Application of redundancy in the Saturn V guidance and control system.
Application of redundancy in Saturn V guidance and control system to achieve desired reliability
SEARCH · Search NASA
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
Application of redundancy in Saturn V guidance and control system to achieve desired reliability
Marshall Space Flight Center program to upgrade space vehicle reliability by motivating personnel to reduce mistakes and malfunction of equipment
Methodology used to implement high reliability objectives for Surveyor pressure vessels, tabulating burst test results
Spacecraft human life support systems can achieve ultra reliability by providing sufficient spares to replace all failed components. The additional mass of spares for ultra reliability is approximately equal to the original system mass, provided that the original system reliability is not too low. Acceptable reliability can be achieved for the Space Shuttle and Space Station by preventive maintenance and by replacing failed units. However, on-demand maintenance and repair requires a logistics supply chain in place to provide the needed spares. In contrast, a Mars or other long space mission must take along all the needed spares, since resupply is not possible. Long missions must achieve ultra reliability, a very low failure rate per hour, since they will take years rather than weeks and cannot be cut short if a failure occurs. Also, distant missions have a much higher mass launch cost per kilogram than near-Earth missions. Achieving ultra reliable spacecraft life support systems with acceptable mass will require a well-planned and extensive development effort. Analysis must determine the reliability requirement and allocate it to subsystems and components. Ultra reliability requires reducing the intrinsic failure causes, providing spares to replace failed components and having "graceful" failure modes. Technologies, components, and materials must be selected and designed for high reliability. Long duration testing is needed to confirm very low failure rates. Systems design should segregate the failure causes in the smallest, most easily replaceable parts. The system must be designed, developed, integrated, and tested with system reliability in mind. Maintenance and reparability of failed units must not add to the probability of failure. The overall system must be tested sufficiently to identify any design errors. A program to develop ultra reliable space life support systems with acceptable mass should start soon since it must be a long term effort.
Modern communications satellites rely heavily upon deployable appendage (i.e., solar arrays, communications antennas, etc.) to perform vital functions that enable the spacecraft to effectively conduct mission objectives. Communications and telemetry antennas provide the radio-frequency link between the spacecraft and the earth ground station, permitting data to be transmitted and received from the satellite. Solar arrays serve as the principle source of electrical energy to the satellite, and re-charge internal batteries during operation. However, since satellites cannot carry back-up systems, if a solar array fails to deploy, the mission is lost. The subject of on-orbit anomalies related to the deployment of spacecraft appendage, and possible causes of such failures are examined. Topics discussed include mechanical launch loading, on-orbit thermal and solar concerns, reliability of spacecraft pyrotechnics, and practical limitations of ground-based deployment testing. Of particular significance, the article features an in-depth look at the lessons learned from the successful recovery of the Telesat Canada Anik-E2 satellite in 1991.
Hardware subsystems for flight spacecraft, design reliability, interface control, and mission objectives - Voyager project
The Spacecraft Anomaly Data Base was useful in identifying trends in anomaly occurrence. Trends alone do not provide quantitative testimony to a spacecraft's reliability, but they do indicate areas that command closer study. An in-depth analysis of a specific anomaly can be expensive and difficult without access to the spacecraft. Statistically verified anomaly trends can provide a good reference point to begin anomaly analysis. Many spacecraft experience an increase in anomalies during the period of several days centered on the solar equinox, a period that is also correlated with sun eclipse at geostationary altitude and an increase in major geomagnetic storms. Increase anomaly occurrence can also be seen during the local time interval between midnight and dawn. This local time interval represents a region in Earth's near space that experiences an enhancement in electron plasma density due to a migration from the magnetotail during or following a geomagnetic substorm.
Mission proposals that land on asteroids are becoming popular. However, in order to have a successful mission the spacecraft must reliably and softly land at the intended landing site. The problem under investigation is how to design a fuel-optimal powered descent trajectory that can be quickly computed on- board the spacecraft, without interaction from ground control. An optimal trajectory designed immediately prior to the descent burn has many advantages. These advantages include the ability to use the actual vehicle starting state as the initial condition in the trajectory design and the ease of updating the landing target site if the original landing site is no longer viable. For long trajectories, the trajectory can be updated periodically by a redesign of the optimal trajectory based on current vehicle conditions to improve the guidance performance. One of the key drivers for being completely autonomous is the infrequent and delayed communication between ground control and the vehicle. Challenges that arise from designing an asteroid powered descent trajectory include complicated nonlinear gravity fields, small rotating bodies and low thrust vehicles. There are two previous studies that form the background to the current investigation. The first set looked in-depth at applying convex optimization to a powered descent trajectory on Mars with promising results.1, 2 This showed that the powered descent equations of motion can be relaxed and formed into a convex optimization problem and that the optimal solution of the relaxed problem is indeed a feasible solution to the original problem. This analysis used a constant gravity field. The second area applied a successive solution process to formulate a second order cone program that designs rendezvous and proximity operations trajectories.3, 4 These trajectories included a Newtonian gravity model. The equivalence of the solutions between the relaxed and the original problem is theoretically established. The proposed solution for designing the asteroid powered descent trajectory is to use convex optimization, a gravity model with higher fidelity than Newtonian, and an iterative solution process to design the fuel optimal trajectory. The solution to the convex optimization problem is the thrust profile, magnitude and direction, that will yield the minimum fuel trajectory for a soft landing at the target site, subject to various mission and operational constraints. The equations of motion are formulated in a rotating coordinate system and includes a high fidelity gravity model. The vehicle's thrust magnitude can vary between maximum and minimum bounds during the burn. Also, constraints are included to ensure that the vehicle does not run out of propellant, or go below the asteroid's surface, and any vehicle pointing requirements. The equations of motion are discretized and propagated with the trapezoidal rule in order to produce equality constraints for the optimization problem. These equality constraints allow the optimization algorithm to solve the entire problem, without including a propagator inside the optimization algorithm.
Apollo gyro reliability covering Guidance, Navigation and Control systems, stressing failure mode prediction
Radiation effects on materials and electronic parts constrain the lifetime of flight systems visiting Europa. Understanding mission lifetime limits is critical to the design and planning of such a mission. Therefore, the operational aspects of radiation dose are a mission success issue. To predict and manage mission lifetime in a high radiation environment, system engineers need capable tools to trade radiation design choices against system design and reliability, and science achievements. Conventional tools and approaches provided past missions with conservative designs without the ability to predict their lifetime beyond the baseline mission.This paper describes a more systematic approach to understanding spacecraft design margin, allowing better prediction of spacecraft lifetime. This is possible because of newly available electronic parts radiation effects statistics and an enhanced spacecraft system reliability methodology. This new approach can be used in conjunction with traditional approaches for mission design. This paper describes the fundamentals of the new methodology.
Mission proposals that land on asteroids are becoming popular. However, in order to have a successful mission the spacecraft must reliably and softly land at the intended landing site. The problem under investigation is how to design a fuel-optimal powered descent trajectory that can be quickly computed on-board the spacecraft, without interaction from ground control. An optimal trajectory designed immediately prior to the descent burn has many advantages. These advantages include the ability to use the actual vehicle starting state as the initial condition in the trajectory design and the ease of updating the landing target site if the original landing site is no longer viable. For long trajectories, the trajectory can be updated periodically by a redesign of the optimal trajectory based on current vehicle conditions to improve the guidance performance. One of the key drivers for being completely autonomous is the infrequent and delayed communication between ground control and the vehicle. Challenges that arise from designing an asteroid powered descent trajectory include complicated nonlinear gravity fields, small rotating bodies and low thrust vehicles.
Mission proposals that land spacecraft on asteroids are becoming increasingly popular. However, in order to have a successful mission the spacecraft must reliably and softly land at the intended landing site with pinpoint precision. The problem under investigation is how to design a propellant optimal powered descent trajectory that can be quickly computed onboard the spacecraft, without interaction from the ground control. The propellant optimal control problem in this work is to determine the optimal finite thrust vector to land the spacecraft at a specified location, in the presence of a highly nonlinear gravity field, subject to various mission and operational constraints. The proposed solution uses convex optimization, a gravity model with higher fidelity than Newtonian, and an iterative solution process for a fixed final time problem. In addition, a second optimization method is wrapped around the convex optimization problem to determine the optimal flight time that yields the lowest propellant usage over all flight times. Gravity models designed for irregularly shaped asteroids are investigated. Success of the algorithm is demonstrated by designing powered descent trajectories for the elongated binary asteroid Castalia.
Reliability considerations in design, assembly, and testing of Mariner IV power system
The tested physical and performance characteristics of the ACTS spacecraft are presented with emphasis placed on those for the multibeam antenna, the communications electronics panel, and the bus. Performance measurements for the multibeam antenna agree with predicted parameters, and the electronics panel provides four transponder channels for redundancy and system reliability. The spacecraft bus provides unique features including an attitude-control subsystem with autotrack for pitch accuracy, a sun sensor for yaw control, and thruster firing for dual spin turns.
A life cycle test of secondary electric batteries for spacecraft applications was conducted. A sample number of nickel cadmium batteries were subjected to general performance tests to determine the limit of their actual capabilities. Weaknesses discovered in cell design are reported and aid in research and development efforts toward improving the reliability of spacecraft batteries. A statistical analysis of the life cycle prediction and cause of failure versus test conditions is provided.
The orbital debris environment model is intended to be used by the spacecraft community for the design and operation of spacecraft in low Earth orbit. This environment, when combined with material-dependent impact tests and spacecraft failure analysis, is intended to be used to evaluate spacecraft vulnerability, reliability, and shielding requirements. The environment represents a compromise between existing data to measure the environment, modeling of this data to predict the future environment, the uncertainty in both measurements and modeling, and the need to describe the environment so that various options concerning spacecraft design and operations can be easily evaluated.
Reliability contribution of pilot using manual backup control for first stage of Saturn V tested using simulation
NASA's Small Explorer (SMEX) project has developed a series of highly capable small satellites that are being used to support astrophysics and space physics investigations. These satellites, while both small and economical, give up nothing in performance and versatility to the larger satellites developed over the past 15 years within the Explorer program. Innovative engineering and new technology advances have increased the potential scientific return of the SMEX spacecraft to a level comparable to larger carriers. The design has struck a balance between mission risk and cost that has allowed for the development of an extremely capable spacecraft. The first SMEX mission, Solar Anomalous and Magnetospheric Particle Explorer (SAMPEX), has been in orbit since July 1992 and is continuing to perform well. It has proven the merits of this design approach. This paper describes the fundamental strategies and technologies used in developing the design. It outlines the key elements of the system architecture and describes the capabilities and merits of the major subsystems. Major design trade-offs are highlighted. Emphasis is placed on the innovative attitude control system which was developed for the SAMPEX mission. The paper also describes the unique SMEX approach to mission operations.