Search NASA⌕ Search

SEARCH · Search NASA

Results for “failure prevention”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 163 records · Page 9
All sourcesNASA NTRSDOE OSTI
NASA NTRS1991

Issues in the Imprecise Computation Approach to Fault Tolerance

The imprecise computation technique can be used in a natural way to enhance fault tolerance. By providing a usable, approximate result whenever a failure or overload prevent the system from producing the desired, precise result, we can increase the availability of data and services, reduce the need for error-recovery operations, and minimize the costs in replication. This paper describes the domain-specific fault tolerance mechanisms that are needed to support the provision and correct usage of imprecise results for several representative application domains. The elements of an application-domain-independent architecture that can effectively integrate these domain-specific mechanisms are also described.

Liu, Jane W. S.↗
NASA NTRS2000

System Risk Balancing Profiles: Software Component

The Software QA / V&V guide will be reviewed and updated based on feedback from NASA organizations and others with a vested interest in this area. Hardware, EEE Parts, Reliability, and Systems Safety are a sample of the future guides that will be developed. Cost Estimates, Lessons Learned, Probability of Failure and PACTS (Prevention, Avoidance, Control or Test) are needed to provide a more complete risk management strategy. This approach to risk management is designed to help balance the resources and program content for risk reduction for NASA's changing environment.

Kelly, John C.↗
NASA NTRS2002

[High Pressure Gas Tanks]

Four high-pressure gas tanks, the basis of this study, were especially made by a private contractor and tested before being delivered to NASA Kennedy Space Center. In order to insure 100% reliability of each individual tank the staff at KSC decided to again submit the four tanks under more rigorous tests. These tests were conducted during a period from April 10 through May 8 at KSC. This application further validates the predictive safety model for accident prevention and system failure in the testing of four high-pressure gas tanks at Kennedy Space Center, called Continuous Hazard Tracking and Failure Prediction Methodology (CHTFPM). It is apparent from the variety of barriers available for a hazard control that some barriers will be more successful than others in providing protection. In order to complete the Barrier Analysis of the system, a Task Analysis and a Biomechanical Study were performed to establish the relationship between the degree of biomechanical non-conformities and the anomalies found within the system on particular joints of the body. This relationship was possible to obtain by conducting a Regression Analysis to the previously generated data. From the information derived the body segment with the lowest percentage of non-conformities was the neck flexion with 46.7%. Intense analysis of the system was conducted including Preliminary Hazard Analysis (PHA), Failure Mode and Effect Analysis (FMEA), and Barrier Analysis. These analyses resulted in the identification of occurrences of conditions, which may be becoming hazardous in the given system. These conditions, known as dendritics, may become hazards and could result in an accident, system malfunction, or unacceptable risk conditions. A total of 56 possible dendritics were identified. Work sampling was performed to observe the occurrence each dendritic. The out of control points generated from a Weighted c control chart along with a Pareto analysis indicate that the dendritics "Personnel not Wearing Proper Protective and Hose/tubing located in high-traffic area" which account for 59.18% of total dendritic frequency need to be addressed to reduce the chance of a hazard from occurring. However, the occurrences of some dendritics are more important than others. As a result immediate, from a Weighted c perspective, corrective action should be taken to ameliorate the cause of the Class A dendritic "Personnel located under suspended or moving loads" rather than just the most commonly occurring dendritics. In any case the vast majority of data obtained indicates that testing operations possess a relatively high degree of safety.

Quintana, Rolando↗
NASA NTRS2006

Real Time On-line Space Research Laboratory Environment Monitoring with Off-line Trend and Prediction Analysis

One of the responsibilities of the NASA Glenn Principal Investigator Microgravity Services is to support NASA sponsored investigators in the area of reduced-gravity acceleration data analysis, interpretation and the monitoring of the reduced-gravity environment on-board various carriers. With the International Space Station currently operational, a significant amount of acceleration data is being down-linked and processed on ground for both the space station onboard environment characterization (and verification) and scientific experiments. Therefore, to help principal investigator teams monitor the acceleration level on-board the International Space Station to avoid undesirable impact on their experiment, when possible, the NASA Glenn Principal Investigator Microgravity Services developed an artificial intelligence monitoring system, which detects in near real time any change in the environment susceptible to affect onboard experiments. The main objective of the monitoring system is to help research teams identify the vibratory disturbances that are active at any instant of time onboard the International Space Station that might impact the environment in which their experiment is being conducted. The monitoring system allows any space research scientist, at any location and at any time, to see the current acceleration level on-board the Space Station via the World Wide Web. From the NASA Glenn s Exploration Systems Division web site, research scientists can see in near real time the active disturbances, such as pumps, fans, compressor, crew exercise, re-boost, extra-vehicular activity, etc., and decide whether or not to continue operating or stopping (or making note of such activity for later correlation with science results) their experiments based on the g-level associated with that specific event. A dynamic graphical display accessible via the World Wide Web shows the status of all the vibratory disturbance activities with their degree of confidence as well as their g-level contribution to the environment. The system can detect both known and unknown vibratory disturbance activities. It can also perform trend analysis and prediction by analyzing past data over many Increments of the space station for selected disturbance activities. This feature can be used to monitor the health of onboard mechanical systems to detect and prevent potential system failure as well as for use by research scientists during their science results analysis. Examples of both real time on-line vibratory disturbance detection and off-line trend analysis are presented in this paper. Several soft computing techniques such as Kohonen s Self-Organizing Feature Map, Learning Vector Quantization, Back-Propagation Neural Networks, and Fuzzy Logic were used to design the system.

Jules, Kenol↗
NASA NTRS2008

Ground Handling of Batteries at Test and Launch-site Facilities

Ground handling of flight as well as engineering batteries at test facilities and launch-site facilities is a safety critical process. Test equipment interfacing with the batteries should have the required controls to prevent a hazardous failure of the batteries. Test equipment failures should not induce catastrophic failures on the batteries. Transportation requirements for batteries should also be taken into consideration for safe transportation. This viewgraph presentation includes information on the safe handling of batteries for ground processing at test facilities as well as launch-site facilities.

Jeevarajan, Judith A.↗
NASA NTRS2008

Monitoring Damage Accumulation in Ceramic Matrix Composites Using Electrical Resistivity

The electric resistance of woven SiC fiber reinforced SiC matrix composites were measured under tensile loading conditions. The results show that the electrical resistance is closely related to damage and that real-time information about the damage state can be obtained through monitoring of the resistance. Such self-sensing capability provides the possibility of on-board/in-situ damage detection and accurate life prediction for high-temperature ceramic matrix composites. Woven silicon carbide fiber-reinforced silicon carbide (SiC/SiC) ceramic matrix composites (CMC) possess unique properties such as high thermal conductivity, excellent creep resistance, improved toughness, and good environmental stability (oxidation resistance), making them particularly suitable for hot structure applications. In specific, CMCs could be applied to hot section components of gas turbines [1], aerojet engines [2], thermal protection systems [3], and hot control surfaces [4]. The benefits of implementing these materials include reduced cooling air requirements, lower weight, simpler component design, longer service life, and higher thrust [5]. It has been identified in NASA High Speed Research (HSR) program that the SiC/SiC CMC has the most promise for high temperature, high oxidation applications [6]. One of the critical issues in the successful application of CMCs is on-board or insitu assessment of the damage state and an accurate prediction of the remaining service life of a particular component. This is of great concern, since most CMC components envisioned for aerospace applications will be exposed to harsh environments and play a key role in the vehicle s safety. On-line health monitoring can enable prediction of remaining life; thus resulting in improved safety and reliability of structural components. Monitoring can also allow for appropriate corrections to be made in real time, therefore leading to the prevention of catastrophic failures. Most conventional nondestructive evaluation (NDE) techniques such as ultrasonic C-scan, x-ray, thermography, and eddy current are limited since they require structural components of complex geometry to be taken out of service for a substantial length of time for post-damage inspection and assessment. Furthermore, the typical NDE techniques are useful for identifying large interlaminar flaws, but insensitive to CMC materials flaws developed perpendicular to the surface under tensile creep conditions. There are techniques such as piezoelectric sensor [7,8], and optical fiber [9,10] that could be used for on-line health monitoring of CMC structures. However, these systems involve attaching an external sensor or putting special fibers in CMC composites, which would be problematic at high temperature applications.

Smith, Craig E.↗
NASA NTRS2011

Pattern Recognition for a Flight Dynamics Monte Carlo Simulation

The design, analysis, and verification and validation of a spacecraft relies heavily on Monte Carlo simulations. Modern computational techniques are able to generate large amounts of Monte Carlo data but flight dynamics engineers lack the time and resources to analyze it all. The growing amounts of data combined with the diminished available time of engineers motivates the need to automate the analysis process. Pattern recognition algorithms are an innovative way of analyzing flight dynamics data efficiently. They can search large data sets for specific patterns and highlight critical variables so analysts can focus their analysis efforts. This work combines a few tractable pattern recognition algorithms with basic flight dynamics concepts to build a practical analysis tool for Monte Carlo simulations. Current results show that this tool can quickly and automatically identify individual design parameters, and most importantly, specific combinations of parameters that should be avoided in order to prevent specific system failures. The current version uses a kernel density estimation algorithm and a sequential feature selection algorithm combined with a k-nearest neighbor classifier to find and rank important design parameters. This provides an increased level of confidence in the analysis and saves a significant amount of time.

Restrepo, Carolina↗
NASA NTRS2010

Control of Risks Through the Use of Procedures: A Method for Evaluating the Change in Risk

This paper considers how procedures can be used to control risks faced by an organization and proposes a means of recognizing if a particular procedure reduces risk or contributes to the organization's exposure. The proposed method was developed out of the review of work documents and the governing procedures performed in the wake of the Columbia accident by NASA and the Space Shuttle prime contractor, United Space Alliance, LLC. A technique was needed to understand the rules, or procedural controls, in place at the time in the context of how important the role of each rule was. The proposed method assesses procedural risks, the residual risk associated with a hazard after a procedure's influence is accounted for, by considering each clause of a procedure as a unique procedural control that may be beneficial or harmful. For procedural risks with consequences severe enough to threaten the survival of the organization, the method measures the characteristics of each risk on a scale that is an alternative to the traditional consequence/likelihood couple. The dual benefits of the substitute scales are that they eliminate both the need to quantify a relationship between different consequence types and the need for the extensive history a probabilistic risk assessment would require. Control Value is used as an analog for the consequence, where the value of a rule is based on how well the control reduces the severity of the consequence when operating successfully. This value is composed of two parts: the inevitability of the consequence in the absence of the control, and the opportunity to intervene before the consequence is realized. High value controls will be ones where there is minimal need for intervention but maximum opportunity to actively prevent the outcome. Failure Likelihood is used as the substitute for the conventional likelihood of the outcome. For procedural controls, a failure is considered to be any non-malicious violation of the rule, whether intended or not. The model used for describing the Failure Likelihood considers how well a task was established by evaluating that task on five components. The components selected to define a well established task are: that it be defined, assigned to someone capable, that they be trained appropriately, that the actions be organized to enable proper completion and that some form of independent monitoring be performed. Validation of the method was based on the information provided by a group of experts in Space Shuttle ground processing when they were presented with 5 scenarios that identified a clause from a procedure. For each scenario, they recorded their perception of how important the associated rule was and how likely it was to fail. They then rated the components of Control Value and Failure Likelihood for all the scenarios. The order in which each reviewer ranked the scenarios Control Value and Failure Likelihood was compared to the order in which they ranked the scenarios for each of the associated components; inevitability and opportunity for Control Value and definition, assignment, training, organization and monitoring for Failure Likelihood. This order comparison showed how the components contributed to a relative relationship to the substitute risk element. With the relationship established for Space Shuttle ground processing, this method can be used to gauge if the introduction or removal of a particular rule will increase or decrease the .risk associated with the hazard it is intended to control.

Praino, Gregory T.↗
NASA NTRS2014

Using a Commercial Ethernet PHY Device in a Radiation Environment

This work involved placing a commercial Ethernet PHY on its own power boundary, with limited current supply, and providing detection methods to determine when the device is not operating and when it needs either a reset or power-cycle. The device must be radiation-tested and free of destructive latchup errors. The commercial Ethernet PHY's own power boundary must be supplied by a current-limited power regulator that must have an enable (for power cycling), and its maximum power output must not exceed the PHY's input requirements, thus preventing damage to the device. A regulator with configurable output limits and short-circuit protection (such as the RHFL4913, rad hard positive voltage regulator family) is ideal. This will prevent a catastrophic failure due to radiation (such as a short between the commercial device's power and ground) from taking down the board's main power. Logic provided on the board will detect errors in the PHY. An FPGA (field-programmable gate array) with embedded Ethernet MAC (Media Access Control) will work well. The error detection includes monitoring the PHY's interrupt line, and the status of the Ethernet's switched power. When the PHY is determined to be non-functional, the logic device resets the PHY, which will often clear radiation induced errors. If this doesn't work, the logic device power-cycles the FPGA by toggling the regulator's enable input. This should clear almost all radiation induced errors provided the device is not latched up.

Parks, Jeremy↗
NASA NTRS2016

NASA Alternative Orion Small Cell Battery Design Support

The NASA Orion Crew Module Reference Design was produced to address large scale thermal runaway (TR) hazard with specific safety controls for the Orion Spacecraft. The design presented provides the description of a full scale battery design reference for implementation as a drop in replacement to meet all spacecraft energy requirements with compatible 120 Vdc electrical and mechanical interface using small cell technology (18650) packaging. The 32V SuperBrick incorporates unique support features and an electrical bus bar arrangement that allows cells negative can insertion into heat sink that is compressively coupled to the battery enclosure to promote good thermal management. The housing design also provides an internal flame suppression "filter tray" and positive venting path internal to the enclosure to allow hot effluent ejecta to escape in the event of single cell TR. Virtual cells (14P Banks) that are supported to provide cell spacing with interstitial materials to prevent side can failures that can produce cell to cell TR propagation. These features were successfully test in four separate TR run with the full scale DTA1 test article in February 2016. Successfully Completed Test Objectives - Four separate TR test runs with Full-Scale DTA1 housing with Two SuperBricks, Two SuperBrick Emulators All Tests resulted in "clean" gas with less than 6 C rise at Battery vent All Tests resulted in less than 2 C temperature rise on cold-plate outlet All Tests resulted in less than 6 psi pressure rise in the battery housing Test Run 1 -One neighbor cell TR, highest remaining neighbor 139 C. Ejecta shorted to bus caused prolonged additional heating, One shorted cell did experience TR after 12 minutes, remaining cells had adequate thermal margin Test Run 2 - No cell to cell propagation, highest neighbor cell 112 C; Test Run 3 - No cell to cell propagation, highest neighbor cell 96 C; Test Run 4 - No cell to cell propagation, highest neighbor cell 101 C; Primary TR testing and analysis were completed and reviewed for endorsement by NASA Engineering and Safety Center team members. All Key Test Objectives were met and the small cell design alternative was demonstrated and selected to be a feasible drop in replacement for the MPCV Orion CM Battery for EM2 mission.

Haynes, Chuck↗
NASA NTRS1966

Stress corrosion

This article recounts briefly some of the more critical stress-corrosion failures that have been experienced at Marshall Space Flight Center and the corrective action taken. Some of the recent stress corrosion studies are described and preliminary results tabulated. Specific problems described are the H-1 Engine LOX dome, the pneumatic line fitting sleeve problems and the more recent problem with wave springs used on MF-flared tube fittings. The use of nitric oxide in preventing stress-corrosion failures in titanium tanks is also discussed.

HIGH STRENGTH ALLOY↗
NASA NTRS2008

Aircraft Loss-of-Control Accident Prevention: Switching Control of the GTM Aircraft with Elevator Jam Failures

Switching control, servomechanism, and H2 control theory are used to provide a practical and easy-to-implement solution for the actuator jam problem. A jammed actuator not only causes a reduction of control authority, but also creates a persistent disturbance with uncertain amplitude. The longitudinal dynamics model of the NASA GTM UAV is employed to demonstrate that a single fixed reconfigured controller design based on the proposed approach is capable of accommodating an elevator jam failure with arbitrary jam position as long as the thrust control has enough control authority. This paper is a first step towards solving a more comprehensive in-flight loss-of-control accident prevention problem that involves multiple actuator failures, structure damages, unanticipated faults, and nonlinear upset regime recovery, etc.

Chang, Bor-Chin↗
NASA NTRSDate not supplied

Oversimplification of Systems Engineering Goals, Processes, and Criteria in NASA Space Life Support

This paper investigates the oversimplification of the inherently complex systems engineering process in space life support. The standard systems engineering process steps are described. The International Space Station (ISS) life support system is explained with its goals and performance criteria. Although it is not usually emphasized, the essential function of developing a hierarchy of systems and subsystems is to simplify the design process. The System Complexity Metric (SCM) shows how this di-vide-and-conquer approach also reduces the system complexity. The complete systems engineering process has many detailed steps. It is often simplified because of the effort required and the human limitations on working memory and decision span. Systems analysis demands slow, logical, and fo-cused thinking but is often bypassed in favor of quick, intuitive, subconscious “gut feel.” A study of 100 system designs found examples of 12 specific mental mistakes, such as ignoring stakeholder needs, and these mistakes are essentially oversimplifications of the systems engineering process. An analysis of space life support goals, options, criteria, and processes found 11 examples of oversimplifications in systems engineering, such as neglecting safety and cost. All these 11 oversimplifications could be traced to one or more of the 12 previously identified mental mistakes or other well-known ones, such as ig-noring sunk costs. Oversimplification of the systems engineering process is rarely noticed but is a common and harmful problem. A study of failures in 50 different space systems found that problems in systems engineering caused failures and often led to errors in design, development, and test that further contributed to failure. It seems that more diligent systems engineering could prevent many project problems and failures, but projects seem to be more guided by “gut feel” based on tradition, authority, and consensus than on the logical, rational systems engineering approach.

Simplified systems engineering↗
NASA NTRS2003

Plasma membrane disruption: repair, prevention, adaptation

Many metazoan cells inhabit mechanically stressful environments and, consequently, their plasma membranes are frequently disrupted. Survival requires that the cell rapidly repair or reseal the disruption. Rapid resealing is an active and complex structural modification that employs endomembrane as its primary building block, and cytoskeletal and membrane fusion proteins as its catalysts. Endomembrane is delivered to the damaged plasma membrane through exocytosis, a ubiquitous Ca2+-triggered response to disruption. Tissue and cell level architecture prevent disruptions from occurring, either by shielding cells from damaging levels of force, or, when this is not possible, by promoting safe force transmission through the plasma membrane via protein-based cables and linkages. Prevention of disruption also can be a dynamic cell or tissue level adaptation triggered when a damaging level of mechanical stress is imposed. Disease results from failure of either the preventive or resealing mechanisms.

NASA Discipline Cell Biology↗
NASA NTRS2002

Gear Crack Propagation Path Studies-- Guidelines Developed for Ultrasafe Design

Effective gear designs balance strength, durability, reliability, size, weight, and cost. However, unexpected gear failures may occur even with adequate gear tooth design. To design an extremely safe system, the designer must ask and address the question "What happens when a failure occurs?" With regard to gear-tooth bending fatigue, tooth or rim fractures may occur. For aircraft, a crack that propagated through a rim would be catastrophic, leading to the disengagement of a rotor or propeller, the loss of an aircraft, and possible fatalities. This failure mode should be avoided. However, a crack that propagated through a tooth might or might not be catastrophic, depending on the design and operating conditions. Also, early warning of this failure mode might be possible because of advances in modern diagnostic systems. An analysis was performed at the NASA Glenn Research Center to develop design guidelines to prevent catastrophic rim fracture failure modes in the event of gear-tooth bending fatigue. The finite element method was used with principles of linear elastic fracture mechanics. Crack propagation paths were predicted for a variety of gear tooth and rim configurations. The effects of rim and web thicknesses, initial crack locations, and gear-tooth geometry factors such as diametral pitch, number of teeth, pitch radius, and tooth pressure angle were considered. Design maps of tooth and rim fracture modes, including the effects of gear geometry, applied load, crack size, and material properties were developed. The occurrence of rim fractures significantly increased as the backup ratio (rim thickness divided by tooth height) decreased. The occurrence of rim fractures also increased as the initial crack location was moved down the root of the tooth. Increased rim and web compliance increased the occurrence of rim fractures. For gears with constant-pitch radii, coarser-pitch teeth increased the occurrence of tooth fractures over rim fractures. Also, 25 degree pressure angle teeth increased the occurrence of tooth fractures over rim fractures in comparison to 20 pressure angle teeth. For gears with a constant number of teeth or for gears with constant diametral pitch, varying size had little or no effect on crack propagation paths.

Lewicki, David G.↗
NASA NTRS1975

Results of TC-1 boost pump icing tests in the space power facility

A series of tests were conducted in the space power facility to investigate the failure of the Centaur oxidizer boost pump during the Titan/Centaur proof flight February 11, 1974. The three basic objectives of the tests were: (1) demonstrate if an evaporative freezing type failure mechanism could have prevented the pump from operating, (2) determine if steam from the exhaust of one of the attitude control engine could have entered a pump seal cavity and caused the failure, and (3) obtain data on the heating effects of the exhaust plume from a hydrogen peroxide attitude control engine.

Gentile, L. C.↗
NASA NTRS1993

Expert System for UNIX System Reliability and Availability Enhancement

Highly reliable and available systems are critical to the airline industry. However, most off-the-shelf computer operating systems and hardware do not have built-in fault tolerant mechanisms, the UNIX workstation is one example. In this research effort, we have developed a rule-based Expert System (ES) to monitor, command, and control a UNIX workstation system with hot-standby redundancy. The ES on each workstation acts as an on-line system administrator to diagnose, report, correct, and prevent certain types of hardware and software failures. If a primary station is approaching failure, the ES coordinates the switch-over to a hot-standby secondary workstation. The goal is to discover and solve certain fatal problems early enough to prevent complete system failure from occurring and therefore to enhance system reliability and availability. Test results show that the ES can diagnose all targeted faulty scenarios and take desired actions in a consistent manner regardless of the sequence of the faults. The ES can perform designated system administration tasks about ten times faster than an experienced human operator. Compared with a single workstation system, our hot-standby redundancy system downtime is predicted to be reduced by more than 50 percent by using the ES to command and control the system.

Xu, Catherine Q.↗
NASA NTRS1972

Multimaterial lamination as a means of retarding penetration and spallation failures in plates

Experimental data are presented which show that hypervelocity impact spallation and penetration failures of a single solid aluminum plate and of a solid aluminum plate spaced a distance behind a Whipple meteor bumper may be retarded by replacing the solid aluminum plate with a laminated plate. Four sets of experiments were conducted. The first set of experiments was conducted with projectile mass and velocity held constant and with polycarbonate cylinders impacted into single plates of different construction. The second set of experiments was done with single plates of various construction and aluminum spherical projectiles of similar mass but different velocities. These two experiments showed that a laminated plate of aluminum and polycarbonate or aluminum and methyl methacrylate could prevent spallation and penetration failures with a lower areal density than either an all-aluminum laminated plate or a solid aluminum plate. The aluminum laminated plate was in turn superior to the solid aluminum plate in resisting spallation and penetration failures. In addition, through an example of 6061-T6 aluminum and methyl methacrylate, it is shown that a laminated structure ballistically superior to its parent materials may be built. The last two sets of experiments were conducted using bumper-protected main walls of solid aluminum and of laminated aluminum and polycarbonate. Again, under hypervelocity impact conditions, the laminated main walls were superior to the solid aluminum main walls in retarding spallation and penetration failures.

Dibattista, J. D.↗