Search NASA⌕ Search

SEARCH · Search NASA

Results for “minimum operational performance standards”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 145 records · Page 8

Low earth orbit satellite/terrestrial mobile service compatibility

Digital cellular mobile 'second generation' systems are now gradually being introduced into service; one such example is GSM, which will provide a digital voice and data service throughout Europe. Total coverage is not expected to be achieved until the mid '90's, which has resulted in several proposals for the integration of GSM with a geostationary satellite service. Unfortunately, because terrestrial and space systems have been designed to optimize their performance for their particular environment, integration between a satellite and terrestrial system is unlikely to develop further than the satellite providing a back-up service. This lack of system compatibility is now being addressed by system designers of third generation systems. The next generation of mobile systems, referred to as FPLMTS (future public land mobile telecommunication systems) by CCIR and UMTS (universal mobile telecommunication system) in European research programs, are intended to provide inexpensive, hand-held terminals that can operate in either satellite, cellular, or cordless environments. This poses several challenges for system designers, not least in terms of the choice of multiple access technique and power requirements. Satellite mobile services have been dominated by the geostationary orbital type. Recently, however, a number of low earth orbit configurations have been proposed, for example Iridium. These systems are likely to be fully operational by the turn of the century, in time for the implementation of FPLMTS. The developments in LEO mobile satellite service technology were recognized at WARC-92 with the allocation of specific frequency bands for 'big' LEO's, as well as a frequency allocation for FPLMTS which included a specific satellite allocation. When considering integrating a space service into the terrestrial network, LEO's certainly appear to have their attractions: they can provide global coverage, the round trip delay is of the order of tens of milliseconds, and good visibility to the satellite is usually possible. This has resulted in their detailed investigation in the European COST 227 program and in the work program of the European Telecommunications Standards Institute (ETSI). This paper will consider the system implications of integrating a LEO mobile service with a terrestrial service. Results will be presented from simulation software to show how a particular orbital configuration affects the performance of the system in terms of area coverage and visibility to a terminal for various locations and minimum elevation angle. Possible network topologies are then proposed for an integrated satellite/terrestrial network.

Sheriff, R. E.↗

An Operationally Based Vision Assessment Simulator for Domes

The Operational Based Vision Assessment (OBVA) simulator was designed and built by NASA and the United States Air Force (USAF) to provide the Air Force School of Aerospace Medicine (USAFSAM) with a scientific testing laboratory to study human vision and testing standards in an operationally relevant environment. This paper describes the general design objectives and implementation characteristics of the simulator visual system being created to meet these requirements. A key design objective for the OBVA research simulator is to develop a real-time computer image generator (IG) and display subsystem that can display and update at 120 frame s per second (design target), or at a minimum, 60 frames per second, with minimal transport delay using commercial off-the-shelf (COTS) technology. There are three key parts of the OBVA simulator that are described in this paper: i) the real-time computer image generator, ii) the various COTS technology used to construct the simulator, and iii) the spherical dome display and real-time distortion correction subsystem. We describe the various issues, possible COTS solutions, and remaining problem areas identified by NASA and the USAF while designing and building the simulator for future vision research. We also describe the critically important relationship of the physical display components including distortion correction for the dome consistent with an objective of minimizing latency in the system. The performance of the automatic calibration system used in the dome is also described. Various recommendations for possible future implementations shall also be discussed.

Archdeacon, John↗

Advanced Technology for Isolating Payloads in Microgravity

One presumption of scientific microgravity research is that while in space disturbances are minimized and experiments can be conducted in the absence of gravity. The problem with this assumption is that numerous disturbances actually occur in the space environment. Scientists must consider all disturbances when planning microgravity experiments. Although small disturbances, such as a human sneeze, do not cause most researchers on earth much concern, in space, these minuscule disturbances can be detrimental to the success or failure of an experiment. Therefore, a need exists to isolate experiments and provide a quiescent microgravity environment. The objective of microgravity isolation is to quantify all possible disturbances or vibrations and then attenuate the transmission of the disturbance to the experiment. Some well-defined vibration sources are: experiment operations, pumps, fans, antenna movements, ventilation systems and robotic manipulators. In some cases, it is possible to isolate the source using simple vibration dampers, shock absorbers and other isolation devices. The problem with simple isolation systems is that not all vibration frequencies are attenuated, especially frequencies less than 0.1 Hz. Therefore, some disturbances are actually emitted into the environment. Sometimes vibration sources are not well defined, or cannot be controlled. These include thermal "creak," random acoustic vibrations, aerodynamic drag, crew activities, and other similar disturbances. On some "microgravity missions," such as the United States Microgravity Laboratory (USML) and the International Microgravity Laboratory (IML) missions, the goal was to create extended quiescent times and limit crew activity during these times. This might be possible for short periods, but for extended durations it is impossible due to the nature of the space environment. On the International Space Station (ISS), vehicle attitude readjustments are required to keep the vehicle in a minimum torque orientation and other experimental activities will occur continually, both inside and outside the station. Since all vibration sources cannot be controlled, the task of attenuating the disturbances is the only realistic alternative. Several groups have independently developed technology to isolate payloads from the space environment. Since 1970, Honeywell's Satellite Systems Division has designed several payload isolation systems and vibration attenuators. From 1987 to 1992, NASA's Lewis Research Center (LeRC) performed research on isolation technology and developed a 6 degree-of-freedom (DOF) isolator and tested the system during 70 low gravity aircraft flight trajectories. Beginning in early 1995, NASA's Marshall Space Flight Center (MSFC) and McDonnell Douglas Aerospace (MDA) jointly developed the STABLE (Suppression of Transient Accelerations By Levitation Evaluation) isolation system. This 5 month accelerated effort produced the first flight of an active microgravity vibration isolation system on STS-73/USML-02 in late October 1995. The Canadian Space Agency developed the Microgravity Vibration Isolation Mount (MIM) for isolating microgravity payloads and this system began operating on the Russian Mir Space Station in May 1996. The Boeing Defense & Space Group, Missiles & Space Division developed the Active Rack Isolation System (ARIS) for isolating payloads in a standard payload rack. ARIS was tested in September 1996 during the STS-79 mission to Mir. Although these isolation systems differ in their technological approach, the objective is to isolate payloads from disturbances. The following sections describe the technologies behind these systems and the different types of hardware used to perform isolation. The purpose of these descriptions is not to detail the inner workings of the hardware but to give the reader an idea of the technology and uses of the hardware components. Also included in the component descriptions is a paragraph detailing some of the advances in isolation technology for that particular component. The final section presents some concluding thoughts and a summary of anticipated advances in research and development for isolating microgravity experiments.

Alhorn, Dean C.↗

NASA's Software Safety Standard

NASA relies more and more on software to control, monitor, and verify its safety critical systems, facilities and operations. Since the 1960's there has hardly been a spacecraft launched that does not have a computer on board that will provide command and control services. There have been recent incidents where software has played a role in high-profile mission failures and hazardous incidents. For example, the Mars Orbiter, Mars Polar Lander, the DART (Demonstration of Autonomous Rendezvous Technology), and MER (Mars Exploration Rover) Spirit anomalies were all caused or contributed to by software. The Mission Control Centers for the Shuttle, ISS, and unmanned programs are highly dependant on software for data displays, analysis, and mission planning. Despite this growing dependence on software control and monitoring, there has been little to no consistent application of software safety practices and methodology to NASA's projects with safety critical software. Meanwhile, academia and private industry have been stepping forward with procedures and standards for safety critical systems and software, for example Dr. Nancy Leveson's book Safeware: System Safety and Computers. The NASA Software Safety Standard, originally published in 1997, was widely ignored due to its complexity and poor organization. It also focused on concepts rather than definite procedural requirements organized around a software project lifecycle. Led by NASA Headquarters Office of Safety and Mission Assurance, the NASA Software Safety Standard has recently undergone a significant update. This new standard provides the procedures and guidelines for evaluating a project for safety criticality and then lays out the minimum project lifecycle requirements to assure the software is created, operated, and maintained in the safest possible manner. This update of the standard clearly delineates the minimum set of software safety requirements for a project without detailing the implementation for those requirements. This allows the projects leeway to meet these requirements in many forms that best suit a particular project's needs and safety risk. In other words, it tells the project what to do, not how to do it. This update also incorporated advances in the state of the practice of software safety from academia and private industry. It addresses some of the more common issues now facing software developers in the NASA environment such as the use of Commercial-Off-the-Shelf Software (COTS), Modified OTS (MOTS), Government OTS (GOTS), and reused software. A team from across NASA developed the update and it has had both NASA-wide internal reviews by software engineering, quality, safety, and project management. It has also had expert external review. This presentation and paper will discuss the new NASA Software Safety Standard, its organization, and key features. It will start with a brief discussion of some NASA mission failures and incidents that had software as one of their root causes. It will then give a brief overview of the NASA Software Safety Process. This will include an overview of the key personnel responsibilities and functions that must be performed for safety-critical software.

Ramsay, Christopher M.↗

Norton-Thevenin Receptance Coupling (NTRC) as a Payload Analysis Tool

The NASA Engineering and Safety Center (NESC) has funded a study of a new method formulated by NASA Engineers called Norton-Thevenin Receptance Coupling (NTRC) to perform coupled loads analysis (CLA). The problem that NTRC attempts to solve is the dependency of the payload organization to high CLA costs, long schedules, lack of standard capabilities to evaluate multiple configurations and unavailability of loads when needed. NTRC solves the problem by providing a tool that payload developers can use to obtain loads at a fraction of the cost of a CLA at any time that it is required. While NTRC is not intended to replace the formal load cycles performed by the launch vehicle (LV) provider, it will provide the ability to reduce the conservatism in defining preliminary design loads, assess the impact of design changes between formal load cycles, perform trade studies and perform parametric loads analysis where many different design configurations can be evaluated with a minimum amount of data required from the LV provider. NTRC condenses all the necessary information into the launch vehicle to payload/s connection points or boundary degrees of freedom (BD). The launch vehicle model is represented by its impedance at its BDs; its forcing functions are represented by the acceleration at those BDs when the payload is absent and the latter is represented by its impedance at the same BDs. Payload responses are represented by transfer functions of selected response to interface BDs. The methodology has contributed to the Loads and Dynamics discipline advancement and successfully passed Peer Reviews. NTRC is exact in the frequency domain. Time domain replication and accuracy is outstanding. A second phase is envisioned to benchmark the whole set of CLA events for the Agency's most utilized Launch Vehicles, and ready it for operational deployment at NASA.

Kaufman, Daniel↗

Advanced Dependent Pressure Vessel (DPV) nickel-hydrogen spacecraft cell and battery design

The dependent pressure vessel (DPV) nickel-hydrogen (NiH2) battery is being developed as a potential spacecraft battery design for both military and commercial satellites. Individual pressure vessel (IPV) NiH2 batteries are currently flying on more than 70 Earth orbital satellites and have accumulated more than 140,000,000 cell-hours in actual spacecraft operation. The limitations of standard NiH2 IPV flight battery technology are primarily related to the internal cell design and the battery packaging issues associated with grouping multiple cylindrical cells. The DPV cell design offers higher specific energy and reduced cost, while retaining the established IPV NiH2 technology flight heritage and database. The advanced cell design offers a more efficient mechanical, electrical and thermal cell configuration and a reduced parts count. The internal electrode stack is a prismatic flat-plate arrangement. The flat individual cell pressure vessel provides a maximum direct thermal path for removing heat from the electrode stack. The cell geometry also minimizes multiple-cell battery packaging constraints by using an established end-plateltie-rod battery design. A major design advantage is that the battery support structure is efficiently required to restrain only the force applied to a portion of the end cell. As the cells are stacked in series to achieve the desired system voltage, this increment of the total battery weight becomes small. The geometry of the DPV cell promotes compact, minimum volume packaging and places all cell terminals along the length of the battery. The resulting ability to minimize intercell wiring offers additional design simplicity and significant weight savings. The DPV battery design offers significant cost and weight savings advantages while providing minimal design risks. Cell and battery level design issues will be addressed including mechanical, electrical and thermal design aspects. A design performance analysis will be presented at both the cell and battery level. The DPV is capable of delivering up to 76 Watt-hours per kilogram (Wh/kg) at the cell level and 70 Wh/kg at the full battery level. This represents a 40 percent increase in specific energy at the cell level and a 60 percent increase in specific energy at the battery level compared to current IPV NiH2 technology.

Coates, Dwaine↗

Aseptic Operations for Post DHMR Processing of MOMA Mass Spectrometer

Mars Organic Molecule Analyzer - Mass Spectrometer (MOMA-MS) is an instrument in the MOMA instrument suite for the European Space Agency (ESA) ExoMars 2020 Rover. The rover is Planetary Protection Mission Category IVb, the first IVb mission since the Viking missions in the 1970s. Within the sample path of the MOMA instrument suite, the hardware surfaces of the must be sanitized to a level of less than 0.03 spore/m sq. To meet this requirement, the MS sample path was subjected to Dry Heat Microbial Reduction (DHMR) to decrease the number of viable spores by 4 orders of magnitude from a measured 88 spores/m sq to 0.009 spores/m sq. Before DHMR, the hardware is handled using standard cleanroom practices. After DHMR, planetary protection filters protect the sample path for most of integration, but when sample path exposure is required, aseptic operations are instituted and exposure times are kept to an absolute minimum. The surface area of exposure is also taken into account to determine safe exposure times. Before work begins, the ISO class 5 aseptic workspace is cleaned and tested for surface and airborne bioburden, and all tools that will contact or be used near sample path surfaces are sterilized. During the exposure activity, sterile garments are worn, sterile gloves are changed as often as necessary, and the environment is monitored with active and passive fallout for bioburden and real time airborne particle counts. Sterile tools are handled by a two person team so that the operator touches only the tool and not the exterior surfaces of the sterilization pouch, and a sterile operating field is established as a safe place to organize tools or parts during the aseptic operations. In cases where aseptic operations are not feasible, localized DHMR is used after exposure. Any breach in the planetary protection cleanliness can necessitate repeating instrument level DHMR, which not only has significant cost and schedule implications, it also become a risk to hardware that is not rated for repeated long exposures to high temperatures.

Spacecraft Design↗

Drag De-Orbit Device: A New Standard Re-Entry Actuator for CubeSats

With the advent of CubeSats, research in Low Earth Orbit (LEO) becomes possible for universities and small research groups. Only a handful of launch sites can be used, due to geographical and political restrictions. As a result, common orbits in LEO are becoming crowded due to the additional launches made possible by low-cost access to space. CubeSat design principles require a maximum of a 25-year orbital lifetime in an effort to reduce the total number of spacecraft in orbit at any time. Additionally, since debris may survive re-entry, it is ideal to de-orbit spacecraft over unpopulated areas to prevent casualties. The Drag Deorbit Device (D3) is a self-contained targeted re-entry subsystem intended for CubeSats. By varying the cross-wind area, the atmospheric drag can be varied in such a way as to produce desired maneuvers. The D3 is intended to be used to remove spacecraft from orbit to reach a desired target interface point. Additionally, attitude stabilization is performed by the D3 prior to deployment and can replace a traditional ADACS on many missions.This paper presents the hardware used in the D3 and operation details. Four stepper-driven, repeatedly retractable booms are used to modify the cross-wind area of the D3 and attached spacecraft. Five magnetorquers (solenoids) over three axes are used to damp rotational velocity. This system is expected to be used to improve mission flexibility and allow additional launches by reducing the orbital lifetime of spacecraft.The D3 can be used to effect a re-entry to any target interface point, with the orbital inclination limiting the maximum latitude. In the chance that the main spacecraft fails, a timer will automatically deploy the booms fully, ensuring the spacecraft will at the minimum reenter the atmosphere in the minimum possible time, although not necessarily at the desired target interface point. Although this does not reduce the risk of casualties, the 25-year lifetime limit is still respected, allowing a reduction of the risk associated with a hardware failure.

reentry↗

Drag De-Orbit Device: A New Standard Re-Entry Actuator for CubeSats

With the advent of CubeSats, research in Low Earth Orbit (LEO) becomes possible for universities and small research groups. Only a handful of launch sites can be used, due to geographical and political restrictions. As a result, common orbits in LEO are becoming crowded due to the additional launches made possible by low-cost access to space. CubeSat design principles require a maximum of a 25-year orbital lifetime in an effort to reduce the total number of spacecraft in orbit at any time. Additionally, since debris may survive re-entry, it is ideal to de-orbit spacecraft over unpopulated areas to prevent casualties. The Drag Deorbit Device (D3) is a self-contained targeted re-entry subsystem intended for CubeSats. By varying the cross-wind area, the atmospheric drag can be varied in such a way as to produce desired maneuvers. The D3 is intended to be used to remove spacecraft from orbit to reach a desired target interface point. Additionally, attitude stabilization is performed by the D3 prior to deployment and can replace a traditional ADACS on many missions.This paper presents the hardware used in the D3 and operation details. Four stepper-driven, repeatedly retractable booms are used to modify the cross-wind area of the D3 and attached spacecraft. Five magnetorquers (solenoids) over three axes are used to damp rotational velocity. This system is expected to be used to improve mission flexibility and allow additional launches by reducing the orbital lifetime of spacecraft.The D3 can be used to effect a re-entry to any target interface point, with the orbital inclination limiting the maximum latitude. In the chance that the main spacecraft fails, a timer will automatically deploy the booms fully, ensuring the spacecraft will at the minimum reenter the atmosphere in the minimum possible time, although not necessarily at the desired target interface point. Although this does not reduce the risk of casualties, the 25-year lifetime limit is still respected, allowing a reduction of the risk associated with a hardware failure.

reentry↗

How Public Private Partnerships Enable NASA Future Space Communication Needs

The NASA Space Communications and Navigation (SCaN) Program is responsible for providing communication and navigation services to scientific and human space exploration missions. SCaN's current Space Network provides radio frequency (RF) relay services to near Earth space missions via Tracking and Data Relay Satellites (TDRS). SCaN plans to offer a new generation of relay services beginning in 2025, including the addition of optical communications capabilities and enhanced RF capabilities. The primary drivers behind the development of these next generation relay network services are to enhance communication and navigation services with significantly reduced development and operational costs. Several approaches being considered for implementation of these services are through government owned capabilities, through commercial service providers, or a combination of the two. One approach receiving a great deal of attention is the use of Public-Private Partnerships (PPP) to develop and provide capabilities or services. Utilizing Public-Private Partnerships allows NASA and commercial entities to share the investment, standards, and risks of developing and testing new or enhanced capabilities which can benefit both NASA and the commercial space communication industry. The capabilities developed under the PPP can then be used to support the growth of the commercial satellite communications industry while simultaneously being introduced into NASA operations to provide service to future NASA missions as part of the NASA Next Generation Architecture. Partnerships formed for this purpose can also serve as the basis for further NASA acquisition activities where government and industry can continue to share the cost, risk, and benefits of space communications capability development and operations. This objective is consistent with the 2010 National Space Policy stated principles: "The United States is committed to encouraging and facilitating the growth of a U.S. commercial space sector that supports U.S. needs, is globally competitive, and advances U.S. leadership in the generation of new markets and innovation-driven entrepreneurship." [1]NASA has conducted several internal studies as well as externally funded studies with industry to define the next generation space communication architecture. NASA has approached the commercial industry through a Request for Information (RFI) to define further the next generation architecture and has conducted numerous internal and external studies. The results are promising and are shaping the approach to utilize Public Private Partnership to achieve NASA's objectives while reducing costs. The commercial satellite industry has begun to deploy high performance, high throughput global satellite constellations which have the potential to provide communication services to NASA Missions. Commercial satellite manufacturers have advanced their processes to rapidly design, build, and deliver, reliable communication satellites using minimum government oversight. In this paper, we will 1) describe the NASA Next Generation Architecture, Concept of Operations (ConOps), and salient characteristics; 2) Discuss the rational of Public-Private Partnerships to achieve NASA’s next generation communication architecture; and 3) Summarize the preliminary analysis performed to date and describe the path forward.

Stegeman, James↗

Report on Alternative Devices to Pyrotechnics on Spacecraft

Pyrotechnics accomplish many functions on today's spacecraft, possessing minimum volume/weight, providing instantaneous operation on demand, and requiring little input energy. However, functional shock, safety, and overall system cost issues, combined with emergence and availability of new technologies question their continued use on space missions. Upon request from the National Aeronautics and Space Administration's (NASA) Program Management Council (PMC), Langley Research Center (LaRC) conducted a survey to identify and evaluate state-of-the-art non-explosively actuated (NEA) alternatives to pyrotechnics, identify NEA devices planned for NASA use, and investigate potential interagency cooperative efforts. In this study, over 135 organizations were contacted, including NASA field centers, Department of Defense (DOD) and other government laboratories, universities, and American and European industrial sources resulting in further detailed discussions with over half, and 18 face-to-face briefings. Unlike their single use pyrotechnic predecessors, NEA mechanisms are typically reusable or refurbishable, allowing flight of actual tested units. NEAs surveyed include spool-based devices, thermal knife, Fast Acting Shockless Separation Nut (FASSN), paraffin actuators, and shape memory alloy (SMA) devices (e.g., Frangibolt). The electro-mechanical spool, paraffin actuator and thermal knife are mature, flight proven technologies, while SMA devices have a limited flight history. There is a relationship between shock, input energy requirements, and mechanism functioning rate. Some devices (e.g., Frangibolt and spool based mechanisms) produce significant levels of functional shock. Paraffin, thermal knife, and SMA devices can provide gentle, shock-free release but cannot perform critically timed, simultaneous functions. The FASSN flywheel-nut release device possesses significant potential for reducing functional shock while activating nearly instantaneously. Specific study recommendations include: (1) development of NEA standards, specifically in areas of material characterization, functioning rates, and test methods; (2) a systems level approach to assure successful NEA technology application; and (3) further investigations into user needs, along with industry/government system-level real spacecraft cost benefit trade studies to determine NEA application foci and performance requirements. Additional survey observations reveal an industry and government desire to establish partnerships to investigate remaining unknowns and formulate NEA standards, specifically those driven by SMAs. Finally, there is increased interest and need to investigate alternative devices for such functions as stage/shroud separation and high pressure valving. This paper summarizes results of the NASA-LaRC survey of pyrotechnic alternatives. State of-the-art devices with their associated weight and cost savings are presented. Additionally, a comparison of functional shock characteristics of several devices are shown, and potentially related technology developments are highlighted.

Lucy, M. H.↗

Recommendations on Evidence and Process for Certification of Learning-enabled Components in Aerospace Systems

This report primarily identifies a collection of relevant and necessary evidence for assurance of machine learnt components (MLCs)—also known as learning-enabled components—integrated into aircraft systems, and gives preliminary suggestions on the elements of a certification process that invoke the identified evidence. The main focus is on feedforward neural networks that are static and trained offline through supervised learning. A brief background on the generic elements of the lifecycle of an MLC is given to contextualize the assurance considerations and, consequently, the evidence that is relevant and necessary to support certification. At the level of an MLC, those considerations relate to: (i) the consistency and correctness of MLC contributions to system functions in the context of a validated functional intent; and (ii) the absence of MLC contributions to aircraft-level failure conditions. At an ML model level, confidence in model and data properties contribute to assurance of the containing MLC, in particular: (a) generalizability and robustness of models, in the presence of inputs not previously seen during training, disturbances to inputs, and unexpected inputs; and (b) valid data, i.e., data that are at least representative, relevant, complete, and accurate. Evidence for the above span the elements of the ML lifecycle, and includes, at a minimum, lifecycle artifacts that pertain to: (1) properties of requirements capturing functional intent, safety constraints, and aspects of the intended use and operating environment; (2) model performance, model complexity and design, and algorithm choice; (3) achievement of required performance at the levels of a trained model during model development, a trained model after model development is complete, and a trained model that is transformed into an executable equivalent; (4) model implementation aspects necessary for transforming a trained model into the executable equivalent; (5) integration of the executable trained model into the containing MLC, and eventually the larger system; and, (6) lastly, the verification and validation (V&V) of each of the above. Such V&V lifecycle artifacts themselves include: aspects of coverage, e.g., of various levels of requirements by the input space of the model and the data; traceability (where applicable); application of formal methods for property specification, analysis, and checking. Examples of evidence generation methods and tools further ground the discussion on what constitutes evidence, and the contribution to assurance during certification. The identified assurance considerations and supporting evidence is not a comprehensive set. Additionally, neither what should be considered as sufficient evidence relative to the assigned criticality of an MLC, nor how criticality ought to be determined and adjusted, have been considered in this report. However, suggestions are made for potential activities of the ML lifecycle that are aimed at providing confidence that an MLC can be relied upon when integrated into its containing (aircraft) system. Those activities are proposed as candidate elements of a certification process for MLCs. The main purpose of this report to inform regulatory guidance and consensus standards that may be used to meet the safety intent of the applicable regulations.

Aviation safety↗

How Can We Efficiently Build A Spacecraft That Has Longevity? Experiences From the GSFC Perspective to Inform Lunar Exploration and Science Orbiter’s Architecture

Recent successes in NASA planetary science missions has shown that long-lived missions can yield significant science return. These missions, despite their longevity, were not planned to operate beyond their deign life. For example, the Lunar Reconnaissance Orbiter has a design life of 2-3 years, and yet we are entering its 14th year on orbit. Spacecraft longevity in practice has been related to: 1) mission class; 2) did we test it long enough and resolve all the anomalies to be beyond the early failure curve; 3) consumables budgets, and 4) how components are de-signed and tested. Mission class has been perceived as one of the primary ways to drive longevity. But higher mission class is a significant cost and mission driver. Parts selection only from the limited military standard parts and extensive parts qualification adds to development time and cost. Largely redundant (often erroneously interpreted as fully redundant) adds to launch mass and increases testing complexity (which may reduce the amount of testing in the nominal con-figuration). Lower Risk Posture (reflected in a higher mission class) drives significant additional processes and quality assurance analyses. Higher mission class also drives significantly greater sparing and life testing costs. This discussion focuses on whether this is indeed the best way to achieve longevity efficiently or whether there are more efficient ways to achieve longevity. Empirical evidence shows that lower mission classes that implement effective risk reduction and selective redundancy generally results in long life at a lower Spacecraft bus cost. By evaluating redundancy careful-ly, spacecraft cost can be lowered which can enable a more capable payload. Risk of the mission is highly dependent on the complexity of the mission and is only loosely dependent on Class of Mission. High complexity missions can have many single point failures and require the development of new technology, while lower class mission can have lower risk by baselining or incorporating: (selective) redundancy, fault-tolerant design, design for minimum risk, ability to reset, and/or design for graceful degradation. The team met with Goddard Space Flight Center Space Systems Mission Operations leaders to discuss which avionics have proven in flight to be the most reliable and which have had lifetime issues. The paper proposes a list of components to focus on for redundancy for a long-lived lunar mission. Reliability numbers are presented for both single string and dual string missions. The history of life-time performance versus planned mission life according to mission class is presented. A mission with well thought out selective redundancy and effective on the ground test program, can be expected to last well beyond its mission lifetime and provided enhanced return for the community. This approach minimizes project expenditures that do not retire significant risk and allows the project to focus risk mitigation efforts on those risks that will have a significant likelihood of threatening mission success. This is aided by keeping the amount of technology maturation and mission complexity low, while focusing effort on ensuring all component stress-ing parameters well within the bounds of their capabilities.

Lessons Learned↗

Defining the Operational Envelope for Air Flows in the Miniature Arc-Jet Research Chamber (mARC II)

The second-generation 30 kW miniature Arc-jet Research Chamber (mARC II) at NASA Ames Research Center produces high enthalpy flows relevant for entry systems ground testing. The mARC II facility has recently undergone upgrades, including the installation of a new vacuum system to address the issues preventing it from maintaining underexpanded flow under test conditions. In this work, we present data obtained from an Integrated Systems Testing campaign and provide an initial assessment of arc-jet performance following the upgrades. Air is used as the working gas for the standard mARC II arc-heater configuration with two constrictor disks. Seven runs were investigated for five test conditions to assess the lowest achievable stagnation point heat fluxes for air flow rates of 0.15 or 0.25 g s −1 . The heat flux was measured using a water-cooled Gardon gauge (Ø4.76 mm, 3/16" hemispherical) at 70 mm from the nozzle exit plane. The new vacuum system produced test box pressures in the medium (fine) vacuum range (~0.03 torr, 4 Pa) prior to gas addition and successfully maintained underexpanded flow after gas addition. The upgrade yielded a ~4X reduction in heat flux relative to the previous system for the same set test conditions. We report the lowest heat fluxes measured in mARC II to date, ranging from 26 to 81 W cm −2 , for sonic flow enthalpies of 4–14 MJ kg −1 . Bulk enthalpies estimated using an energy balance method (EB 2 ) are reported for the first time using mARC II.Initial data suggests EB 2 generally estimates lower enthalpies than sonic flow methods for mARC II. Lastly, laminar axisymmetric Navier–Stokes simulations were performed using the NASA DPLR code. Numerical heat flux results show good agreement with experiments at low arc powers (3–15% difference at the minimum set arc current), but discrepancy increases with arc power (49% difference at the maximum set arc current).

Pitot tube↗

Defining the Operational Envelope for Air Flows in the Miniature Arc-Jet Research Chamber (mARC II)

The second-generation 30 kW miniature Arc-jet Research Chamber (mARC II) at NASA Ames Research Center produces high enthalpy flows relevant for entry systems ground testing. The mARC II facility has recently undergone upgrades, including the installation of a new vacuum system to address the issues preventing it from maintaining underexpanded flow under test conditions. In this work, we present data obtained from an Integrated Systems Testing campaign and provide an initial assessment of arc-jet performance following the upgrades. Air is used as the working gas for the standard mARC II arc-heater configuration with two constrictor disks. Seven runs were investigated for five test conditions to assess the lowest achievable stagnation point heat fluxes for air flow rates of 0.15 or 0.25 g s −1 . The heat flux was measured using a water-cooled Gardon gauge (Ø4.76 mm, 3/16" hemispherical) at 70 mm from the nozzle exit plane. The new vacuum system produced test box pressures in the medium (fine) vacuum range (~0.03 torr, 4 Pa) prior to gas addition and successfully maintained underexpanded flow after gas addition. The upgrade yielded a ~4X reduction in heat flux relative to the previous system for the same set test conditions. We report the lowest heat fluxes measured in mARC II to date, ranging from 26 to 81 W cm −2 , for sonic flow enthalpies of 4–14 MJ kg −1 . Bulk enthalpies estimated using an energy balance method (EB 2 ) are reported for the first time using mARC II.Initial data suggests EB 2 generally estimates lower enthalpies than sonic flow methods for mARC II. Lastly, laminar axisymmetric Navier–Stokes simulations were performed using the NASA DPLR code. Numerical heat flux results show good agreement with experiments at low arc powers (3–15% difference at the minimum set arc current), but discrepancy increases with arc power (49% difference at the maximum set arc current).

arc-jet↗

Cryogenic Quenching Process for Electronic Part Screening

The use of electronic parts at cryogenic temperatures (less than 100 C) for extreme environments is not well controlled or developed from a product quality and reliability point of view. This is in contrast to the very rigorous and well-documented procedures to qualify electronic parts for mission use in the 55 to 125 C temperature range. A similarly rigorous methodology for screening and evaluating electronic parts needs to be developed so that mission planners can expect the same level of high reliability performance for parts operated at cryogenic temperatures. A formal methodology for screening and qualifying electronic parts at cryogenic temperatures has been proposed. The methodology focuses on the base physics of failure of the devices at cryogenic temperatures. All electronic part reliability is based on the bathtub curve, high amounts of initial failures (infant mortals), a long period of normal use (random failures), and then an increasing number of failures (end of life). Unique to this is the development of custom screening procedures to eliminate early failures at cold temperatures. The ability to screen out defects will specifically impact reliability at cold temperatures. Cryogenic reliability is limited by electron trap creation in the oxide and defect sites at conductor interfaces. Non-uniform conduction processes due to process marginalities will be magnified at cryogenic temperatures. Carrier mobilities change by orders of magnitude at cryogenic temperatures, significantly enhancing the effects of electric field. Marginal contacts, impurities in oxides, and defects in conductor/conductor interfaces can all be magnified at low temperatures. The novelty is the use of an ultra-low temperature, short-duration quenching process for defect screening. The quenching process is designed to identify those defects that will precisely (and negatively) affect long-term, cryogenic part operation. This quenching process occurs at a temperature that is at least 25 C colder than the coldest expected operating temperature. This quenching process is the opposite of the standard burn-in procedure. Normal burn-in raises the temperature (and voltage) to activate quickly any possible manufacturing defects remaining in the device that were not already rejected at a functional test step. The proposed inverse burn-in or quenching process is custom-tailored to the electronic device being used. The doping profiles, materials, minimum dimensions, interfaces, and thermal expansion coefficients are all taken into account in determining the ramp rate, dwell time, and temperature.

Sheldon, Douglas J.↗

Turboelectric Distributed Propulsion Engine Cycle Analysis for Hybrid-Wing-Body Aircraft

Meeting NASA's N+3 goals requires a fundamental shift in approach to aircraft and engine design. Material and design improvements allow higher pressure and higher temperature core engines which improve the thermal efficiency. Propulsive efficiency, the other half of the overall efficiency equation, however, is largely determined by the fan pressure ratio (FPR). Lower FPR increases propulsive efficiency, but also dramatically reduces fan shaft speed through the combination of larger diameter fans and reduced fan tip speed limits. The result is that below an FPR of 1.5 the maximum fan shaft speed makes direct drive turbines problematic. However, it is the low pressure ratio fans that allow the improvement in propulsive efficiency which, along with improvements in thermal efficiency in the core, contributes strongly to meeting the N+3 goals for fuel burn reduction. The lower fan exhaust velocities resulting from lower FPRs are also key to meeting the aircraft noise goals. Adding a gear box to the standard turbofan engine allows acceptable turbine speeds to be maintained. However, development of a 50,000+ hp gearbox required by fans in a large twin engine transport aircraft presents an extreme technical challenge, therefore another approach is needed. This paper presents a propulsion system which transmits power from the turbine to the fan electrically rather than mechanically. Recent and anticipated advances in high temperature superconducting generators, motors, and power lines offer the possibility that such devices can be used to transmit turbine power in aircraft without an excessive weight penalty. Moving to such a power transmission system does more than provide better matching between fan and turbine shaft speeds. The relative ease with which electrical power can be distributed throughout the aircraft opens up numerous other possibilities for new aircraft and propulsion configurations and modes of operation. This paper discusses a number of these new possibilities. The Boeing N2 hybrid-wing-body (HWB) is used as a baseline aircraft for this study. The two pylon mounted conventional turbofans are replaced by two wing-tip mounted turboshaft engines, each driving a superconducting generator. Both generators feed a common electrical bus which distributes power to an array of superconducting motor-driven fans in a continuous nacelle centered along the trailing edge of the upper surface of the wing-body. A key finding was that traditional inlet performance methodology has to be modified when most of the air entering the inlet is boundary layer air. A very thorough and detailed propulsion/airframe integration (PAI) analysis is required at the very beginning of the design process since embedded engine inlet performance must be based on conditions at the inlet lip rather than freestream conditions. Examination of a range of fan pressure ratios yielded a minimum Thrust-specific-fuel-consumption (TSFC) at the aerodynamic design point of the vehicle (31,000 ft /Mach 0.8) between 1.3 and 1.35 FPR. We deduced that this was due to the higher pressure losses prior to the fan inlet as well as higher losses in the 2-D inlets and nozzles. This FPR is likely to be higher than the FPR that yields a minimum TSFC in a pylon mounted engine. 1

Felder, James L.↗

Leveraging VIPER Geotechnical and Mobility Insights for Endurance Rover and Traverse Development

A new generation of lunar surface rover exploration is rapidly approaching. This is evidenced by the rise of commercially developed rovers from private companies (e.g., Lunar Outpost’s MAPP) and government agencies, like NASA’s Volatiles Investigating Polar Exploration Rover (VIPER), the Lunar Terrain Vehicle (LTV), and the Endurance/Intrepid rover concepts, and the INSPIRE mission concept. The drive distance requirements for off-world vehicles are also rapidly increasing. For example, LTV driving requirements dictate a 20 km range on a single battery charge, with an overall lifetime requirement of 13,000 km over a minimum 10-year service life. Similarly, NASA's Endurance-A mission concept requires a 2000 km vehicle traverse distance, which is nearly 50 times further than the USSR's Lunokhod 2, the longest lunar rover mission to date. Previous planetary surface missions on the Moon and Mars have revealed harsh mobility conditions: aggressive rocky terrains on Mars severely damaged the Curiosity rover’s wheels, soft lunar regolith caused the Lunokhod 2 rover to sink and NASA’s Apollo 15 LRV (Lunar Roving Vehicle) spun out due to poor traction, which required manual correction. This demonstrates that mobility challenges like wheel degradation and soft soil driving performance must be accounted for in a mission’s design phase to meet increasingly aggressive mission durations and mobility goals. The success of these long duration missions requires highly reliable and durable mobility platforms in conjunction with a more developed understanding of the geotechnical properties of the lunar surface. The VIPER mission is uniquely posed to inform future missions about mobility performance, wheel durability, and lunar surface soil mechanics of sunlit and shadowed regions through use of data streams that already exist for other mission purposes. VIPER’s mission to the lunar south pole will provide a new perspective into off-world mobility challenges including traversal into permanently shadowed regions. Mobility data from VIPER’s mission will represent a first glimpse into the surface mobility challenges of the lunar South Pole. Utilization of VIPER’s existing capabilities including cameras, inertial measurement unit (IMU) data, motor currents/torque, drill data, and the rover’s suspension state and kinematics provide the opportunity to determine potentially useful information for future rover and traverse designs, as well as on-Earth testing practices. Data products collected during VIPER’s mission could inform design considerations for the Endurance rover much earlier than NASA’s standard “lessons learned” approach as VIPER has a highly tactical mission operations structure. This work outlines the specific links between possible data products from the VIPER mission and their potential impact on the Endurance/Intrepid mission concepts in their early design phases. From VIPER, we will also gain insights for future development of onboard mobility software as VIPER is a way-point driven rover which requires more constant human operation on Earth than some other rover missions (non-lunar surface). Primary VIPER data products and insights of interest include wheel sinkage, wheel slip, wheel degradation, surface soil shear strength, and terrain slope estimation. VIPER data products will be made available via the Planetary Data System’s Geosciences and Cartography and Imaging Sciences nodes, conforming to the PDS4 standard.

mobility↗