Search NASA⌕ Search

SEARCH · Search NASA

Results for “Safety Controls”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 163 records · Page 9
All sourcesNASA NTRSDOE OSTI
NASA NTRS2011

Optical air data systems and methods

Systems and methods for sensing air includes at least one, and in some embodiments three, transceivers for projecting the laser energy as laser radiation to the air. The transceivers are scanned or aligned along several different axes. Each transceiver receives laser energy as it is backscattered from the air. A computer processes signals from the transceivers to distinguish molecular scattered laser radiation from aerosol scattered laser radiation and determines air temperatures, wind speeds, and wind directions based on the scattered laser radiation. Applications of the system to wind power site evaluation, wind turbine control, traffic safety, general meteorological monitoring and airport safety are presented.

Caldwell, Loren M.↗
NASA NTRS2012

Prognostics of Power Electronics, Methods and Validation Experiments

Abstract Failure of electronic devices is a concern for future electric aircrafts that will see an increase of electronics to drive and control safety-critical equipment throughout the aircraft. As a result, investigation of precursors to failure in electronics and prediction of remaining life of electronic components is of key importance. DC-DC power converters are power electronics systems employed typically as sourcing elements for avionics equipment. Current research efforts in prognostics for these power systems focuses on the identification of failure mechanisms and the development of accelerated aging methodologies and systems to accelerate the aging process of test devices, while continuously measuring key electrical and thermal parameters. Preliminary model-based prognostics algorithms have been developed making use of empirical degradation models and physics-inspired degradation model with focus on key components like electrolytic capacitors and power MOSFETs (metal-oxide-semiconductor-field-effect-transistor). This paper presents current results on the development of validation methods for prognostics algorithms of power electrolytic capacitors. Particularly, in the use of accelerated aging systems for algorithm validation. Validation of prognostics algorithms present difficulties in practice due to the lack of run-to-failure experiments in deployed systems. By using accelerated experiments, we circumvent this problem in order to define initial validation activities.

Kulkarni, Chetan S.↗
NASA NTRS2013

Motorized Beam Alignment of a Commercial X-ray Diffractometer

X-ray diffraction (XRD) is a powerful analysis method that allows researchers to noninvasively probe the crystalline structure of a material. This includes the ability to determine the crystalline phases present, quantify surface residual stresses, and measure the distribution of crystallographic orientations. The Structures and Materials Division at the NASA Glenn Research Center (GRC) heavily uses the on-site XRD lab to characterize advanced metal alloys, ceramics, and polymers. One of the x-ray diffractometers in the XRD lab (Bruker D8 Discover) uses three different x-ray tubes (Cu, Cr, and Mn) for optimal performance over numerous material types and various experimental techniques. This requires that the tubes be switched out and aligned between experiments. This alignment maximizes the x-ray tube s output through an iterative process involving four set screws. However, the output of the x-ray tube cannot be monitored during the adjustment process due to standard radiation safety engineering controls that prevent exposure to the x-ray beam when the diffractometer doors are open. Therefore, the adjustment process is a very tedious series of blind adjustments, each followed by measurement of the output beam using a PIN diode after the enclosure doors are shut. This process can take up to 4 hr to perform. This technical memorandum documents an in-house project to motorize this alignment process. Unlike a human, motors are not harmed by x-ray radiation of the energy range used in this instrument. Therefore, using motors to adjust the set screws will allow the researcher to monitor the x-ray tube s output while making interactive adjustments from outside the diffractometer. The motorized alignment system consists of four motors, a motor controller, and a hand-held user interface module. Our goal was to reduce the alignment time to less than 30 min. The time available was the 10-week span of the Lewis' Educational and Research Collaborative Internship Project (LERCIP) summer internship program and the budget goal was $1200. In this report, we will describe our motorization design and discuss the results of its implementation.

Van Zandt, Noah R.↗
NASA NTRS2014

Range Safety Flight Elevation Limit Calculation Software

This program was developed to fill a need within the Wallops Flight Facility workflow for automation of the development of vertical plan limit lines used by flight safety officers during the conduct of expendable launch vehicle missions. Vertical plane present-position-based destruct lines have been used by range safety organizations at numerous launch ranges to mitigate launch vehicle risks during the early phase of flight. Various ranges have implemented data submittal and processing workflows to develop these destruct lines. As such, there is significant prior art in this field. The ElLimits program was developed at NASA's Wallops Flight Facility to automate the process for developing vertical plane limit lines using current computing technologies. The ElLimits program is used to configure launch-phase range safety flight control lines for guided missiles. The name of the program derives itself from the fundamental quantity that is computed - flight elevation limits. The user specifies the extent and resolution of a grid in the vertical plane oriented along the launch azimuth. At each grid point, the program computes the maximum velocity vector flight elevation that can be permitted without endangering a specified back-range location. Vertical plane x-y limit lines that can be utilized on a present position display are derived from the flight elevation limit data by numerically propagating 'streamlines' through the grid. The failure turn and debris propagation simulation technique used by the application is common to all of its analysis options. A simulation is initialized at a vertical plane grid point chosen by the program. A powered flight failure turn is then propagated in the plane for the duration of the so-called RSO reaction time. At the end of the turn, a delta-velocity is imparted, and a ballistic trajectory is propagated to impact. While the program possesses capability for powered flight failure turn modeling, it does not require extensive user inputs of vehicle characteristics (e.g., thrust and aerodynamic data), nor does it require reams of turn data after the traditional fashion of the Air Force ranges. The program requires a nominal trajectory table (time, altitude, range, velocity, and flight elevation) and makes heavy use of it to initialize and model a failure turn.

Lanzi, Raymond J↗
NASA NTRS2024

Communications System Concept of Operations (ConOp) for Supporting Second Shift (SS) Operations

Wildland fires take place most often in remote areas without access to communications infrastructure. Communication during wildfire operations is crucial for safe and effective command and control of air assets, ground-based firefighters, and fire management. Without connectivity, Incident Command (IC) cannot exchange information, receive alerts or work with all parties involved in the wildfire suppression operation. Current policy directs IC to use voice radio communications, which require no prior infrastructure, to provide information needed for the command, control and safety of personnel and resources. Cellular communications are used only for logistical purposes unless no other method is available. To address some of the shortcomings of the current state of communications, the Advanced Capabilities for Emergency Response Operations (ACERO) Second Shift (SS) technical team is developing characteristics of an air-to-ground Mesh Radio System (MRS) and preparing for a future demonstration. The MRS will allow air and ground assets to automatically join a radio network without relying on existing infrastructure and exchange information critical to maintaining situation awareness and air traffic management by the onsite IC. The MRS will also give users more options for communications in addition to voice communications.

David Fuller↗
NASA NTRS2018

Survey of Methods to Predict Controller Workload for Real-Time Monitoring of Airspace Safety

The Real Time Safety Monitoring (RTSM) approach allows for assessment and prediction of the safety margin in the National Airspace System (NAS) to help preempt incidents and accidents, rather than having to reactively mitigate them. In RTSM, the NAS is modeled using state variables, and safety metrics are defined in terms of these state variables. The safety metrics have been classified as weather-related, airspace-related, and human-related. Many of the formulated human-related safety metrics need an estimate of the controller workload for their computation. However, this computation is not trivial. Hence, in this report, we perform a literature survey to identify the different factors that enable the computation of controller workload and categorize these factors. Next, we describe studies undertaken to determine a minimal set of factors that pro- vide a correct assessment of controller workload. Lastly, we survey approaches for evaluating how well the selected factors correlate with the controllers' subjective assessment of their workload. Based on this survey, we present factors beneficial to computing and predicting controller workload in real time, and discuss the status of data sources necessary for these computations.

National Airspace System↗
NASA NTRS2018

Designing Graceful Degradation into Complex Systems: Identification of Causes of Degradation, Interactions, and Mitigation of Degradation in Air Traffic Control

System resilience is critical to safety in air traffic control. An important element of maintaining resilience is the ability of systems to degrade gracefully. Of the available graceful degradation research, a majority of studies have focused primarily on technological causes of degradation only, limiting an ecologically valid understanding of the causes of degradation in air traffic control, and the preventative and mitigative strategies that enable graceful degradation. The current study aimed to address this research gap by investigating causes of degradation in air traffic control across the broad categories of technology, the environment, and the human operator, and the potential interactions between these causes. 12 retired controllers participated in semi-structured interviews focused on previous experience of causes of degradation and mitigation strategies. Findings provide an understanding of causation of degradation in air traffic control, and the prevention and mitigation strategies that moderate the relationship between cause and system effect. Findings confirmed that causes appear to interact to create compound, multiple effects on overall system performance. Findings also revealed prevention and mitigation strategies utilized to moderate the effect of the cause on the system. In order to gain an ecologically valid understanding of the causes of degradation, and effective prevention or mitigation strategies, causes from multiple categories, and the interactions between them, must be identified. Findings have implications for designers of future air traffic control systems to ensure the ability of the system to gracefully degrade, as well as risk assessment and system validation processes.

human performance↗
NASA NTRS1996

A Mathematical Model for Railway Control Systems

We present a general method for modeling safety aspects of railway control systems. Using our modeling method, one can progressively refine an abstract railway safety model, sucessively adding layers of detail about how a real system actually operates, while maintaining a safety property that refines the original abstract safety property. This method supports a top-down approach to specification of railway control systems and to proof of a variety of safety-related properties. We demonstrate our method by proving safety of the classical block control system.

Hoover, D. N.↗
NASA NTRS1992

Safety issues of manipulator systems under computer control

An overview of the development test flight (DTF-1) mission is presented, and the system design, safety requirements, and safety features are described. The lessons that were learned during the design and early development stages are also presented. The DTF-1 mission objectives are to evaluate: the overall man-machine performance in zero G, Flight Telerobotic Service manipulator design, and workstation design, including handcontrollers and displays. The payload bay and aft flight deck elements, and computer control of the DTF-1 are described. Recommendations for developing and implementing a safety system are presented, and some design alternatives for the next space-qualified telerobotic system are suggested.

Andary, James F.↗
NASA NTRS2014

“Terrain, Terrain Pull-up!” Air Carrier Controlled Flight Toward Terrain Incidents Reported to the NASA ASRS

The Aviation Safety Reporting System (ASRS) in a partnership between the National Aeronautics and Space Administration (NASA), the Federal Aviation Administration (FAA), participating carriers, and labor organizations. It is designed to improve the National Airspace System by collecting and studying reports detailing unsafe conditions and events in the aviation industry. Employees are able to report safety issues or concerns with confidentiality and without fear of discipline. Safety reports highlighting controlled flight toward terrain incidents as reported to the NASA ASRS.

confidential reporting↗
NASA NTRS2011

A Piloted Evaluation of Damage Accommodating Flight Control Using a Remotely Piloted Vehicle

Toward the goal of reducing the fatal accident rate of large transport airplanes due to loss of control, the NASA Aviation Safety Program has conducted research into flight control technologies that can provide resilient control of airplanes under adverse flight conditions, including damage and failure. As part of the safety program s Integrated Resilient Aircraft Control Project, the NASA Airborne Subscale Transport Aircraft Research system was designed to address the challenges associated with the safe and efficient subscale flight testing of research control laws under adverse flight conditions. This paper presents the results of a series of pilot evaluations of several flight control algorithms used during an offset-to-landing task conducted at altitude. The purpose of this investigation was to assess the ability of various flight control technologies to prevent loss of control as stability and control characteristics were degraded. During the course of 8 research flights, data were recorded while one task was repeatedly executed by a single evaluation pilot. Two generic failures, which degraded stability and control characteristics, were simulated inflight for each of the 9 different flight control laws that were tested. The flight control laws included three different adaptive control methodologies, several linear multivariable designs, a linear robust design, a linear stability augmentation system, and a direct open-loop control mode. Based on pilot Cooper-Harper Ratings obtained for this test, the adaptive flight control laws provided the greatest overall benefit for the stability and control degradation scenarios that were considered. Also, all controllers tested provided a significant improvement in handling qualities over the direct open-loop control mode.

Cunningham, Kevin↗
NASA NTRS1994

Implementing Software Safety in the NASA Environment

Until recently, NASA did not consider allowing computers total control of flight systems. Human operators, via hardware, have constituted the ultimate safety control. In an attempt to reduce costs, NASA has come to rely more and more heavily on computers and software to control space missions. (For example. software is now planned to control most of the operational functions of the International Space Station.) Thus the need for systematic software safety programs has become crucial for mission success. Concurrent engineering principles dictate that safety should be designed into software up front, not tested into the software after the fact. 'Cost of Quality' studies have statistics and metrics to prove the value of building quality and safety into the development cycle. Unfortunately, most software engineers are not familiar with designing for safety, and most safety engineers are not software experts. Software written to specifications which have not been safety analyzed is a major source of computer related accidents. Safer software is achieved step by step throughout the system and software life cycle. It is a process that includes requirements definition, hazard analyses, formal software inspections, safety analyses, testing, and maintenance. The greatest emphasis is placed on clearly and completely defining system and software requirements, including safety and reliability requirements. Unfortunately, development and review of requirements are the weakest link in the process. While some of the more academic methods, e.g. mathematical models, may help bring about safer software, this paper proposes the use of currently approved software methodologies, and sound software and assurance practices to show how, to a large degree, safety can be designed into software from the start. NASA's approach today is to first conduct a preliminary system hazard analysis (PHA) during the concept and planning phase of a project. This determines the overall hazard potential of the system to be built. Shortly thereafter, as the system requirements are being defined, the second iteration of hazard analyses takes place, the systems hazard analysis (SHA). During the systems requirements phase, decisions are made as to what functions of the system will be the responsibility of software. This is the most critical time to affect the safety of the software. From this point, software safety analyses as well as software engineering practices are the main focus for assuring safe software. While many of the steps proposed in this paper seem like just sound engineering practices, they are the best technical and most cost effective means to assure safe software within a safe system.

Wetherholt, Martha S.↗
NASA NTRS1989

The Goddard Space Flight Center (GSFC) robotics technology testbed

Much of the technology planned for use in NASA's Flight Telerobotic Servicer (FTS) and the Demonstration Test Flight (DTF) is relatively new and untested. To provide the answers needed to design safe, reliable, and fully functional robotics for flight, NASA/GSFC is developing a robotics technology testbed for research of issues such as zero-g robot control, dual arm teleoperation, simulations, and hierarchical control using a high level programming language. The testbed will be used to investigate these high risk technologies required for the FTS and DTF projects. The robotics technology testbed is centered around the dual arm teleoperation of a pair of 7 degree-of-freedom (DOF) manipulators, each with their own 6-DOF mini-master hand controllers. Several levels of safety are implemented using the control processor, a separate watchdog computer, and other low level features. High speed input/output ports allow the control processor to interface to a simulation workstation: all or part of the testbed hardware can be used in real time dynamic simulation of the testbed operations, allowing a quick and safe means for testing new control strategies. The NASA/National Bureau of Standards Standard Reference Model for Telerobot Control System Architecture (NASREM) hierarchical control scheme, is being used as the reference standard for system design. All software developed for the testbed, excluding some of simulation workstation software, is being developed in Ada. The testbed is being developed in phases. The first phase, which is nearing completion, and highlights future developments is described.

Schnurr, Rick↗
NASA NTRS1981

Design and verification of a multiple fault tolerant control system for STS applications using computer simulation

General Dynamics/Convair is under NASA contract to integrate the Centaur upper stage into the space transportation system for future planetary missions. This requires that control of all safety critical functions be two-failure tolerant. The control system developed consists of five asynchronous computers, each contributing at their outputs to a 3-out-of-5 voting plane. Subsystem control is based on an end function redundancy management scheme. Analysis of multiple component failures and worst-case time-phase asynchrony among the computers is performed by a real-time computer simulation. The simulation emulates the hardware and subsystem interfaces, wire by wire, providing assessibility to any component for the insertion of preprogrammed failures. Observability is provided via a graphics system and diagnostic software. The simulation provides an engineering tool where the integrity of control system hardware and imbedded software can be demonstrated.

Szatkowski, G. P.↗
NASA NTRS2012

Design of Low Complexity Model Reference Adaptive Controllers

Flight research experiments have demonstrated that adaptive flight controls can be an effective technology for improving aircraft safety in the event of failures or damage. However, the nonlinear, timevarying nature of adaptive algorithms continues to challenge traditional methods for the verification and validation testing of safety-critical flight control systems. Increasingly complex adaptive control theories and designs are emerging, but only make testing challenges more difficult. A potential first step toward the acceptance of adaptive flight controllers by aircraft manufacturers, operators, and certification authorities is a very simple design that operates as an augmentation to a non-adaptive baseline controller. Three such controllers were developed as part of a National Aeronautics and Space Administration flight research experiment to determine the appropriate level of complexity required to restore acceptable handling qualities to an aircraft that has suffered failures or damage. The controllers consist of the same basic design, but incorporate incrementally-increasing levels of complexity. Derivations of the controllers and their adaptive parameter update laws are presented along with details of the controllers implementations.

Hanson, Curt↗
NASA NTRS2012

Practical Applications of Cosmic Ray Science: Spacecraft, Aircraft, Ground Based Computation and Control Systems and Human Health and Safety

In this paper we review the discovery of cosmic ray effects on the performance and reliability of microelectronic systems as well as on human health and safety, as well as the development of the engineering and health science tools used to evaluate and mitigate cosmic ray effects in earth surface, atmospheric flight, and space flight environments. Three twentieth century technological developments, 1) high altitude commercial and military aircraft; 2) manned and unmanned spacecraft; and 3) increasingly complex and sensitive solid state micro-electronics systems, have driven an ongoing evolution of basic cosmic ray science into a set of practical engineering tools (e.g. ground based test methods as well as high energy particle transport and reaction codes) needed to design, test, and verify the safety and reliability of modern complex electronic systems as well as effects on human health and safety. The effects of primary cosmic ray particles, and secondary particle showers produced by nuclear reactions with spacecraft materials, can determine the design and verification processes (as well as the total dollar cost) for manned and unmanned spacecraft avionics systems. Similar considerations apply to commercial and military aircraft operating at high latitudes and altitudes near the atmospheric Pfotzer maximum. Even ground based computational and controls systems can be negatively affected by secondary particle showers at the Earth's surface, especially if the net target area of the sensitive electronic system components is large. Accumulation of both primary cosmic ray and secondary cosmic ray induced particle shower radiation dose is an important health and safety consideration for commercial or military air crews operating at high altitude/latitude and is also one of the most important factors presently limiting manned space flight operations beyond low-Earth orbit (LEO).

Atwell, William↗