Search NASA⌕ Search

SEARCH · Search NASA

Results for “Safety Design Approach”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,477 records · Page 82

Design and Verification

As future space missions become longer, an important aspect to consider is the habitability of the spacecraft. The amount of habitable volume affects not only astronaut comfort, but safety and mission success as well. However, as the volume is increased to aid in task performance, the weight of the vehicle and cost of the mission escalates in proportion. Pressure to reduce mission cost is constant, but the risk to mission success and crew survival must remain the priorities. The Constellation Program's Altair Lunar Lander is designed for short duration surface operation missions of seven to ten days. For short duration missions, humans will tolerate fairly primitive environmental situations provided the basic physiological arrangements are acceptable. However, for long-duration lunar surface operations, the living and operational spaces within which the crew work must provide both the essentials of life, as well as the support necessary for the crew to be productive in accomplishing their mission. The Altair is still in the preliminary design phase, which is the optimal time for Human Factors data to be provided to designers and engineers. A Human Centered Design (HCD) approach is being taken with our Human Factors evaluations. Human-in-the-loop testing is conducted using low-medium fidelity mock-ups of proposed lunar architecture. Based on current ConOps (Concept of Operations) procedures, a task analysis is performed in which individual tasks are combined into larger operational scenarios. Subjective and objective performance measures are gathered at both the task and scenario level. These scores are used to determine the functionality of the vehicle in terms of task performance. Results from these evaluations will highlight areas for design or operational improvement.

Thompson, Shelby G.↗

A Formal Methods Approach to the Analysis of Mode Confusion

The goal of the new NASA Aviation Safety Program (AvSP) is to reduce the civil aviation fatal accident rate by 80% in ten years and 90% in twenty years. This program is being driven by the accident data with a focus on the most recent history. Pilot error is the most commonly cited cause for fatal accidents (up to 70%) and obviously must be given major consideration in this program. While the greatest source of pilot error is the loss of situation awareness , mode confusion is increasingly becoming a major contributor as well. The January 30, 1995 issue of Aviation Week lists 184 incidents and accidents involving mode awareness including the Bangalore A320 crash 2/14/90, the Strasbourg A320 crash 1/20/92, the Mulhouse-Habsheim A320 crash 6/26/88, and the Toulouse A330 crash 6/30/94. These incidents and accidents reveal that pilots sometimes become confused about what the cockpit automation is doing. Consequently, human factors research is an obvious investment area. However, even a cursory look at the accident data reveals that the mode confusion problem is much deeper than just training deficiencies and a lack of human-oriented design. This is readily acknowledged by human factors experts. It seems that further progress in human factors must come through a deeper scrutiny of the internals of the automation. It is in this arena that formal methods can contribute. Formal methods refers to the use of techniques from logic and discrete mathematics in the specification, design, and verification of computer systems, both hardware and software. The fundamental goal of formal methods is to capture requirements, designs and implementations in a mathematically based model that can be analyzed in a rigorous manner. Research in formal methods is aimed at automating this analysis as much as possible. By capturing the internal behavior of a flight deck in a rigorous and detailed formal model, the dark corners of a design can be analyzed. This paper will explore how formal models and analyses can be used to help eliminate mode confusion from flight deck designs and at the same time increase our confidence in the safety of the implementation. The paper is based upon interim results from a new project involving NASA Langley and Rockwell Collins in applying formal methods to a realistic business jet Flight Guidance System (FGS).

Butler, Ricky W.↗

Real-time 3D imaging of microstructure growth in battery cells using indirect MRI

Significance Lithium metal is an ideal anode material for rechargeable Li-ion batteries, but its use is prevented by the growth of lithium deposits, or “dendrites,” during charging that can cause performance loss and serious safety concerns. Understanding the growth of dendrites in situ is crucial for the progress of this technology. MRI has been limited to directly studying the lithium signal until now, resulting in low sensitivity, limited resolution, and long experiment times. We present here an approach that detects the “shadows” of dendrites growing through the electrolyte, allowing the dendrites’ growth to be imaged very quickly in 3D with high resolution. This technique can also be applied to other electrodes, such as those based on sodium, zinc, and magnesium.

25 ENERGY STORAGE↗

MELCOR Modeling of Accident Scenarios at a Facility for Aqueous Reprocessing of Spent Nuclear Fuel

The work presented in this report applies the MELCOR code to evaluate potential accidents in non-reactor nuclear facilities, focusing on Design Basis Accidents. Ten accident scenarios were modeled using NRC's best-estimate severe accident analysis code, MELCOR 2.2. The accident scenarios simulated a range of explosions and/or fires related to a nuclear fuel reprocessing facility. The objective was to evaluate the radionuclide source term to the environment following initiating explosion and/or fire events. The simulations were performed using a MELCOR model of the Barnwell Nuclear Fuel Plant, which was decommissioned before beginning reprocessing operations. Five of the accident scenarios were based on the Class 5 Design Basis Accidents from the Final Safety Analysis Report. Three of the remaining accident scenarios include sensitivity studies on smaller solvent fires. The final two accidents included an induced fire from an initial explosion. The radionuclide inventory was developed from ORIGEN calculations of spent PWR fuel with an initial enrichment of 4.5% U-235 by weight. The fuel aged for five years after a final 500-day irradiation cycle. The burn-up was conservatively increased to 60 GWd/MTU to bound current US operations. The results are characterized in terms of activity release to the environment and the building decontamination factor, which is related the leak path factor used in Department of Energy safety analyses. The MELCOR 2.2 results consider adverse consequences to the filters, ventilation system, and structures as a result of the explosions and fires. The calculations also include best-estimate models for aerosol transport, agglomeration, and deposition. The new calculations illustrate best-estimate approaches for predicting the source term from a reprocessing facility accident.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

NASA Aerospace Flight Battery Systems Program: An Update

The major objective of the NASA Aerospace Flight Battery Systems Program is to provide NASA with the policy and posture to increase and ensure the safety, performance, and reliability of batteries for space power systems. The program was initiated in 1985 to address battery problems experienced by NASA and other space battery users over the previous ten years. The original program plan was approved in May 1986 and modified in 1990 to reflect changes in the agency's approach to battery related problems that are affecting flight programs. The NASA Battery Workshop is supported by the NASA Aerospace Flight Battery Systems Program. The main objective of the discussions is to aid in defining the direction which the agency should head with respect to aerospace battery issues. Presently, primary attention in the Battery Program is being devoted to issues revolving around the future availability of nickel-cadmium batteries as a result of the proposed OSHA standards with respect to allowable cadmium levels in the workplace. The decision of whether or not to pursue the development of an advanced nickel-cadmium cell design and the qualification of vendors to produce cells for flight programs hinges on the impact of the OSHA ruling. As part of a unified Battery Program, the evaluation of a nickel-hydrogen cell design options and primary cell issues are also being pursued to provide high performance NASA Standards and space qualified state-of-the-art cells. The resolution of issues is being addressed with the full participation of the aerospace battery community.

Manzo, Michelle A.↗

Lay and Expert Perceptions of Planetary Protection

As space scientists and engineers plan new missions to Mars and other planets in our solar system, they will face critical questions about the potential for biological contamination of planetary surfaces. In a society that places ever-increasing importance on the role of public involvement in science and technology policy, questions about risks of biological contamination will be examined and debated in the media, and will lead to the formation of public perceptions of planetary-contamination risks. These perceptions will, over time, form an important input to the development of space policy. Previous research in public and expert perceptions of technological risks and hazards has shown that many of the problems faced by risk-management organizations are the result of differing perceptions of risk (and risk management) between the general public and scientific and technical experts. These differences manifest themselves both as disagreements about the definition (and level) of risk associated with a scientific, technological or industrial enterprise, and as distrust about the ability of risk-management organizations (both public and private) to adequately protect people's health and safety. This report presents the results of a set of survey studies designed to reveal perceptions of planetary exploration and protection from a wide range of respondents, including both members of the general public and experts in the life sciences. The potential value of this research lies in what it reveals about perceptions of risk and benefit that could improve risk-management policies and practices. For example, efforts to communicate with the public about Mars sample return missions could benefit from an understanding of the specific concerns that nonscientists have about such a mission by suggesting areas of potential improvement in public education and information. Assessment of both public and expert perceptions of risk can also be used to provide an advanced signal of aspects of planetary exploration and protection that may be particularly sensitive or controversial and that could prove problematic from a risk-management standpoint, perhaps warranting a more stringent risk-management approach than would otherwise be the case based on technical considerations alone. The design of the study compares perceptions and attitudes about space exploration relevant to a Mars sample return mission between three respondent groups: (1) members of The Planetary Society, a group representing individuals with a strong interest in space-related issues, (2) a group of university-aged students, representing a population relatively sensitive to environmental hazards, and (3) a group of life scientists outside of the space research community. Members of The Planetary Society received the survey as part of a special issue of The Planetary Report on planetary protection, which contained a number of background articles on planetary protection and related topics. A synopsis of the issue was prepared as an introduction to the survey for the other two groups.

Race, Margaret S.↗

What Can We Learn From Resilient Pilot Behaviors? The Case of Energy Management While Flying a Star

Recently, there has been increased interest in documenting flightcrew behaviors that contribute to safe operations. Instead of only capturing errors, new efforts are attempting to understand how pilots manage complexity and variability in the operational environment to ensure a safe mission. This approach highlights pilot responses to events and conditions that fall outside typical TEM threats; e.g., revised ATC clearances. This approach presents a two-sided coin: characterize flightcrew resilience /or/ generate insights regarding complexity in the operational environment that is not adequately managed by current flight deck interface designs, procedures, and training. To capture operational complexity, we have been analyzing flight path management tied to flying an RNAV STAR. Because ATC often requests revisions—e.g., descend late—and because RNAV STARs may not align with airplane performance limits, flightcrews need to monitor, anticipate threats to RNAV STAR compliance, and devise ways to accommodate unexpected challenges. In this paper, we identify general strategies that can support response adaptation and explore methods to facilitate training these strategies.

flight operations↗

Multi-scale Material Parameter Identification Using LS-DYNA® and LS-OPT®

Ever-tightening regulations on fuel economy, and the likely future regulation of carbon emissions, demand persistent innovation in vehicle design to reduce vehicle mass. Classical methods for computational mass reduction include sizing, shape and topology optimization. One of the few remaining options for weight reduction can be found in materials engineering and material design optimization. Apart from considering different types of materials, by adding material diversity and composite materials, an appealing option in automotive design is to engineer steel alloys for the purpose of reducing plate thickness while retaining sufficient strength and ductility required for durability and safety. A project to develop computational material models for advanced high strength steel is currently being executed under the auspices of the United States Automotive Materials Partnership (USAMP) funded by the US Department of Energy. Under this program, new Third Generation Advanced High Strength Steel (i.e., 3GAHSS) are being designed, tested and integrated with the remaining design variables of a benchmark vehicle Finite Element model. The objectives of the project are to integrate atomistic, microstructural, forming and performance models to create an integrated computational materials engineering (ICME) toolkit for 3GAHSS. The mechanical properties of Advanced High Strength Steels (AHSS) are controlled by many factors, including phase composition and distribution in the overall microstructure, volume fraction, size and morphology of phase constituents as well as stability of the metastable retained austenite phase. The complex phase transformation and deformation mechanisms in these steels make the well-established traditional techniques obsolete, and a multi-scale microstructure-based modeling approach following the ICME [0]strategy was therefore chosen in this project. Multi-scale modeling as a major area of research and development is an outgrowth of the Comprehensive Test Ban Treaty of 1996 which banned surface testing of nuclear devices [1]. This had the effect that experimental work was reduced from large scale tests to multiscale experiments to provide material models with validation at different length scales. In the subsequent years industry realized that multi-scale modeling and simulation-based design were transferable to the design optimization of any structural system. Horstemeyer [1] lists a number of advantages of the use of multiscale modeling. Among these are: the reduction of product development time by alleviating costly trial-and-error iterations as well as the reduction of product costs through innovations in material, product and process designs. Multi-scale modeling can reduce the number of costly large scale experiments and can increase product quality by providing more accurate predictions. Research tends to be focussed on each particular length scale, which enhances accuracy in the long term. This paper serves as an introduction to the LS-OPT and LS-DYNA methodology for multi-scale modeling. It mainly focuses on an approach to integrate material identification using material models of different length scales. As an example, a multi-scale material identification strategy, consisting of a Crystal Plasticity (CP) material model and a homogenized State Variable (SV) model, is discussed and the parameter identification of the individual material models of different length scales is demonstrated. The paper concludes with thoughts on integrating the multi-scale methodology into the overall vehicle design.

Stander, Nielen↗

A Solar Sail Shape Modeling Approach for Attitude Control Design and Analysis

Solar sails operating in the space environment experience deformations in sail shape that result in relatively large disturbance torques which dictate the required performance of the spacecraft attitude control and momentum management systems. These deformations are driven by thermal loads on the booms (due to uneven solar heating), manufacturing and assembly tolerances, and variations in membrane tension. The Solar Cruiser spacecraft utilizes a four-quadrant sail design with four 30-meter length booms and four triangular sail membranes, creating a square sail structure of >1600 m2. Medium-fidelity mesh models were developed based on a characteristic deformed shape. A series of parametric studies were conducted using this shape paradigm to determine worst-case deformed sail shapes which produce bounding disturbance torques. A large database of shapes was produced, and the forces and moments induced by each individual shape were calculated using a Rios-Reyes reduced order generalized sail model. Two were selected as reference worst-case shapes for the Solar Cruiser mission: one which produced the highest pitch/yaw root-sum-squared (RSS) torque, and one which produced the highest roll torque. The results showed that the worst-case shapes at high solar incidence angles induce significantly higher (2-10x) disturbance torques than an ideal, flat-plate sail. Even with considerable safety margins, assuming an ideal sail is unlikely to sufficiently bound the disturbances, which is critical when designing the attitude control system and sizing actuators. Accurate sail shape modeling methodologies should therefore be employed on future solar sail missions.

Solar Sail↗

Phase change material integrated core–shell catalyst for in situ thermal control in methanol synthesis from syngas

A model-guided core–shell catalyst design is presented for methanol synthesis, featuring a phase change material (PCM) core encapsulated by a Cu–Zn–Al 2 O 3 (CZA) catalytic shell. The PCM enables in situ thermal management by absorbing reaction heat at its melting point, mitigates the kinetic decline at high temperatures and therefore avoids low conversion, prevents hot spots, and stabilizes the reaction temperature. A two-dimensional axisymmetric, non-isothermal packed-bed reactor model (COMSOL 6.3) was developed for a 10 g system. Simulations evaluate three PCM candidates, that is, LiNO 3 , 9 wt% LiCl + 91 wt% LiNO 3 , and commercial H250, with melting points near 244–250°C. Results indicate that CO conversion can increase from 34.4% to 52.4%, and methanol production can improve by 69% compared to a conventional packed-bed reactor. Beyond methanol synthesis, the PCM-integrated core–shell concept provides a scalable approach for thermal control in exothermic reactions, improving reactor efficiency and safety.

core–shell catalyst↗

Integrated Molten Salt Reactor Modeling Capabilities in NEAMS Thermal Hydraulics Tools

The DOE neams program supports a full range of computational thermal fluids analysis capabilities and code developments for a broad range of advanced reactor concepts. The research and development approach under the thermal fluids technical area synergistically combines three length and time scales in a hierarchical multi-scale approach. To enable multi-scale thermal fluids capability using these codes, a key joint effort has been underway to develop an integrated system- and engineering-scale thermal fluids analysis capability, through integration of SAM and Pronghorn codes, both based on the MOOSE framework. This report summarizes recent advances in developing an integrated system- and engineering-scale modeling capability for the msr concept, which has gained significant interest in recent years. A consistent framework was established by coupling Pronghorn and SAM through the Saline interface, with thermophysical properties provided by the Molten Salt Thermal Property Database (MSTDB-TP). Further improvements were made to the coupling schemes and domain-overlapping strategies, enhancing the stability and robustness of multi-code simulations. Verification and validation efforts demonstrate the accuracy of this integration across a range of benchmark problems, including one-dimensional heated pipe flows, three-dimensional natural convection loops with evolving isotopic compositions, and \gls{msre} demonstration cases. Within Pronghorn, new capabilities were introduced to model corrosion and noble-metal plating phenomena, supported by an extended thermal-hydraulics framework and refined turbulence treatments. To capture two-phase flow behavior, a multiphase Euler–Euler model was implemented in Pronghorn, including advanced closure relations, high-resolution advection techniques, and capillary force reconstruction. Preliminary verification cases confirm the fidelity of the approach, while planned validation efforts target canonical multiphase benchmarks and application to msr components such as the msre pump bowl. Finally, updates to SAM’s msr mass transfer modeling were extended to consider noble gas migration into porous structures like graphite. The point kinetics model was updated to include reactivity feedback contributions from any defined species, such as xenon. The gas transport model was expanded for applicability to gas mixtures, bubble efflux phenomena, and species transport between liquid and gas phases. A selection of multi-scale Sherwood number correlations from MOSCATO/NekRS and multi-phase correlations from literature have been added for improved accuracy in calculating mass transfer coefficients. A companion effort on developing system-level redox corrosion has also been incorporated into SAM. Collectively, these enhancements strengthen the predictive capability of SAM and Pronghorn for simulating MSR thermal-hydraulics, corrosion, multiphase behavior, and fission-product transport, providing a more complete toolset for design, safety analysis, and licensing support of next-generation \gls{msr}s.

42 - ENGINEERING↗

A Solar Sail Shape Modeling Approach for Attitude Control Design and Analysis

Solar sails operating in the space environment experience deformations in sail shape that result in relatively large disturbance torques which dictate the required performance of the spacecraft attitude control and momentum management systems. These deformations are driven by thermal loads on the booms (due to uneven solar heating), manufacturing and assembly tolerances, and variations in membrane tension. The Solar Cruiser spacecraft utilizes a four-quadrant sail design with four 30-meter length booms and four triangular sail membranes, creating a square sail structure of >1600 m2. Medium-fidelity mesh models were developed based on a characteristic deformed shape. A series of parametric studies were conducted using this shape paradigm to determine worst-case deformed sail shapes which produce bounding disturbance torques. A large database of shapes was produced, and the forces and moments induced by each individual shape were calculated using a Rios-Reyes reduced order generalized sail model [1]. Two were selected as reference worst-case shapes for the Solar Cruiser mission: one which produced the highest pitch/yaw root-sum-squared (RSS) torque, and one which produced the highest roll torque. The results showed that the worst-case shapes at high solar incidence angles induce significantly higher (2-10x) disturbance torques than an ideal, flat-plate sail. Even with considerable safety margins, assuming an ideal sail is unlikely to sufficiently bound the disturbances, which is critical when designing the attitude control system and sizing actuators. Accurate sail shape modeling methodologies should therefore be employed on future solar sail missions. References [1] L. Rios-Reyes and D. J. Scheeres, “Generalized Model for Solar Sails,” Journal of Spacecraft and Rockets, Vol. 42, Jan. 2005, pp. 182–185, 10.2514/1.9054.

Solar Sail↗

Improving AHU Performance by Minimizing Approach Temperature, Reducing Air Maldistribution, and Efficiently Handling Sensible and Latent Loads (Phase 1 Interim Final Technical Report)

Residential air handling units (AHUs) have stayed the same in form and efficiency for the past 30+ years, with incremental improvements made to address safety, functionality, and energy-efficiency. The purpose of this research in Phase I, Topic 9a: Next Generation Residential Air Handlers, was to improve AHU performance by minimizing heat exchanger (HX) approach temperature, reducing air maldistribution, and developing alternative system configurations which more efficiently handle sensible and latent loads. In this research Optimized Thermal Systems (OTS) developed, modeled, and evaluated multiple alternative system concepts. A dual vapor compression system separate sensible and latent cooling (SSLC) concept was studied to inform work on alternative concepts and to show best-case performance benefit. System concepts included ejector enhanced vapor compression cycles, desiccant assisted dehumidification, dual evaporator SSLC, and alternative AHU HX configurations. A dual vapor compression system showed COP improvement of 20%, however, required additional components, increased unit size, and increased cost. Two types of ejector enhanced vapor compression cycles with dual evaporators improved system COP by 9 to 11%, and reduced AHU losses by as much as 18%, with design changes limited to the AHU, no unit physical size increase, and a moderate increase to system first cost. Desiccant assisted air-conditioning required increased air flow rate resulting in higher fan power and the desiccant wheel increased sensible heat load leading to increased compressor power and reduced system COP. Dual evaporator cycles were found to degrade performance due to increased expansion losses. Optimized single slab HX designs used in place of the traditional A-coil HX led to 44–49% reduction in aluminum, 47–60% less refrigerant charge, and improved HX velocity distribution.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗

Low-Power, Chip-Scale, CO2 Gas Sensors for Spacesuit Monitoring

N5 Sensors, Inc. and NASA through a STTR program are jointly developing ultra-small, low-power carbon dioxide (CO2) gas sensors, suited for monitoring CO2 levels inside the spacesuits. Due to the unique environmental conditions within the spacesuits, such as high humidity, large temperature and operating pressure swings, measurement of key gases relevant to astronaut's safety and health such as carbon dioxide, is quite challenging. Conventional non-dispersive infrared absorption based CO2 sensors cannot be effectively implemented inside the spacesuits due to their sizes, weights, and power constraints. Metal-oxide based sensors have been effectively miniaturized for several applications, however detection of CO2 utilizing metal-oxide based sensors is challenging due to the chemical inertness and high stability of CO2 at room-temperatures. To mitigate these limitations, unique chip-scale, nanoengineered chemiresistive gas-sensing architecture has been developed - to allow the Metal-oxide sensors to operate in space-suite environmental conditions. Unique design combining the selective adsorption properties of the nanophotocatalytic clusters of metal-oxides and metals, provides selective detection of CO2 in high relative humidity conditions. All electronic design provides a compact and low-power solution, which can be implemented for multipoint detection of CO2 inside the spacesuits. This paper will describe a novel approach in refining the sensor architecture, development of new photocatalytic material for better sensor performance.

Thomson, Brian↗

A numerical study of surface-wave-based tunnel detection at the Black Diamond Mines Regional Preserve, California

Detecting underground voids, such as old mine workings, solution cavities in karst terrain, or unknown tunnels such as illicit cross-border tunnels, is a challenging problem for geophysics and an important concern for geotechnical design, public safety, and domestic security. Seismic surface-wave-based detection methods have become increasingly popular for detecting relatively shallow and small targets; however, the theoretical limitations of these methods have thus far remained unclear. We use a suite of 3D numerical simulations inspired by a tunnel detection experiment carried out at the Black Diamond Mines Regional Preserve (BDM) in northern California. The geophysical anomalies predicted by our numerical simulations at BDM agree with field observations, and our estimates for the location of the primary tunnel target agree with historical records in the area. Using our calibrated numerical model, we perform a parametric study to determine the effect of tunnel size, depth of burial, filling material, and source characteristics to determine the range over which surface-wave backscattering and attenuation-based methods are effective. Additionally, we perform a regression analysis to determine a relationship for the maximum depth at which a tunnel may be detected via these approaches, given the target diameter, wavelength of interest, and the signal-to-noise ratio.

58 GEOSCIENCES↗

Development of a Reference Model for Molten-Salt-Cooled Pebble-Bed Reactor Using SAM

To support the development and utilization of the SAM code for fluoride-salt-cooled high-temperature pebble-bed reactor (PB-FHR) safety analysis and licensing, an effort was devoted to developing reference models for PB-FHR primary loop and the reactor cavity cooling system (RCCS). A reference standard problem of a prototypical reactor design is foundational to NRC and industry to verify the adequacy of computer codes and evaluation models for a specific reactor type. The SAM code was enhanced for the reference PB-FHR model development, including a 1D-3D flow coupling scheme and conjugate heat transfer between porous media and solid structures. The reference FHR primary loop model was developed based on the UC Berkeley Mk1 FHR design with additional design features from the Kairos Power’s KP-FHR core. The PB-FHR core is modeled by a two-dimensional porous medium while the rest of the primary loop is represented by a SAM one-dimensional model. A SAM one-dimensional primary loop model was also developed for comparison using a single channel approach for the reactor core. Furthermore, the water-based NSTF cavity was modeled using SAM multi-dimensional flow module, to assist in evaluating SAM capabilities of modeling the emergency heat removal systems relying on RCCS concepts.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

Detecting Mode Confusion Through Formal Modeling and Analysis

Aircraft safety has improved steadily over the last few decades. While much of this improvement can be attributed to the introduction of advanced automation in the cockpit, the growing complexity of these systems also increases the potential for the pilots to become confused about what the automation is doing. This phenomenon, often referred to as mode confusion, has been involved in several accidents involving modern aircraft. This report describes an effort by Rockwell Collins and NASA Langley to identify potential sources of mode confusion through two complementary strategies. The first is to create a clear, executable model of the automation, connect it to a simulation of the flight deck, and use this combination to review of the behavior of the automation and the man-machine interface with the designers, pilots, and experts in human factors. The second strategy is to conduct mathematical analyses of the model by translating it into a formal specification suitable for analysis with automated tools. The approach is illustrated by applying it to a hypothetical, but still realistic, example of the mode logic of a Flight Guidance System.

Miller, Steven P.↗

Definition and Development of Habitation Readiness Levels (HRLs) for Planetary Surface Habitats

One could argue that NASA has never developed a true habitat for a planetary surface, with only the Lunar Module from the 1960's-era Apollo Program providing for a sparse 2 person, 3 day capability. An integral part of NASA's current National Vision for Space Exploration is missions back to the moon and eventually to Mars. One of the largest leaps i11 lunar surface exploration beyond the Apollo lunar missions will be the conduct of these extended duration human missions. These missions could range from 30 to 90 days in length initially and may eventually range up to 500 days in length. To enable these extended duration human missions, probably the single-most important lunar surface element is the Surface Habitat. The requirements that must be met by the Surface Habitat will go far beyond the safety, performance and operational requirements of the Lunar Module, and NASA needs to develop a basis for making intelligent, technically correct habitat design decisions. This paper will discuss the possibilities of the definition and development of a Habitation Readiness Level (HRL) scale that might be mapped to current Technology Readiness Levels (TRLs) for technology development. HRLs could help measure how well a particular technology thrust is advanced by a proposed planetary habitat concept. The readiness level would have to be measured differently than TRLs, and may include such milestones as habitat design performance under simulated mission operations and constraints (including relevant field testing), functional allocation demonstrations, crew interface evaluation and post-occupancy evaluation. With many concepts for planetary habitats proposed over the past 20 years, there are many strategic technical challenges facing designers of planetary habitats that will support NASA's exploration of the moon and Mars. The systematic assessment of a variety of planetary habitat options will be an important approach and will influence the associated requirements for human design, volumetrics, functionality, systems hardware and operations.

Connolly, Janis H.↗