Search NASA⌕ Search

SEARCH · Search NASA

Results for “Minimum risk”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 163 records · Page 9

Development of a High-Propellant Throughput Small Spacecraft Electric Propulsion System to Enable Lower Cost NASA Science Missions

This paper describes recent progress at the NASA Glenn Research Center (GRC) in the development and demonstration of an integrated high-propellant throughput small spacecraft electric propulsion (HT-SSEP) system based on a Hall-effect thruster. A center-mounted cathode and an innovative magnetic circuit topology were implemented in the design of the Hall-effect thruster to achieve high-propellant throughput, high performance, and efficient packaging. To minimize technical risk, the HT-SSEP development approach sought to limit design features and materials to those with a clear path-to-flight. A propellant throughput capability of greater than 100 kg at a minimum thruster efficiency of 50% was targeted. The proof-of-concept NASA-H64M laboratory model (LM) thruster was designed, fabricated, and tested at GRC in fiscal year 2018. The thruster development leveraged heritage Hall-effect thruster design and manufacturing processes wherever appropriate. Recent NASA advances in Hall-effect thruster technology were also leveraged. A scalable discharge power supply (DPS) capable of powering the H64M-LM was developed, then demonstrated as part of an integrated system test. The DPS uses commercial off-the-shelf components with spaceflight equivalents. A keeper supply with DC ignitor was breadboarded, then demonstrated with a laboratory cathode. Finally, feed system trade studies were performed to ascertain what feed system architecture might be appropriate for an HT-SSEP system. This paper details the motivations for the project, the development approach, the chosen sub-system architectures, design considerations, and test results.

Benavides, Gabriel F.↗

Scaling Evaluation of Ice-Crystal Icing on a Modern Turbofan Engine in PSL Using the COMDES-MELT Code

This paper presents preliminary ice-crystal icing (ICI) altitude scaling evaluation results of a Honeywell Uncertified Research Engine (HURE) that was tested in the NASA Glenn Research Center Propulsion Systems Laboratory (PSL) during January of 2018. This engine geometry features a hidden core design to keep the core less exposed. The engine was fitted with internal video cameras to observe various ice buildup processes at multiple selected locations within the engine core flow path covering the fan stator, the splitter-lip/shroud/strut, and the high pressure compressor (HPC) variable inlet guide vane (IGV) regions. The potential ice accretion risk was pre-determined to occur by using NASA’s in-house 1D Engine Icing Risk assessment code, COMDES-MELT. The code was successful in predicting the risk of ice accretion in adiabatic regions like the fan-stator of the HURE at specific engine operating points. However at several operating points during the test, liquid water was observed running along the shroud toward the variable IGV of the HPC regions with an air temperature well below freezing, thus no particle melting could have occurred due to heating from the air alone. It was reasoned that other sources of heat were present in that region. To account for these heat sources the inlet total temperature was adjusted to give a wet bulb temperature of 24 F below the standard minimum wet bulb temperature of 492 R to allow ice to accrete in the splitter-lip/shroud/strut region, which was determined from a reference case where hard ice was observed in that region. With that adjustment the COMDES-MELT code was successful in providing operating points where there was a risk of ice accretion during the test campaign. In addition to calculating possible conditions at different selected lower altitudes, simulations were run to determine potential inlet conditions that could lead to ice-crystal accretion along the prescribed stations where the cameras were available. From there, scaled test conditions were determined by best matching the following three icing related parameters of the reference condition: (1) the local air total wet bulb temperature, (2) the local ice crystal cloud melt ratio and (3) the engine fan face ice/water to air mass flux ratio of the ice crystal cloud. Instantaneous images taken from the time-lapsed movies of ice buildup were used along with the relevant thermodynamic data of air, water vapor and local icing condition to help evaluate how closely the proposed altitude scaling method could be used in ground based test facility to duplicate selected reference ICI features observed at specific location inside this engine at different scale altitudes. Discussions on observed limitation for engine icing scaling application from this test campaign and needed improvement are provided. A scaling test procedure to help identify potential ICI risk conditions and possible ice accretion locations of a new turbofan engine is evaluated in PSL.

Engine Testing in PSL↗

Analysis of the Honeywell Uncertified Research Engine with Ice Crystal Cloud Ingestion at Simulated Altitudes

The Honeywell Uncertified Research Engine (HURE), a research version of a turbofan engine that never entered production, was tested in the NASA Propulsion System Laboratory (PSL), an altitude test facility at the NASA Glenn Research Center. The PSL is a facility that is equipped with water spray bars capable of producing an ice cloud consisting of ice particles, having a controlled particle diameter and concentration in the air flow. To develop the test matrix of the HURE, numerical analysis of flow and ice particle thermodynamics was performed on the compression system of the turbofan engine to predict operating conditions that could potentially result in a risk of ice accretion due to ice crystal ingestion. The goal of the test matrix was to provide operating conditions such that ice would accrete in either the fan-stator through the inlet guide vane region of the compression system or within the first stator of the high pressure compressor. The predictive analyses were performed with the mean line compressor flow modeling code (COMDESMELT) which includes an ice particle model. The HURE engine was tested in PSL with the ice cloud over the range of operating conditions of altitude, ambient temperature, simulated flight Mach number, and fan speed with guidance from the analytical predictions. The engine was fitted with video cameras at strategic locations within the engine compression system flow path where ice was predicted to accrete, in order to visually confirm ice accretion when it occurred. In addition, traditional compressor instrumentation such as total pressure and temperature probes, static pressure taps, and metal temperature thermocouples were installed in targeted areas where the risk of ice accretion was expected. The current research focuses on the analysis of the data that was obtained after testing the HURE engine in PSL with ice crystal ingestion. The computational method (COMDES-MELT) was enhanced by computing key parameters through the fan-stator at multiple span wise locations, in order to increase the fidelity with the current mean-line method. The Icing Wedge static wet-bulb temperature thresholds were applied for determining the risk of ice accretion in the fan-stator, which is thought to be an adiabatic region. At some operating conditions near the splitter-lip region, other sources of heat (non-adiabatic walls) were suspected to be the cause of accretion, and the Icing Wedge was not applied to predict accretion at that location. A simple order-of-magnitude heat transfer model was implemented into the COMDES-MELT code to estimate the wall temperature minimum and maximum thresholds that support ice accretion, as observed by video confirmation. The results from this model spanned the range of wall temperatures measured on a previous engine that experienced ice accretion at certain operating conditions. The goal of this study is to show that the computational process developed on earlier engine icing tests can be used to provide an icing risk assessment in adiabatic regions for other engines.

Turbofan engine↗

100-LBF LO2/LCH4 - Reaction Control Engine Technology Development for Future Space Vehicles

The National Aeronautics and Space Administration (NASA) has identified liquid oxygen (LO2)/liquid methane (LCH4) propulsion systems as promising options for some future space vehicles. NASA issued a contract to Aerojet to develop a 100-lbf (445 N) LO2/LCH4 Reaction Control Engine (RCE) aimed at reducing the risk of utilizing a cryogenic reaction control system (RCS) on a space vehicle. Aerojet utilized innovative design solutions to develop an RCE that can ignite reliably over a broad range of inlet temperatures, perform short minimum impulse bits (MIB) at small electrical pulse widths (EPW), and produce excellent specific impulse (Isp) across a range of engine mixture ratios (MR). These design innovations also provide a start transient with a benign MR, ensuring good thrust chamber compatibility and long life. In addition, this RCE can successfully operate at MRs associated with main engines, enabling the RCE to provide emergency backup propulsion to minimize vehicle propellant load and overall system mass.

Robinson, Philip J.↗

100-Lb(f) LO2/LCH4 Reaction Control Engine Technology Development for Future Space Vehicles

The National Aeronautics and Space Administration (NASA) has identified liquid oxygen (LO2)/liquid methane (LCH4) propulsion systems as promising options for some future space vehicles. NASA issued a contract to Aerojet to develop a 100-lbf (445 N) LO2/LCH4 Reaction Control Engine (RCE) aimed at reducing the risk of utilizing a cryogenic reaction control system (RCS) on a space vehicle. Aerojet utilized innovative design solutions to develop an RCE that can ignite reliably over a broad range of inlet temperatures, perform short minimum impulse bits (MIB) at small electrical pulse widths (EPW), and produce excellent specific impulse (Isp) across a range of engine mixture ratios (MR). These design innovations also provide a start transient with a benign MR, ensuring good thrust chamber compatibility and long life. In addition, this RCE can successfully operate at MRs associated with main engines, enabling the RCE to provide emergency backup propulsion to minimize vehicle propellant load and overall system mass.

Robinson, Philip J.↗

Decision Aid for Conjunction Risk Mitigation by Differential Drag

In the previous five years, the rate of conjunctions that the NASA Conjunction Assessment Risk Analysis (CARA) team processed and analyzed has more than tripled. (NASA CARA, 2024) New missions in the early development phases are now required to plan for dealing with conjunctions under the present space environment, and also projecting forward into a future likely with even further increased utilization of the space environment. Some missions are investigating the possibility of using differential drag to remediate conjunctions without expending limited fuel or for missions without propulsive capabilities. The NASA CARA team studied the historical record of conjunctions to evaluate the circumstances under which differential drag may be successfully applied and have developed a series of tables to use as a decision aid for missions considering differential drag. Currently, if a CARA-protected mission with maneuvering capabilities is predicted to have a conjunction with probability of collision (Pc) greater than 7E-5 (the default value of the ‘yellow threshold’, which may have some other value agreed by CARA and the mission during the Orbital Collison Avoidance Planning (OCAP) process), CARA will use its Maneuver Trade Space (MTS) tool to evaluate and recommend options for the timing and magnitude of a risk mitigation maneuver (RMM), based on the mission’s capabilities. If the conjunction’s Pc is greater than 1E-4, the ‘red threshold’, then an RMM must be executed per NASA Procedural Requirements (NPR) 8079.1 (NASA, 2023), although missions may execute an RMM even if the Pc is lower. The magnitude of the maneuver is typically a few cm/s, and CARA estimates how many will be required for the mission’s nominal lifetime – typically a few per year – during the OCAP process, to inform the mission’s delta-V requirement. For traditional satellites, this is usually smaller than other requirements for orbit insertion, maintenance, and disposal, but for CubeSats or other small satellite missions, a propulsion system may not provide much more than a few cm/s of delta-V or may not fit at all within the available budget of money, time, size, weight, and/or power (SWaP). Conversely, CubeSats often have deployable solar panels, which offer the capacity to have much higher areas facing some directions than others. Such a mission can instead use ‘differential drag’ to remediate a conjunction -- in other words, change its drag area (usually increasing) to deviate from the predicted collision course. This is how Planet’s Dove spacecraft maintain their formations and remediate conjunction risks without having on-board propulsion (Foster, et al., 2017) (Griffith, et al., 2021). CARA has been developing improvements to MTS to support differential-drag for NASA's missions -- where it is effective. CARA records all conjunctions of their protected payloads, with historical records starting in 2005 (with significant conjunction events starting to occur on or after 2013). From this record, approximately 7,300 had a Pc greater than 1E-4 at 3 days prior to the time of closest approach, the time analyzed for differential drag efficacy. Of those, approximately 4,300 had fully-defined covariance matrices stored for both the primary and secondary objects; this set of conjunctions is the basis for the analysis of this work. CARA’s MTS tool was used to propagate the primary satellite forward from that decision point with varying degrees of increase to ballistic coefficient (BC). Because these conjunctions came from multiple missions, the nondimensional ‘delta-BC’ factor was used to quantify and normalize the increase in ballistic coefficient, defined as follows: Delta-BC = BC_new / BC_old - 1 Positive delta-BC factors represent an increase in drag compared to the nominal attitude, while negative delta-BC factors (to a minimum of -1) represent a decrease in drag. At the conclusion of the differential-drag ‘maneuver’, the Pc was recalculated to evaluate whether or not the conjunction was mitigated (Pc < 3E-6). These results were then binned and sorted along several axes, including altitude, amount of delta-BC, and (pre-maneuver) rate of energy dissipation (EDR), to identify underlying patterns. The altitude plot is shown in Figure 1. To validate this analysis, we consulted the record of a NASA mission which uses differential drag to maintain its orbit and remediate conjunction risk. CARA’s empirical record of the mission’s orbit history suggests it achieves a delta-BC of 2.2. Of the twenty-one RMM plans that were submitted by this mission, eighteen were matched with conjunctions in the historical record; of those, twelve were successfully remediated (final measured Pc < 3E-6), and six were not. This is consistent with the expected efficacy for missions orbiting at that altitude. We are presently simulating this mission’s RMMs with MTS; this work is ongoing, but so far, the MTS results are qualitatively in agreement with the empirical results -- correctly predicting that a maneuver would or would not remediate a conjunction, if not exactly matching the final post-remediation Pc value. We found that differential drag was most successful for satellites with perigees below 560 km, and which could adopt an average delta-BC of 2 or greater (that is, increasing their ballistic coefficient by a factor of 3). However, this is a difficult threshold for a mission to clear; very few spacecraft are capable of adopting a high-drag configuration for 72 hours continuously. Planet’s Dove spacecraft use differential drag to remediate conjunctions (Griffith, et al., 2021), and they have a maximum delta-BC factor of 9, but in practice (with mission and charging constraints) they achieve a time-averaged delta-BC that is closer to 2 (Foster, et al., 2017). A mission’s differential drag utility strongly depends on the operational constraints that has the capacity to limit the time-averaged delta-BC. A mission with a high maximum delta-BC of 5 or more can have an effective delta-BC of less than 1 due to operational constraints such as instrument and solar panel pointing, especially if this constraint results in holding an intermediate drag value for most of its orbit. CARA has developed tables that can be used as decision aids to advise missions-in-development about the best way to utilize their differential drag capabilities. For missions below 560 km with the operational flexibility to devote multiple days to holding a high-drag configuration (or a sufficiently high drag ratio to compensate for limitations on that time), they are -- more likely than not -- able to successfully remediate high-risk conjunctions. Conversely, missions that do not meet these exacting criteria -- most missions -- can instead be advised to use on-board propulsion systems to perform RMMs, or to turn their minimum-area face towards the approach vector, thereby reducing Pc at the moment of conjunction due to the decreased Hard-Body Radius (HBR), that is a strongly correlated variable in the Pc calculations. (NASA, 2023)

conjunction assessment↗

NASA's Software Safety Standard

NASA relies more and more on software to control, monitor, and verify its safety critical systems, facilities and operations. Since the 1960's there has hardly been a spacecraft launched that does not have a computer on board that will provide command and control services. There have been recent incidents where software has played a role in high-profile mission failures and hazardous incidents. For example, the Mars Orbiter, Mars Polar Lander, the DART (Demonstration of Autonomous Rendezvous Technology), and MER (Mars Exploration Rover) Spirit anomalies were all caused or contributed to by software. The Mission Control Centers for the Shuttle, ISS, and unmanned programs are highly dependant on software for data displays, analysis, and mission planning. Despite this growing dependence on software control and monitoring, there has been little to no consistent application of software safety practices and methodology to NASA's projects with safety critical software. Meanwhile, academia and private industry have been stepping forward with procedures and standards for safety critical systems and software, for example Dr. Nancy Leveson's book Safeware: System Safety and Computers. The NASA Software Safety Standard, originally published in 1997, was widely ignored due to its complexity and poor organization. It also focused on concepts rather than definite procedural requirements organized around a software project lifecycle. Led by NASA Headquarters Office of Safety and Mission Assurance, the NASA Software Safety Standard has recently undergone a significant update. This new standard provides the procedures and guidelines for evaluating a project for safety criticality and then lays out the minimum project lifecycle requirements to assure the software is created, operated, and maintained in the safest possible manner. This update of the standard clearly delineates the minimum set of software safety requirements for a project without detailing the implementation for those requirements. This allows the projects leeway to meet these requirements in many forms that best suit a particular project's needs and safety risk. In other words, it tells the project what to do, not how to do it. This update also incorporated advances in the state of the practice of software safety from academia and private industry. It addresses some of the more common issues now facing software developers in the NASA environment such as the use of Commercial-Off-the-Shelf Software (COTS), Modified OTS (MOTS), Government OTS (GOTS), and reused software. A team from across NASA developed the update and it has had both NASA-wide internal reviews by software engineering, quality, safety, and project management. It has also had expert external review. This presentation and paper will discuss the new NASA Software Safety Standard, its organization, and key features. It will start with a brief discussion of some NASA mission failures and incidents that had software as one of their root causes. It will then give a brief overview of the NASA Software Safety Process. This will include an overview of the key personnel responsibilities and functions that must be performed for safety-critical software.

Ramsay, Christopher M.↗

Overview of the Altair Lunar Lander Thermal Control System Design

NASA's Constellation Program has been developed to successfully return humans to the Lunar surface prior to 2020. The Constellation Program includes several different project offices including Altair, which is the next generation Lunar Lander. The planned Altair missions are very different than the Lunar missions accomplished during the Apollo era. These differences have resulted in a significantly different thermal control system architecture. The Altair project has employed a rather unique development approach as compared with previous manned spacecraft programs. Altair started the design process by developing a single-string (no fault tolerance), minimum functionality design. This first design and analysis cycle resulted in the baseline design for the entire process. From this point of departure, Altair continued the development process by adding vehicle functionality for the purposes of minimizing the risk of Loss Of Crew (LOC) and Loss Of Mission (LOM). Through the subsequent design and analysis cycles, the project office compared the added mass associated with the reduction of LOC/LOM and selected the most mass efficient design solutions. The current paper will summarize the Altair mission profile, the operational phases, and the LOC/LOM decisions that were made during the various design cycles. The evolution of the thermal control system design through Lunar Design and Analysis Cycle 3 (LDAC-3) will also be described in this paper.

Stephan, Ryan A.↗

Ground Vibration Testing Options for Space Launch Vehicles

New NASA launch vehicles will require development of robust systems in a fiscally-constrained environment. NASA, Department of Defense (DoD), and commercial space companies routinely conduct ground vibration tests as an essential part of math model validation and launch vehicle certification. Although ground vibration testing must be a part of the integrated test planning process, more affordable approaches must also be considered. A study evaluated several ground vibration test options for the NASA Constellation Program flight test vehicles, Orion-1 and Orion-2, which concluded that more affordable ground vibration test options are available. The motivation for ground vibration testing is supported by historical examples from NASA and DoD. The approach used in the present study employed surveys of ground vibration test subject-matter experts that provided data to qualitatively rank six test options. Twenty-five experts from NASA, DoD, and industry provided scoring and comments for this study. The current study determined that both element-level modal tests and integrated vehicle modal tests have technical merits. Both have been successful in validating structural dynamic math models of launch vehicles. However, element-level testing has less overall cost and schedule risk as compared to integrated vehicle testing. Future NASA launch vehicle development programs should anticipate that some structural dynamics testing will be necessary. Analysis alone will be inadequate to certify a crew-capable launch vehicle. At a minimum, component and element structural dynamic tests are recommended for new vehicle elements. Three viable structural dynamic test options were identified. Modal testing of the new vehicle elements and an integrated vehicle test on the mobile launcher provided the optimal trade between technical, cost, and schedule.

Patterson, Alan↗

Motivations and Preliminary Design for Mid-Air Deployment of a Science Rotorcraft on Mars

Mid-Air Deployment (MAD) of a rotorcraft during Entry, Descent and Landing (EDL) on Mars eliminates the need to carry a propulsion or airbag landing system. This reduces the total mass inside the aeroshell by more than 100 kg, aeroshell complexity, and likely the risk and cost associated to the mission. Moreover, the lighter entry mass enables landing in the Martian highlands, at elevations inaccessible to current EDL technologies. This paper proposes a novel MAD concept for a Mars helicopter. We suggest a minimum science payload package to perform relevant science in the highlands. A variant of the Ingenuity helicopter is proposed to provide increased deceleration during MAD, and enough lift to fly the science payload in the highlands. We show in simulation that the lighter aeroshell results in lower terminal velocity (30 m/s) at the end of the parachute phase of the EDL, and at higher altitudes than other approaches. After discussing the aerodynamics, controls, guidance and mechanical challenges associated to deploying at such speed, we propose a backshell architecture that addresses them to release the helicopter in the safest conditions. Finally, we implemented the helicopter model and aerodynamic descent perturbations in the JPL Dynamics and Real-Time Simulation (DARTS) framework. Preliminary performance evaluation indicate landing and helicopter operations can be achieved up to +5 km MOLA.

Rapin, William↗

Mission management aircraft operations manual

This manual prescribes the NASA mission management aircraft program and provides policies and criteria for the safe and economical operation, maintenance, and inspection of NASA mission management aircraft. The operation of NASA mission management aircraft is based on the concept that safety has the highest priority. Operations involving unwarranted risks will not be tolerated. NASA mission management aircraft will be designated by the Associate Administrator for Management Systems and Facilities. NASA mission management aircraft are public aircraft as defined by the Federal Aviation Act of 1958. Maintenance standards, as a minimum, will meet those required for retention of Federal Aviation Administration (FAA) airworthiness certification. Federal Aviation Regulation Part 91, Subparts A and B, will apply except when requirements of this manual are more restrictive.

Source record↗

Validity of the Aluminum Equivalent Approximation in Space Radiation Shielding

The origin of the aluminum equivalent shield approximation in space radiation analysis can be traced back to its roots in the early years of the NASA space programs (Mercury, Gemini and Apollo) wherein the primary radiobiological concern was the intense sources of ionizing radiation causing short term effects which was thought to jeopardize the safety of the crew and hence the mission. Herein, it is shown that the aluminum equivalent shield approximation, although reasonably well suited for that time period and to the application for which it was developed, is of questionable usefulness to the radiobiological concerns of routine space operations of the 21 st century which will include long stays onboard the International Space Station (ISS) and perhaps the moon. This is especially true for a risk based protection system, as appears imminent for deep space exploration where the long-term effects of Galactic Cosmic Ray (GCR) exposure is of primary concern. The present analysis demonstrates that sufficiently large errors in the interior particle environment of a spacecraft result from the use of the aluminum equivalent approximation, and such approximations should be avoided in future astronaut risk estimates. In this study, the aluminum equivalent approximation is evaluated as a means for estimating the particle environment within a spacecraft structure induced by the GCR radiation field. For comparison, the two extremes of the GCR environment, the 1977 solar minimum and the 2001 solar maximum, are considered. These environments are coupled to the Langley Research Center (LaRC) deterministic ionized particle transport code High charge (Z) and Energy TRaNsport (HZETRN), which propagates the GCR spectra for elements with charges (Z) in the range I <= Z <= 28 (H -- Ni) and secondary neutrons through selected target materials. The coupling of the GCR extremes to HZETRN allows for the examination of the induced environment within the interior' of an idealized spacecraft as approximated by a spherical shell shield, and the effects of the aluminum equivalent approximation for a good polymeric shield material such as genetic polyethylene (PE). The shield thickness is represented by a 25 g/cm spherical shell. Although one could imagine the progression to greater thickness, the current range will be sufficient to evaluate the qualitative usefulness of the aluminum equivalent approximation. Upon establishing the inaccuracies of the aluminum equivalent approximation through numerical simulations of the GCR radiation field attenuation for PE and aluminum equivalent PE spherical shells, we Anther present results for a limited set of commercially available, hydrogen rich, multifunctional polymeric constituents to assess the effect of the aluminum equivalent approximation on their radiation attenuation response as compared to the generic PE.

Badavi, Francis F.↗

Risk Trade-Space Analysis for Safe Human Expeditions to Mars

We assessed the integrated safety, health, and performance risk to crews on long-duration missions, specifically to Mars. Using a systems approach rather than one focused on individual countermeasures, we examined the trade space around several such risks to identify high-potential risk mitigation strategies and characterize aspects of Mars mission architectures that could lower aggregated risk. Current Mars Design Reference missions would require durations well over two years and would increase crew exposure to radiation and microgravity well beyond ISS levels, likely resulting in significantly reduced performance beyond our current capability to mitigate that could jeopardize mission success. A “fast Mars transit” round-trip mission concept was studied using an innovative flight dynamics approach to quantify the minimum total mission energy required for a Mars transit with total mission duration less than 400 days. This approach holds promise for sending humans to Mars and returning them safely with acceptable, potentially mitigatable, exposure to microgravity and radiation using current or near-term technologies. The fast transit concept would also result in fewer time-driven vehicle failures and enable sustainable deployment of humans and infrastructure to Mars on a regular cadence, allowing steady exploration and colonization of Mars. Finally, we conclude that reliance on the Low Earth Orbit (LEO) mission operations paradigm – i.e., one of near-complete real-time dependence on experts at Mission Control to manage the combined state of the mission, vehicle, and crew – is high risk given the communication delays and limited resupply of any Mars mission, and this risk is not eliminated by the shorter missions durations of fast transit scenarios. Based on historical trends, it is highly likely that the crew will face a high-consequence problem of uncertain origin during Mars transit when ground support will be greatly reduced. While it may be possible to reduce anomaly rates through improved reliability analysis and testing, and to reduce anomaly impacts through added robustness, such mitigations address only known failure modes and known uncertainties. Therefore, a radical shift in the Human-Systems Integration Architecture (HSIA) that defines the operational paradigm, systems design, and human-systems interactions is required to improve the risk posture to an acceptable level regardless of mission duration.

Mars↗

CECE: Expanding the Envelope of Deep Throttling Technology in Liquid Oxygen/Liquid Hydrogen Rocket Engines for NASA Exploration Missions

As one of the first technology development programs awarded by NASA under the Vision for Space Exploration, the Pratt & Whitney Rocketdyne (PWR) Deep Throttling, Common Extensible Cryogenic Engine (CECE) program was selected by NASA in November 2004 to begin technology development and demonstration toward a deep throttling, cryogenic engine supporting ongoing trade studies for NASA s Lunar Lander descent stage. The CECE program leverages the maturity and previous investment of a flight-proven hydrogen/oxygen expander cycle engine, the PWR RL10, to develop and demonstrate an unprecedented combination of reliability, safety, durability, throttlability, and restart capabilities in high-energy, cryogenic, in-space propulsion. The testbed selected for the deep throttling demonstration phases of this program was a minimally modified RL10 engine, allowing for maximum current production engine commonality and extensibility with minimum program cost. Four series of demonstrator engine tests have been successfully completed between April 2006 and April 2010, accumulating 7,436 seconds of hot fire time over 47 separate tests. While the first two test series explored low power combustion (chug) and system instabilities, the third test series investigated and was ultimately successful in demonstrating several mitigating technologies for these instabilities and achieved a stable throttling ratio of 13:1. The fourth test series significantly expanded the engine s operability envelope by successfully demonstrating a closed-loop control system and extensive transient modeling to enable lower power engine starting, faster throttle ramp rates, and mission-specific ignition testing. The final hot fire test demonstrated a chug-free, minimum power level of 5.9%, corresponding to an overall 17.6:1 throttling ratio achieved. In total, these tests have provided an early technology demonstration of an enabling cryogenic propulsion concept with invaluable system-level technology data acquisition toward design and development risk mitigation for future lander descent main engines.

Giuliano, Victor J.↗

Mid-L/D Lifting Body Entry Demise Analysis

The mid-lift-to-drag ratio (mid-L/D) lifting body is a fully autonomous spacecraft under design at NASA for enabling a rapid return of scientific payloads from the International Space Station (ISS). For contingency planning and risk assessment for the Earth-return trajectory, an entry demise analysis was performed to examine three potential failure scenarios: (1) nominal entry interface conditions with loss of control, (2) controlled entry at maximum flight path angle, and (3) controlled entry at minimum flight path angle. The objectives of the analysis were to predict the spacecraft breakup sequence and timeline, determine debris survival, and calculate the debris dispersion footprint. Sensitivity analysis was also performed to determine the effect of the initial pitch rate on the spacecraft stability and breakup during the entry. This report describes the mid-L/D lifting body and presents the results of the entry demise and sensitivity analyses.

Ling, Lisa↗

ISRU Pilot Excavator - Development of Autonomous Excavation Algorithms

The ISRU Pilot Excavator (IPEx) is a Space Technology Mission Directorate (STMD) Game Changing Development (GCD) project to develop a robotic excavator to demonstrate excavation of up to 10 metric tons of lunar regolith. IPEx is based on the Regolith Advanced Surface Systems Operations Robot (RASSOR) excavator developed at NASA Kennedy Space Center (KSC) and utilizes a counter rotating bucket drum concept to balance excavation forces for use on reduced gravity planetary bodies. To take advantage of the counter rotating bucket drum mechanism, work is being done to develop new autonomous excavation strategies and algorithms. Referred to as “Auto-dig”, these algorithms will allow IPEx to excavate, drive, and deliver its target mass of 10 metric tons of lunar regolith during an 11-day mission semi-autonomously. Due to bandwidth and latency constraints teleoperation will be kept to a minimum, with operators periodically confirming and verifying the excavator’s high-level tasks and operations. While the work to develop optimized autodig solutions is ongoing at KSC, early tests have yielded interesting results that have led to the discovery of additional risks that need to be mitigated in autonomous excavation. Testing has also encouraged the development of new software and visualization tools that provide real-time insight into excavation loads during operation, allowing faster development and helping build better intuition to the excavation process. These tools will help in the pursuit to develop fully optimized digging algorithms that are robust enough to handle hazards such as rocks or irregular terrain.

B. C. Buckles↗

Radiation safety in aircraft operations

Data from a 7-yr flight experiment program to measure the significant biological components (tissue ionization rates, neutron flux, and nuclear reaction star rates) as a function of solar cycle, altitude, latitude and longitude from which biological risk from radiation is estimated are used to evaluate radiation dose and dose equivalents along specific flight trajectories. The data base used and the corresponding time-dependent global model are described. Ionization rates in air measured by argon filled chambers at solar minimum and maximum, and radiation measurements of the Brookhaven National Laboratory instrument compared to the present model are illustrated in tabular form. The global pressure distribution for solstice conditions at 14 km is shown.

Wilson, J. W.↗

Development, Testing, and Failure Mechanisms of a Replicative Ice Phase Change Material Heat Exchanger

Phase change materials (PCM) may be useful for thermal control systems that involve cyclical heat loads or cyclical thermal environments such as Low Earth Orbit (LEO) and Low Lunar Orbit (LLO). Thermal energy can be stored in the PCM during peak heat loads or in adverse thermal environments. The stored thermal energy can then be released later during minimum heat loads or in more favorable thermal environments. One advantage that PCM s have over evaporators in this scenario is that they do not use a consumable. Wax PCM units have been baselined for the Orion thermal control system and also provide risk mitigation for the Altair Lander. However, the use of water as a PCM has the potential for significant mass reduction since the latent heat of formation of water is approximately 70% greater than that of wax. One of the potential drawbacks of using ice as a PCM is its potential to rupture its container as water expands upon freezing. In order to develop a space qualified ice PCM heat exchanger, failure mechanisms must first be understood. Therefore, a methodical experimental investigation has been undertaken to demonstrate and document specific failure mechanisms due to ice expansion in the PCM. An ice PCM heat exchanger that replicates the thermal energy storage capacity of an existing wax PCM unit was fabricated and tested. Additionally, methods for controlling void location in order to reduce the risk of damage due to ice expansion are investigated. This paper presents the results to date of this investigation.

Leimkuehler, Thomas O.↗