Search NASA⌕ Search

SEARCH · Search NASA

Results for “Integrated formal methods”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 163 records · Page 9

Advanced training systems

Training is a major endeavor in all modern societies. Common training methods include training manuals, formal classes, procedural computer programs, simulations, and on-the-job training. NASA's training approach has focussed primarily on on-the-job training in a simulation environment for both crew and ground based personnel. NASA must explore new approaches to training for the 1990's and beyond. Specific autonomous training systems are described which are based on artificial intelligence technology for use by NASA astronauts, flight controllers, and ground based support personnel that show an alternative to current training systems. In addition to these specific systems, the evolution of a general architecture for autonomous intelligent training systems that integrates many of the features of traditional training programs with artificial intelligence techniques is presented. These Intelligent Computer Aided Training (ICAT) systems would provide much of the same experience that could be gained from the best on-the-job training.

Savely, Robert T.↗

Reducing software security risk through an integrated approach research initiative model based verification of the Secure Socket Layer (SSL) Protocol

This document discusses the verification of the Secure Socket Layer (SSL) communication protocol as a demonstration of the Model Based Verification (MBV) portion of the verification instrument set being developed under the Reducing Software Security Risk (RSSR) Trough an Integrated Approach research initiative. Code Q of the National Aeronautics and Space Administration (NASA) funds this project. The NASA Goddard Independent Verification and Validation (IV&V) facility manages this research program at the NASA agency level and the Assurance Technology Program Office (ATPO) manages the research locally at the Jet Propulsion Laboratory (California institute of Technology) where the research is being carried out.

software security↗

Axial-Flow Turbine Rotor Discharge-Flow Overexpansion and Limit-Loading Condition, Part I: Computational Fluid Dynamics (CFD) Investigation

A Computational Fluid Dynamic (CFD) investigation is conducted over a two-dimensional axial-flow turbine rotor blade row to study the phenomena of turbine rotor discharge flow overexpansion at subcritical, critical, and supercritical conditions. Quantitative data of the mean-flow Mach numbers, mean-flow angles, the tangential blade pressure forces, the mean-flow mass flux, and the flow-path total pressure loss coefficients, averaged or integrated across the two-dimensional computational domain encompassing two blade-passages, are obtained over a series of 14 inlet-total to exit-static pressure ratios, from 1.5 (un-choked; subcritical condition) to 10.0 (supercritical with excessively high pressure ratio.) Detailed flow features over the full domain-of-computation, such as the streamline patterns, Mach contours, pressure contours, blade surface pressure distributions, etc. are collected and displayed in this paper. A formal, quantitative definition of the limit loading condition based on the channel flow theory is proposed and explained. Contrary to the comments made in the historical works performed on this subject, about the deficiency of the theoretical methods applied in analyzing this phenomena, using modern CFD method for the study of this subject appears to be quite adequate and successful. This paper describes the CFD work and its findings.

Axial Flow↗

The prediction of the noise of supersonic propellers in time domain - New theoretical results

In this paper, a new formula for the prediction of the noise of supersonic propellers is derived in the time domain which is superior to the previous formulations in several respects. The governing equation is based on the Ffowcs Williams-Hawkings (FW-H) equation with the thickness source term replaced by an equivalent loading source term derived by Isom (1975). Using some results of generalized function theory and simple four-dimensional space-time geometry, the formal solution of the governing equation is manipulated to a form requiring only the knowledge of blade surface pressure data and geometry. The final form of the main result of this paper consists of some surface and line integrals. The surface integrals depend on the surface pressure, time rate of change of surface pressure, and surface pressure gradient. These integrals also involve blade surface curvatures. The line integrals which depend on local surface pressure are along the trailing edge, the shock traces on the blade, and the perimeter of the airfoil section at the inner radius of the blade. The new formulation is for the full blade surface and does not involve any numerical observer time differentiation. The method of implementation on a computer for numerical work is also discussed.

Farassat, F.↗

Open architectures for formal reasoning and deductive technologies for software development

The objective of this project is to develop an open architecture for formal reasoning systems. One goal is to provide a framework with a clear semantic basis for specification and instantiation of generic components; construction of complex systems by interconnecting components; and for making incremental improvements and tailoring to specific applications. Another goal is to develop methods for specifying component interfaces and interactions to facilitate use of existing and newly built systems as 'off the shelf' components, thus helping bridge the gap between producers and consumers of reasoning systems. In this report we summarize results in several areas: our data base of reasoning systems; a theory of binding structures; a theory of components of open systems; a framework for specifying components of open reasoning system; and an analysis of the integration of rewriting and linear arithmetic modules in Boyer-Moore using the above framework.

Mccarthy, John↗

Magnetocentrifugally driven flows from young stars and disks. 2: Formulation of the dynamical problem

We formulate the dynamical problem of a cool wind centrifugally driven from the magnetic interface of a young star and an adjoining Keplerian disk. We examine the situation for mildly accreting T Tauri stars that rotate slowly as well as rapidly accreting protostars that rotate near break-up. In both cases a wind can be driven from a small X-region just outside the stellar magnetopause, where the field lines assume an open geometry and are rooted to material that rotates at an angular speed equal both to the local Keplerian value and to the stellar angular speed. Assuming axial symmetry for the ideal magnetohydrodynamic flow, which requires us to postpone asking how the (lightly ionized) gas is loaded onto field lines, we can formally integrate all the governing equations analytically except for a partial equation that describes how streamlines spread in the meridional plane. Apart from the difficulty of dealing with PDEs of mixed type, finding the functional forms of the conserved quantities along streamlines - the ratio beta of magnetic field to mass flux, the specific energy H of the fluid in the rotating frame, and the total specific angular momentum J carried in the matter and the field - constitutes a standard difficulty in this kind of (Grad-Shafranov) formalism. Fortunately, because the ratio of the thermal speed of the mass-loss regions to the Keplerian speed of rotation of the interface constitutes a small parameter epsilon, we can attack the overall problem by the method of matched asymptotic expansions. This procedure leads to a natural and systematic technique for obtaining the relevant functional dependences of beta, H, and J. Moreover, we are able to solve analytically for the properties of the flow emergent from the small transsonic region driven by gas pressure without having to specify the detailed form of any of the conserved functions, beta, H, and J. This analytical solution provides inner boundary conditions for the numerical computation in a companion paper by Najita & Shu of the larger region where the main acceleration to terminal speeds occurs.

Shu, Frank H.↗

Method of resolving radio phase ambiguity in satellite orbit determination

For satellite orbit determination, the most accurate observable available today is microwave radio phase, which can be differenced between observing stations and between satellites to cancel both transmitter- and receiver-related errors. For maximum accuracy, the integer cycle ambiguities of the doubly differenced observations must be resolved. To perform this ambiguity resolution, a bootstrapping strategy is proposed. This strategy requires the tracking stations to have a wide ranging progression of spacings. By conventional 'integrated Doppler' processing of the observations from the most widely spaced stations, the orbits are determined well enough to permit resolution of the ambiguities for the most closely spaced stations. The resolution of these ambiguities reduces the uncertainty of the orbit determination enough to enable ambiguity resolution for more widely spaced stations, which further reduces the orbital uncertainty. In a test of this strategy with six tracking stations, both the formal and the true errors of determining Global Positioning System satellite orbits were reduced by a factor of 2.

Councelman, Charles C., III↗

Modeling Guidelines for Code Generation in the Railway Signaling Context

Modeling guidelines constitute one of the fundamental cornerstones for Model Based Development. Their relevance is essential when dealing with code generation in the safety-critical domain. This article presents the experience of a railway signaling systems manufacturer on this issue. Introduction of Model-Based Development (MBD) and code generation in the industrial safety-critical sector created a crucial paradigm shift in the development process of dependable systems. While traditional software development focuses on the code, with MBD practices the focus shifts to model abstractions. The change has fundamental implications for safety-critical systems, which still need to guarantee a high degree of confidence also at code level. Usage of the Simulink/Stateflow platform for modeling, which is a de facto standard in control software development, does not ensure by itself production of high-quality dependable code. This issue has been addressed by companies through the definition of modeling rules imposing restrictions on the usage of design tools components, in order to enable production of qualified code. The MAAB Control Algorithm Modeling Guidelines (MathWorks Automotive Advisory Board)[3] is a well established set of publicly available rules for modeling with Simulink/Stateflow. This set of recommendations has been developed by a group of OEMs and suppliers of the automotive sector with the objective of enforcing and easing the usage of the MathWorks tools within the automotive industry. The guidelines have been published in 2001 and afterwords revisited in 2007 in order to integrate some additional rules developed by the Japanese division of MAAB [5]. The scope of the current edition of the guidelines ranges from model maintainability and readability to code generation issues. The rules are conceived as a reference baseline and therefore they need to be tailored to comply with the characteristics of each industrial context. Customization of these recommendations has been performed for the automotive control systems domain in order to enforce code generation [7]. The MAAB guidelines have been found profitable also in the aerospace/avionics sector [1] and they have been adopted by the MathWorks Aerospace Leadership Council (MALC). General Electric Transportation Systems (GETS) is a well known railway signaling systems manufacturer leading in Automatic Train Protection (ATP) systems technology. Inside an effort of adopting formal methods within its own development process, GETS decided to introduce system modeling by means of the MathWorks tools [2], and in 2008 chose to move to code generation. This article reports the experience performed by GETS in developing its own modeling standard through customizing the MAAB rules for the railway signaling domain and shows the result of this experience with a successful product development story.

Ferrari, Alessio↗

An Overview of SAL

To become practical for assurance, automated formal methods must be made more scalable, automatic, and cost-effective. Such an increase in scope, scale, automation, and utility can be derived from an emphasis on a systematic separation of concerns during verification. SAL (Symbolic Analysis Laboratory) attempts to address these issues. It is a framework for combining different tools to calculate properties of concurrent systems. The heart of SAL is a language, developed in collaboration with Stanford, Berkeley, and Verimag for specifying concurrent systems in a compositional way. Our instantiation of the SAL framework augments PVS with tools for abstraction, invariant generation, program analysis (such as slicing), theorem proving, and model checking to separate concerns as well as calculate properties (i.e., perform, symbolic analysis) of concurrent systems. We. describe the motivation, the language, the tools, their integration in SAL/PAS, and some preliminary experience of their use.

Bensalem, Saddek↗

The Frequency Detuning Correction and the Asymmetry of Line Shapes: The Far Wings of H2O-H2O

A far-wing line shape theory which satisfies the detailed balance principle is applied to the H2O-H2O system. Within this formalism, two line shapes are introduced, corresponding to band-averages over the positive and negative resonance lines, respectively. Using the coordinate representation, the two line shapes can be obtained by evaluating 11-dimensional integrations whose integrands are a product of two factors. One depends on the interaction between the two molecules and is easy to evaluate. The other contains the density matrix of the system and is expressed as a product of two 3-dimensional distributions associated with the density matrices of the absorber and the perturber molecule, respectively. If most of the populated states are included in the averaging process, to obtain these distributions requires extensive computer CPU time, but only have to be computed once for a given temperature. The 11-dimensional integrations are evaluated using the Monte Carlo method, and in order to reduce the variance, the integration variables are chosen such that the sensitivity of the integrands on them is clearly distinguished.

Ma, Q.↗

Probabilistic Unsteady Aerodynamic Analysis

Probabilistic CFD design is needed because we are asked to do more with less. To cost effectively accomplish the design task, we need to formally quantify the effect of uncertainties (variables) in the design. Probabilistic design is one effective method to formally quantify the effect of uncertainties. Our objective is to establish a revolutionary new early design process, by developing non-deterministic physics-based probabilistic design tools, which will include all the life cycle processes. This work was concerned with the usefulness of parametric optimization method coupled with a Navier-Stokes analysis code for the aero-thermodynamic design of turbomachinery combustor liner. The interconnection between the CFD code and NESSUS codes will facilitate the coupling between the thermal profiles and structural design. We have developed new concepts for reducing the computational cost of unsteady, three-dimensional, compressible aerodynamic analyses for multistage turbomachinery flows. The flow was modeled by the three-dimensional Favre-Reynolds-averaged Navier-Stokes equations using the k-E turbulence closure, which was integrated using an implicit third-order upwind solver. The methodology developed in this work is expected to lead to the design optimization of turbomachinery blades.

Gorla, Rama S. R.↗

An Overview of Starfish: A Table-Centric Tool for Interactive Synthesis

Engineering is an interactive process that requires intelligent interaction at many levels. My thesis [1] advances an engineering discipline for high-level synthesis and architectural decomposition that integrates perspicuous representation, designer interaction, and mathematical rigor. Starfish, the software prototype for the design method, implements a table-centric transformation system for reorganizing control-dominated system expressions into high-level architectures. Based on the digital design derivation (DDD) system a designer-guided synthesis technique that applies correctness preserving transformations to synchronous data flow specifications expressed as co- recursive stream equations Starfish enhances user interaction and extends the reachable design space by incorporating four innovations: behavior tables, serialization tables, data refinement, and operator retiming. Behavior tables express systems of co-recursive stream equations as a table of guarded signal updates. Developers and users of the DDD system used manually constructed behavior tables to help them decide which transformations to apply and how to specify them. These design exercises produced several formally constructed hardware implementations: the FM9001 microprocessor, an SECD machine for evaluating LISP, and the SchemEngine, garbage collected machine for interpreting a byte-code representation of compiled Scheme programs. Bose and Tuna, two of DDD s developers, have subsequently commercialized the design derivation methodology at Derivation Systems, Inc. (DSI). DSI has formally derived and validated PCI bus interfaces and a Java byte-code processor; they further executed a contract to prototype SPIDER-NASA's ultra-reliable communications bus. To date, most derivations from DDD and DRS have targeted hardware due to its synchronous design paradigm. However, Starfish expressions are independent of the synchronization mechanism; there is no commitment to hardware or globally broadcast clocks. Though software back-ends for design derivation are limited to the DDD stream-interpreter, targeting synchronous or real-time software is not substantively different from targeting hardware.

Tsow, Alex↗

Effect of molecular anisotropy on beam scattering measurements

Within the energy sudden approximation, the total integral and total differential scattering cross sections are given by the angle average of scattering cross sections computed at fixed rotor orientations. Using this formalism the effect of molecular anisotropy on scattering of He by HCl and by CO is examined. Comparisons with accurate close coupling calculations indicate that this approximation is quite reliable, even at very low collision energies, for both of these systems. Comparisons are also made with predictions based on the spherical average of the interaction. For HCl the anisotropy is rather weak and its main effect is a slight quenching of the oscillations in the differential cross sections relative to predictions of the spherical averaged potential. For CO the anisotropy is much stronger, so that the oscillatory pattern is strongly quenched and somewhat shifted. It appears that the sudden approximation provides a simple yet accurate method for describing the effect of molecular anisotropy on scattering measurements.

Goldflam, R.↗

Knowledge-Based Aircraft Automation: Managers Guide on the use of Artificial Intelligence for Aircraft Automation and Verification and Validation Approach for a Neural-Based Flight Controller

The ultimate goal of this report was to integrate the powerful tools of artificial intelligence into the traditional process of software development. To maintain the US aerospace competitive advantage, traditional aerospace and software engineers need to more easily incorporate the technology of artificial intelligence into the advanced aerospace systems being designed today. The future goal was to transition artificial intelligence from an emerging technology to a standard technology that is considered early in the life cycle process to develop state-of-the-art aircraft automation systems. This report addressed the future goal in two ways. First, it provided a matrix that identified typical aircraft automation applications conducive to various artificial intelligence methods. The purpose of this matrix was to provide top-level guidance to managers contemplating the possible use of artificial intelligence in the development of aircraft automation. Second, the report provided a methodology to formally evaluate neural networks as part of the traditional process of software development. The matrix was developed by organizing the discipline of artificial intelligence into the following six methods: logical, object representation-based, distributed, uncertainty management, temporal and neurocomputing. Next, a study of existing aircraft automation applications that have been conducive to artificial intelligence implementation resulted in the following five categories: pilot-vehicle interface, system status and diagnosis, situation assessment, automatic flight planning, and aircraft flight control. The resulting matrix provided management guidance to understand artificial intelligence as it applied to aircraft automation. The approach taken to develop a methodology to formally evaluate neural networks as part of the software engineering life cycle was to start with the existing software quality assurance standards and to change these standards to include neural network development. The changes were to include evaluation tools that can be applied to neural networks at each phase of the software engineering life cycle. The result was a formal evaluation approach to increase the product quality of systems that use neural networks for their implementation.

Broderick, Ron↗

A NASA initiative: Software engineering for reliable complex systems

The objective is the development of methods, technology, and skills that will enable NASA to cost-effectively specify, build, and manage reliable software which can evolve and be maintained over an extended period. The need for such software is rooted in the increasing integration of software and computing components into NASA systems. Current NASA Software Engineering expertise was applied toward some of the largest reliable systems including: shuttle launch; ground support; shuttle simulation; minor control; satellite tracking; and scientific data systems. Unfortunately, no theory exists for reliable complex software systems. NASA is seeking to fill this theoretical gap through a number of approaches. One such approach is to conduct research on theoretical foundations for managing complex software systems. It includes: communication models, new and modified paradigms, and life-cycle models. Another approach is research in the theoretical foundations for reliable software development and validation. It focuses upon formal specifications, programming languages, software engineering systems, software reuse, formal verification, and software safety. Further approaches involve benchmarking a NASA software environment, experimentation within the NASA context, evolution of present NASA methodology, and transfer of technology to the space station software support environment.

Holcomb, Lee B.↗

Automated Verification of Programmable Logic Controller Programs Against Structured Natural Language Requirements

PLCverif is an actively developed project at CERN, enabling the formal verification of Programmable Logic Controller (PLC) programs in critical systems. In this paper, we present our work on improving the formal requirements specification experience in PLCverif through the use of natural language. To this end, we integrate NASA’s FRET, a formal requirement elicitation and authoring tool, into PLCverif. FRET is used to specify formal requirements in structured natural language, which automatically translates into temporal logic formulae. FRET’s output is then directly used by PLCverif for verification purposes. We discuss practical challenges that PLCverif users face when authoring requirements and the FRET features that help alleviate these problems. We present the new requirement formalization workflow and report our experience using it on two critical CERN case studies.

formal methods↗

A Performance Analysis of Folding Conformal Propeller Blade Designs

NASA’s X-57 Maxwell flight demonstrator has a high-lift system that includes 12 fixed- pitch high-lift propellers located upstream of the wing leading edge for lift augmentation at low speeds. These high-lift propellers are only required at low speeds, and to reduce drag, the propeller blades are folded conformally along the nacelles at other operating conditions. The method of designing the high-lift blades permits several variations of blade cross-section placement along the nacelle surface and a comparative performance analysis was needed to determine if any particular design showed significant benefits. We analyzed the performance of three conformal high-lift propeller designs and compared them to that of a non-conformal baseline propeller to establish both the benefit of stowable blades and the value of each variation. In this study, we first performed a drag analysis of each design in the stowed configuration at the X-57 cruise speed and altitude to determine the drag benefits of each conforming method. Then, among blade designs we compared the thrust, power, and lift for a given input shaft speed to establish any performance losses from the baseline. This analysis shows that the conformal blade designs do not have any appreciable performance losses compared to the baseline blades. Moreover, although the drag in the cruise condition is significantly less than for the non-folding baseline, the drag benefits of each conforming blade approach are similar and the value of each approach largely depends on the ease of integration into the nacelle. This paper presents the results of these studies and discusses the benefits and drawbacks of implementing the conformal blade designs. Specifically, we demonstrate that folding, conformal propeller blades contribute significantly less to cruise drag when compared to windmilling, with an increase relative to a. We also show a less than 1% difference in performance formal, folding propellers and the non-conforming baseline propeller.

Litherland, Brandon L.↗

Integrated topology and shape optimization in structural design

Structural optimization procedures usually start from a given design topology and vary its proportions or boundary shapes to achieve optimality under various constraints. Two different categories of structural optimization are distinguished in the literature, namely sizing and shape optimization. A major restriction in both cases is that the design topology is considered fixed and given. Questions concerning the general layout of a design (such as whether a truss or a solid structure should be used) as well as more detailed topology features (e.g., the number and connectivities of bars in a truss or the number of holes in a solid) have to be resolved by design experience before formulating the structural optimization model. Design quality of an optimized structure still depends strongly on engineering intuition. This article presents a novel approach for initiating formal structural optimization at an earlier stage, where the design topology is rigorously generated in addition to selecting shape and size dimensions. A three-phase design process is discussed: an optimal initial topology is created by a homogenization method as a gray level image, which is then transformed to a realizable design using computer vision techniques; this design is then parameterized and treated in detail by sizing and shape optimization. A fully automated process is described for trusses. Optimization of two dimensional solid structures is also discussed. Several application-oriented examples illustrate the usefulness of the proposed methodology.

Bremicker, M.↗