna arrays. Engineers connected an inexpensive, commercially available radio receiver to a laptop computer and an antenna designed and built by Rockwell Collins, enabling them to receive WorldSpace signals from the AfriStar satellite during flight tests. WorldSpace broadcast their composite color graphical weather data files, which were multiplexed with normal audio streams, to the flat patch antenna mounted on a single-engine aircraft. The aircraft was equipped with a modified commercial S-DARS receiver, a Global Positioning Satellite (GPS) receiver, and a laptop computer with color display. Continuous data reception occurred during normal aircraft maneuvers performed throughout takeoff, cruise, and landing operations. In addition, engineers monitored receiver power levels during steep turns and banks. In most instances, the receiver was able to maintain acceptable power levels during all phases of flight and to obtain weather data with little or with the successful completion of ground and flight testing of a receiver and antenna in Johannesburg, South Africa, the team has started to prepare for experiments using highspeed aircraft in areas of the world with limited access to timely weather data. NASA plans to provide a more advanced antenna design and consultation support. This successful test of real-time aviation-related weather data is a positive step toward solving communications-specific issues associated with the dissemination of weather data directly to the cockpit.

Mallasch, Paul G.↗

Post-Challenger evaluation of space shuttle risk assessment and management

As the shock of the Space Shuttle Challenger accident began to subside, NASA initiated a wide range of actions designed to ensure greater safety in various aspects of the Shuttle system and an improved focus on safety throughout the National Space Transportation System (NSTS) Program. Certain specific features of the NASA safety process are examined: the Critical Items List (CIL) and the NASA review of the Shuttle primary and backup units whose failure might result in the loss of life, the Shuttle vehicle, or the mission; the failure modes and effects analyses (FMEA); and the hazard analysis and their review. The conception of modern risk management, including the essential element of objective risk assessment is described and it is contrasted with NASA's safety process in general terms. The discussion, findings, and recommendations regarding particular aspects of the NASA STS safety assurance process are reported. The 11 subsections each deal with a different aspect of the process. The main lessons learned by SCRHAAC in the course of the audit are summarized.

Source record↗

Real-Time Risk Assessment Framework for Unmanned Aircraft System (UAS) Traffic Management (UTM)

The new Federal Aviation Administration (FAA) Small Unmanned Aircraft rule (Part 107) marks the first national regulations for commercial operation of small unmanned aircraft systems (sUAS) under 55 pounds within the National Airspace System (NAS). Although sUAS flights may not be performed beyond visual line-of-sight or over non- participant structures and people, safety of sUAS operations must still be maintained and tracked at all times. Moreover, future safety-critical operation of sUAS (e.g., for package delivery) are already being conceived and tested. NASA's Unmanned Aircraft System Trac Management (UTM) concept aims to facilitate the safe use of low-altitude airspace for sUAS operations. This paper introduces the UTM Risk Assessment Framework (URAF) which was developed to provide real-time safety evaluation and tracking capability within the UTM concept. The URAF uses Bayesian Belief Networks (BBNs) to propagate off -nominal condition probabilities based on real-time component failure indicators. This information is then used to assess the risk to people on the ground by calculating the potential impact area and the effects of the impact. The visual representation of the expected area of impact and the nominal risk level can assist operators and controllers with dynamic trajectory planning and execution. The URAF was applied to a case study to illustrate the concept.

Ancel, Ersin↗

Issues and Methods for Assessing COTS Reliability, Maintainability, and Availability

Many vendors produce products that are not domain specific (e.g., network server) and have limited functionality (e.g., mobile phone). In contrast, many customers of COTS develop systems that am domain specific (e.g., target tracking system) and have great variability in functionality (e.g., corporate information system). This discussion takes the viewpoint of how the customer can ensure the quality of COTS components. In evaluating the benefits and costs of using COTS, we must consider the environment in which COTS will operate. Thus we must distinguish between using a non-mission critical application like a spreadsheet program to produce a budget and a mission critical application like military strategic and tactical operations. Whereas customers will tolerate an occasional bug in the former, zero tolerance is the rule in the latter. We emphasize the latter because this is the arena where there are major unresolved problems in the application of COTS. Furthermore, COTS components may be embedded in the larger customer system. We refer to these as embedded systems. These components must be reliable, maintainable, and available, and must be with the larger system in order for the customer to benefit from the advertised advantages of lower development and maintenance costs. Interestingly, when the claims of COTS advantages are closely examined, one finds that to a great extent these COTS components consist of hardware and office products, not mission critical software [1]. Obviously, COTS components are different from custom components with respect to one or more of the following attributes: source, development paradigm, safety, reliability, maintainability, availability, security, and other attributes. However, the important question is whether they should be treated differently when deciding to deploy them for operational use; we suggest the answer is no. We use reliability as an example to justify our answer. In order to demonstrate its reliability, a COTS component must pass the same reliability evaluations as the custom components, otherwise the COTS components will be the weakest link in the chain of components and will be the determinant of software system reliability. The challenge is that there will be less information available for evaluating COTS components than for custom components but this does not mean we should despair and do nothing. Actually, there is a lot we can do even in the absence of documentation on COTS components because the customer will have information about how COTS components are to be used in the larger system. To illustrate our approach, we will consider the reliability, maintainability, and availability (RMA) of COTS components as used in larger systems. Finally, COTS suppliers might consider increasing visibility into their products to assist customers in determining the components' fitness for use in a particular application. We offer ideas of information that would be useful to customers, and what vendors might do to provide it.

Schneidewind, Norman F.↗

Design study of RL10 derivatives. Volume 2: Engine design characteristics

The design characteristics of the RL-10 rocket engine are discussed. The results from critical elements evaluation, baseline engine design, parametric and special study tasks are presented. Critical element evaluation established the feasibility of various engine features such as tank head idle, pumped idle, autogenous tank pressurization, and two-phase pumping. Three baseline engines, derived from the RL-10 were conceptually designed. Parametric life and performance data were generated. Special studies were conducted to establish the impact on the engine design of environment, safety, interchangeability, and maintenance.

Adams, A.↗

International Space Station (ISS) Plasma Contactor Unit (PCU) Utilization Plan Assessment Update

The International Space Station (ISS) vehicle undergoes spacecraft charging as it interacts with Earth's ionosphere and magnetic field. The interaction can result in a large potential difference developing between the ISS metal chassis and the local ionosphere plasma environment. If an astronaut conducting extravehicular activities (EVA) is exposed to the potential difference, then a possible electrical shock hazard arises. The control of this hazard was addressed by a number of documents within the ISS Program (ISSP) including Catastrophic Safety Hazard for Astronauts on EVA (ISS-EVA-312-4A_revE). The safety hazard identified the risk for an astronaut to experience an electrical shock in the event an arc was generated on an extravehicular mobility unit (EMU) surface. A catastrophic safety hazard, by the ISS requirements, necessitates mitigation by a two-fault tolerant system of hazard controls. Traditionally, the plasma contactor units (PCUs) on the ISS have been used to limit the charging and serve as a "ground strap" between the ISS structure and the surrounding ionospheric plasma. In 2009, a previous NASA Engineering and Safety Center (NESC) team evaluated the PCU utilization plan (NESC Request #07-054-E) with the objective to assess whether leaving PCUs off during non-EVA time periods presented risk to the ISS through assembly completion. For this study, in situ measurements of ISS charging, covering the installation of three of the four photovoltaic arrays, and laboratory testing results provided key data to underpin the assessment. The conclusion stated, "there appears to be no significant risk of damage to critical equipment nor excessive ISS thermal coating damage as a result of eliminating PCU operations during non- EVA times." In 2013, the ISSP was presented with recommendations from Boeing Space Environments for the "Conditional" Marginalization of Plasma Hazard. These recommendations include a plan that would keep the PCUs off during EVAs when the space environment forecast input to the ISS charging model indicates floating potentials (FP) within specified limits. These recommendations were based on the persistence of conditions in the space environment due to the current low solar cycle and belief in the accuracy and completeness of the ISS charging model. Subsequently, a Noncompliance Report (NCR), ISS-NCR-232G, Lack of Two-fault Tolerance to EVA Crew Shock in the Low Earth Orbit Plasma Environment, was signed in September 2013 specifying new guidelines for the use of shock hazard controls based on a forecast of the space environment from ISS plasma measurements taken prior to the EVA [ISS-EVA-312-AC, 2012]. This NESC assessment re-evaluates EVA charging hazards through a process that is based on over 14 years of ISS operations, charging measurements, laboratory tests, EMU studies and modifications, and safety reports. The assessment seeks an objective review of the plasma charging hazards associated with EVA operations to determine if any of the present hazard controls can safely change the PCU utilization plan to allow more flexibility in ISS operations during EVA preparation and execution.

Hernandez-Pellerano, Amri↗

Controlled Contamination of Epoxy Composites with PDMS and Removal by Laser Ablation

Surface preparation is critical to the performance of adhesively bonded composites. During manufacturing, minute quantities of mold release compounds are inevitably deposited on faying surfaces and may compromise bond performance. To ensure safety, mechanical fasteners and other crack arrest features must be installed in the bondlines of primary structures, which negates some advantages of adhesively bonded construction. Laser ablation is an automated, repeatable, and scalable process with high potential for the surface preparation of metals and composites in critical applications such as primary airframe structures. In this study, laser ablation is evaluated on composite surfaces for the removal of polydimethylsiloxane (PDMS), a common mold release material. Composite panels were contaminated uniformly with PDMS film thicknesses as low as 6.0 nm as measured by variable angle spectroscopic ellipsometry. Bond performance was assessed by mechanical testing using a 250 F cure, epoxy adhesive and compared with pre-bond surface inspection results. Water contact angle, optically stimulated electron emission, and laser induced breakdown spectroscopy were used to characterize contaminated and laser ablated surfaces. The failure mode obtained from double cantilever beam tests correlated well with surface characterization data. The test results indicated that even low levels of PDMS were not completely removed by laser ablation.

Palmieri, Frank↗