Results for “Safety Design Approach” — Page 96

NASA NTRS2008

Solar Tower Experiments for Radiometric Calibration and Validation of Infrared Imaging Assets and Analysis Tools for Entry Aero-Heating Measurements

The NASA Engineering and Safety Center sponsored Hypersonic Thermodynamic Infrared Measurements assessment team has a task to perform radiometric calibration and validation of land-based and airborne infrared imaging assets and tools for remote thermographic imaging. The IR assets and tools will be used for thermographic imaging of the Space Shuttle Orbiter during entry aero-heating to provide flight boundary layer transition thermography data that could be utilized for calibration and validation of empirical and theoretical aero-heating tools. A series of tests at the Sandia National Laboratories National Solar Thermal Test Facility were designed for this task where reflected solar radiation from a field of heliostats was used to heat a 4 foot by 4 foot test panel consisting of LI 900 ceramic tiles located on top of the 200 foot tall Solar Tower. The test panel provided an Orbiter-like entry temperature for the purposes of radiometric calibration and validation. The Solar Tower provided an ideal test bed for this series of radiometric calibration and validation tests because it had the potential to rapidly heat the large test panel to spatially uniform and non-uniform elevated temperatures. Also, the unsheltered-open-air environment of the Solar Tower was conducive to obtaining unobstructed radiometric data by land-based and airborne IR imaging assets. Various thermocouples installed on the test panel and an infrared imager located in close proximity to the test panel were used to obtain surface temperature measurements for evaluation and calibration of the radiometric data from the infrared imaging assets. The overall test environment, test article, test approach, and typical test results are discussed.

Splinter, Scott C.↗

DOE OSTI2020

Opinion: Lighting Research During and After the Pandemic

For many lighting researchers, the recent restrictions related to COVID-19 have paused most in-person laboratory or field experiments. In certain countries, regulatory institutions have allowed such experiments to resume but issued safety recommendations like pre-checking participants for disease symptoms and excluding those that are especially vulnerable. To avoid potential complications and delays, researchers are likely to resort to other research designs that enable remote research — eliminating the need for the experimenter and subjects to be in the same room. While unanticipated, this shift to remote research methods is an opportunity to revisit and further develop remote experimental techniques, which can have beneficial long-lasting implications on lighting research during and after the pandemic. Perhaps the most common type of remote research is online experiments; which can greatly benefit from improved techniques to allow for greater control or characterization of experimental conditions, like those proposed by Villa and Labayrade . These techniques require validation specific to the type of response collected and context, e.g. space type and attributes. New research techniques continue to emerge and will enable remote collection of objective measures such as gaze direction and high dynamic range images (HDRIs) without specialized equipment. In fact, many of these methods and techniques are commonly used in other disciplines, like vision science and psychology, and can be adapted for lighting research. Not all lighting studies can be conducted online, but in the age of ubiquitous and connected technologies, there is a largely missed opportunity to utilize crowdsourced responses to lighting conditions in real environments where people live and go about their daily lives without the research being limited to a certain time and laboratory locations. For instance, outdoor street luminaires can be rated by passersby using ecological momentary assessments on mobile phones. While this approach does not provide laboratory-level control over experimental conditions, it can provide more contextual responses resulting from ‘normal’ dynamic gaze, behavior, and interactions. Further, it can also reduce bias related to the experimental setting. Further development of remote research methods and their use in lighting research can improve the quality of lighting research. Given that sample sizes in most lighting research are relatively small, remote research can substantially increase sample sizes, reduce research costs, and shorten study duration, all while reducing interaction between experimenter and subjects. Another benefit is reaching a wider audience and including under-represented individuals who typically are not reachable using common recruitment methods. The pandemic has set back our plans for in-lab experiments, but can it inspire us to think of new and creative ways to expand lighting research?

Abboushi, Belal K.↗

NASA NTRS2008

Certifying Auto-Generated Flight Code

Model-based design and automated code generation are being used increasingly at NASA. Many NASA projects now use MathWorks Simulink and Real-Time Workshop for at least some of their modeling and code development. However, there are substantial obstacles to more widespread adoption of code generators in safety-critical domains. Since code generators are typically not qualified, there is no guarantee that their output is correct, and consequently the generated code still needs to be fully tested and certified. Moreover, the regeneration of code can require complete recertification, which offsets many of the advantages of using a generator. Indeed, manual review of autocode can be more challenging than for hand-written code. Since the direct V&V of code generators is too laborious and complicated due to their complex (and often proprietary) nature, we have developed a generator plug-in to support the certification of the auto-generated code. Specifically, the AutoCert tool supports certification by formally verifying that the generated code is free of different safety violations, by constructing an independently verifiable certificate, and by explaining its analysis in a textual form suitable for code reviews. The generated documentation also contains substantial tracing information, allowing users to trace between model, code, documentation, and V&V artifacts. This enables missions to obtain assurance about the safety and reliability of the code without excessive manual V&V effort and, as a consequence, eases the acceptance of code generators in safety-critical contexts. The generation of explicit certificates and textual reports is particularly well-suited to supporting independent V&V. The primary contribution of this approach is the combination of human-friendly documentation with formal analysis. The key technical idea is to exploit the idiomatic nature of auto-generated code in order to automatically infer logical annotations. The annotation inference algorithm itself is generic, and parametrized with respect to a library of coding patterns that depend on the safety policies and the code generator. The patterns characterize the notions of definitions and uses that are specific to the given safety property. For example, for initialization safety, definitions correspond to variable initializations while uses are statements which read a variable, whereas for array bounds safety, definitions are the array declarations, while uses are statements which access an array variable. The inferred annotations are thus highly dependent on the actual program and the properties being proven. The annotations, themselves, need not be trusted, but are crucial to obtain the automatic formal verification of the safety properties without requiring access to the internals of the code generator. The approach has been applied to both in-house and commercial code generators, but is independent of the particular generator used. It is currently being adapted to flight code generated using MathWorks Real-Time Workshop, an automatic code generator that translates from Simulink/Stateflow models into embedded C code.

Denney, Ewen↗

NASA NTRSDate not supplied

TechEdSat 7, 10, 13, 15: Exo-brake Experiments on the ISS, First Virgin Orbit, and First Firefly-Alpha Test Flights.

The TechEdSat flight series (TES-n), developed by the Nano Orbital Workshop (NOW) group at NASA Ames, has been studying cube satellite re-entry technologies with a focus on Exo-Brake drag device research. An exo-atmospheric braking device, the Exo-Brake uses the tenuous upper atmosphere acting in a free molecular flow regime to enable controllable adjustment of the drag profile of the host spacecraft, currently enabling rapid disposal of small spacecraft after mission conclusion, and eventual targeted de-orbit to a desired entry point at the Von Karman line, or approximately 100km in altitude. The TES-7 mission, flown on the first successful Virgin Orbit flight January 17, 2021, was injected into a 500km, 61-degree inclination orbit, with an expected orbital lifetime of approximately ten years. After successful deployment of a unique hydrogen gas-cell inflation design ‘disposal’-type Mylar Exo-Brake intended to rapidly de-orbit the spacecraft, the maximum expected orbital lifetime of the TES-7 spacecraft was successfully reduced from ten years to 1.3 years, an 87% reduction in orbit lifetime via a passive, fuel-less system. The subsequent TES-13 mission utilized a new, less complex ‘disposal’-type Exo-Brake design made from collapsible rigid struts rather than inflated struts to reduce the engineering, construction, and safety complexities introduced by the prior hydrogen gas inflation design. The rigid strut Exo-Brake design is stowed via rotational compression and deploys using only stored spring energy once released via electronic actuator. This new rotation compression storage design has become the new Exo-Brake design standard used on TES missions thanks to its simplicity. Following on the success of this new Exo-Brake design demonstrated by TES-13, the design was further refined to enabled active manipulation of the Exo-Brake effective drag area though a winch-like system. Both the TES-10 and TES-15 spacecraft were equipped with geometrically similar Exo-Brake devices capable of such active drag modulation, with the intent of studying the operational impact of having such devices on cube satellite missions. To increase the survival time of the Exo-Brake at low altitudes and thus gain more experiment time and better guidance capability, TES-15 was equipped with a modulated Exo-Brake constructed from 3M™ Nextel™ 440 ceramic oxide fiber, the same fabric material used in the Space Shuttle TPS system, rather than Mylar. After launching on Alpha Flight 2 October 1st, 2022, Firefly’s first successful launch, TES-15 met the same modulation restrictions as TES-10, with modulation prohibited above 200km to avoid possible collision with other spacecraft. In this case, a low deployment orbit caused an extremely short mission life, which, coupled with delayed spacecraft identification, exacerbated collision concerns and caused performance data of the high-temperature Exo-Brake design to be inconclusive. As such, the Nano Orbital Workshop has taken a new approach of only conducting modulated Exo-Brake research on missions deploying below ISS altitude to avoid collision avoidance restrictions, and is working to improve spacecraft identification and location reporting techniques to increase experiment durations. Upcoming TES mission will therefore use one of two classes of Exo-Brake depending on their target altitude, as to be described in the submission.

M Murbach↗

NASA NTRSDate not supplied

TechEdSat 7, 10, 13, 15: Exo-brake Experiments on the ISS, First Virgin Orbit, and First Firefly-Alpha Test Flights

The TechEdSat flight series (TES-n), developed by the Nano Orbital Workshop (NOW) group at NASA Ames, has been studying cube satellite re-entry technologies with a focus on Exo-Brake drag device research. An exo-atmospheric braking device, the Exo-Brake uses the tenuous upper atmosphere acting in a free molecular flow regime to enable controllable adjustment of the drag profile of the host spacecraft, currently enabling rapid disposal of small spacecraft after mission conclusion, and eventual targeted de-orbit to a desired entry point at the Von Karman line, or approximately 100km in altitude. The TES-7 mission, flown on the first successful Virgin Orbit flight January 17, 2021, was injected into a 500km, 61-degree inclination orbit, with an expected orbital lifetime of approximately ten years. After successful deployment of a unique hydrogen gas-cell inflation design ‘disposal’-type Mylar Exo-Brake intended to rapidly de-orbit the spacecraft, the maximum expected orbital lifetime of the TES-7 spacecraft was successfully reduced from ten years to 1.3 years, an 87% reduction in orbit lifetime via a passive, fuel-less system. The subsequent TES-13 mission utilized a new, less complex ‘disposal’-type Exo-Brake design made from collapsible rigid struts rather than inflated struts to reduce the engineering, construction, and safety complexities introduced by the prior hydrogen gas inflation design. The rigid strut Exo-Brake design is stowed via rotational compression and deploys using only stored spring energy once released via electronic actuator. This new rotation compression storage design has become the new Exo-Brake design standard used on TES missions thanks to its simplicity. Following on the success of this new Exo-Brake design demonstrated by TES-13, the design was further refined to enabled active manipulation of the Exo-Brake effective drag area though a winch-like system. Both the TES-10 and TES-15 spacecraft were equipped with geometrically similar Exo-Brake devices capable of such active drag modulation, with the intent of studying the operational impact of having such devices on cube satellite missions. To increase the survival time of the Exo-Brake at low altitudes and thus gain more experiment time and better guidance capability, TES-15 was equipped with a modulated Exo-Brake constructed from 3M™ Nextel™ 440 ceramic oxide fiber, the same fabric material used in the Space Shuttle TPS system, rather than Mylar. After launching on Alpha Flight 2 October 1st, 2022, Firefly’s first successful launch, TES-15 met the same modulation restrictions as TES-10, with modulation prohibited above 200km to avoid possible collision with other spacecraft. In this case, a low deployment orbit caused an extremely short mission life, which, coupled with delayed spacecraft identification, exacerbated collision concerns and caused performance data of the high-temperature Exo-Brake design to be inconclusive. As such, the Nano Orbital Workshop has taken a new approach of only conducting modulated Exo-Brake research on missions deploying below ISS altitude to avoid collision avoidance restrictions, and is working to improve spacecraft identification and location reporting techniques to increase experiment durations. Upcoming TES mission will therefore use one of two classes of Exo-Brake depending on their target altitude, as to be described in the submission.

Marcus Murbach↗

DOE OSTI2021

Can we safely go to 200 °C? An integrated approach to assessing impacts to the engineered barrier system in a high-temperature repository

Abstract. This presentation gives on overview of the complex thermo-hydro-mechanical-chemical (THMC) processes occurring during the disposal of heat-producing high-level radioactive waste in geologic repositories. A specific focus is on the role of compacted bentonite, which is commonly used as an engineered backfill material for emplacement tunnels because of its low permeability, high swelling pressure, and radionuclide retention capacity. Laboratory and field tests integrated with THMC modeling have provided an effective way to deepen our understanding of temperature-related perturbations in the engineered barrier system; however, most of this work has been conducted for maximum temperatures around 100 ∘C. In contrast, some international disposal programs have recently started investigations to understand whether local temperatures in the bentonite of up to 200 ∘C could be tolerated with no significant changes to safety relevant properties. Raising the maximum temperature is attractive for economical and safety reasons but faces the challenge of exposing the bentonite to significant temperature increases. Strong thermal gradients may induce complex moisture transport processes while geochemical processes, such as cementation and perhaps also illitization effects may occur, all of which could strongly affect the bentonite and near-field rock properties. Here, we present initial investigations of repository behavior exposed to strongly elevated temperatures. We will start discussing our current knowledge base for temperature effects in repositories exposed to a maximum temperature of 100 ∘C, based on data and related modeling analysis from a large heater experiment conducted for over 18 years in the Grimsel Test Site in Switzerland. We then show results from coupled THMC simulations of a nuclear waste repository in a clay formation exposed to a maximum temperature of 200 ∘C. We also explore preliminary data from a bench-scale laboratory mock-up experiment, which was designed to represent the strong THMC gradients occurring in a “hot” repository, and we finally touch on a full-scale field heater test to be conducted soon in the Grimsel Test Site underground research laboratory in Switzerland (referred to as HotBENT).

Birkholzer, Jens T. (ORCID:0000000279891912)↗

NASA NTRS2015

Fault Management Architectures and the Challenges of Providing Software Assurance

The satellite systems Fault Management (FM) is focused on safety, the preservation of assets, and maintaining the desired functionality of the system. How FM is implemented varies among missions. Common to most is system complexity due to a need to establish a multi-dimensional structure across hardware, software and operations. This structure is necessary to identify and respond to system faults, mitigate technical risks and ensure operational continuity. These architecture, implementation and software assurance efforts increase with mission complexity. Because FM is a systems engineering discipline with a distributed implementation, providing efficient and effective verification and validation (VV) is challenging. A breakout session at the 2012 NASA Independent Verification Validation (IVV) Annual Workshop titled VV of Fault Management: Challenges and Successes exposed these issues in terms of VV for a representative set of architectures. NASA's IVV is funded by NASA's Software Assurance Research Program (SARP) in partnership with NASA's Jet Propulsion Laboratory (JPL) to extend the work performed at the Workshop session. NASA IVV will extract FM architectures across the IVV portfolio and evaluate the data set for robustness, assess visibility for validation and test, and define software assurance methods that could be applied to the various architectures and designs. This work focuses efforts on FM architectures from critical and complex projects within NASA. The identification of particular FM architectures, visibility, and associated VVIVV techniques provides a data set that can enable higher assurance that a satellite system will adequately detect and respond to adverse conditions. Ultimately, results from this activity will be incorporated into the NASA Fault Management Handbook providing dissemination across NASA, other agencies and the satellite community. This paper discusses the approach taken to perform the evaluations and preliminary findings from the research including identification of FM architectures, visibility observations, and methods utilized for VVIVV.

Fault Management↗

NASA NTRSDate not supplied

Development of Urban Air Mobility (UAM) Vehicles for Ease of Operation

To date the air transportation system has been developed with the in-cremental introduction of new technology and with highly experienced air transport pilots and air traffic controllers overseeing flight operations. Thus, we currently have one of the safest commercial aviation systems in the world. General Aviation (GA) in the United States, however, has not always followed the same cautious and monitored approach to implementation; consequently, the GA safety record does not meet the high standards of commercial aviation. Recently, a new system known as Urban Air Mobility (UAM), is attracting considerable interest and investment from industry and government agencies. UAM refers to a system of passenger and small-cargo air transportation vehicles within an urban area with the goal of reducing the number of times we need to use our cars, thus improving urban traffic by moving people and cargo from crowded single pas-senger vehicles on our roads to personal and on-demand air vehicles. These UAM vehicles will be small and based on electric, Vertical-Take-Off-and-Landing (eV-TOL) systems. A significant component of UAM is offloading of flight-man-agement responsibilities from human pilots to newly-developed autonomy. Cur-rently, over 100 UAM vehicles are either in development or production. Most, if not all, have a goal of fully autonomous vehicle operations, but fully autonomous flying vehicles are not expected in the near future. Therefore, we are de-veloping concepts for UAM vehicles that will be easy to fly and/or manage by operators with minimal pilot training. In this paper we will discuss our human-automation teaming approach to develop an easy-to-operate VTOL aircraft, and some of the fly-by-wire technology needed to stabilize the vehicle so that a sim-ple ecological mental model of the flying task can be implemented. We will discuss the requirements for a stability augmentation system that must be developed to support our simple pilot input model, and also present design guidelines and requirements based on a pilot input and management model. Finally, our ap-proach to vehicle development will involve considerable operator testing and evaluation: improving pilot model, inceptors, displays and also work on a plan for how a UAM vehicle can be integrated with terminal area air traffic control airspace with minimal impact on controller workload.

UAM↗

DOE OSTI2015

Development of a Novel Gas Pressurized Stripping Process-Based Technology for CO₂ Capture from Post-Combustion Flue Gases

A novel Gas Pressurized Stripping (GPS) post-combustion carbon capture (PCC) process has been developed by Carbon Capture Scientific, LLC, CONSOL Energy Inc., Nexant Inc., and Western Kentucky University in this bench-scale project. The GPS-based process presents a unique approach that uses a gas pressurized technology for CO₂ stripping at an elevated pressure to overcome the energy use and other disadvantages associated with the benchmark monoethanolamine (MEA) process. The project was aimed at performing laboratory- and bench-scale experiments to prove its technical feasibility and generate process engineering and scale-up data, and conducting a techno-economic analysis (TEA) to demonstrate its energy use and cost competitiveness over the MEA process. To meet project goals and objectives, a combination of experimental work, process simulation, and technical and economic analysis studies were applied. The project conducted individual unit lab-scale tests for major process components, including a first absorption column, a GPS column, a second absorption column, and a flasher. Computer simulations were carried out to study the GPS column behavior under different operating conditions, to optimize the column design and operation, and to optimize the GPS process for an existing and a new power plant. The vapor-liquid equilibrium data under high loading and high temperature for the selected amines were also measured. The thermal and oxidative stability of the selected solvents were also tested experimentally and presented. A bench-scale column-based unit capable of achieving at least 90% CO₂ capture from a nominal 500 SLPM coal-derived flue gas slipstream was designed and built. This integrated, continuous, skid-mounted GPS system was tested using real flue gas from a coal-fired boiler at the National Carbon Capture Center (NCCC). The technical challenges of the GPS technology in stability, corrosion, and foaming of selected solvents, and environmental, health and safety risks have been addressed through experimental tests, consultation with vendors and engineering analysis. Multiple rounds of TEA were performed to improve the GPS-based PCC process design and operation, and to compare the energy use and cost performance of a nominal 550-MWe supercritical pulverized coal (PC) plant among the DOE/NETL report Case 11 (the PC plant without CO₂ capture), the DOE/NETL report Case 12 (the PC plant with benchmark MEA-based PCC), and the PC plant using GPS-based PCC. The results reveal that the net power produced in the PC plant with GPS-based PCC is 647 MWe, greater than that of the Case 12 (550 MWe). The 20-year LCOE for the PC plant with GPS-based PCC is 97.4 mills/kWh, or 152% of that of the Case 11, which is also 23% less than that of the Case 12. These results demonstrate that the GPS-based PCC process is energy-efficient and cost-effective compared with the benchmark MEA process.

Chen, Shiaoguo↗

DOE OSTI2021

Modeling FLEX Human Actions Using the EMRALD Dynamic Risk Assessment Tool

Most current efforts have modified and applied existing human reliability analysis (HRA) methods to treat human actions related to beyond-design-basis external events in which diverse and flexible coping strategies (FLEX) equipment would be deployed. However, many questions remain regarding the suitability of legacy HRA methods to address FLEX human actions, sparking the need for a new method of reasonably evaluating them. In this context, Idaho National Laboratory (INL) researched a relatively new approach to treating FLEX human actions via Event Modeling Risk Assessment Using Linked Diagrams (EMRALD) software. EMRALD was developed to support the increasing need for dynamic probabilistic risk assessment (PRA) models that can respond to evolving plant conditions during simulations. A couple benefits were identified when analyzing FLEX human actions through this software. In general, it is especially useful for evaluating a strategy’s feasibility, including FLEX human actions that require a relatively long time to perform. In this paper, we suggest how FLEX human actions can be modeled using the EMRALD software. Two different HRA modeling approaches using EMRALD are introduced: (1) procedure-based modeling and (2) PRA/HRA-based modeling. The former approach was introduced in the authors’ previous paper, whereas this paper mainly discusses how the latter approach works for an extended loss of AC power (ELAP) scenario with relevant procedures and PRA models. A hybrid method combining the two modeling approaches is introduced at the paper’s conclusion.

99 GENERAL AND MISCELLANEOUS↗

NASA NTRS2015

Abort Trigger False Positive and False Negative Analysis Methodology for Threshold-Based Abort Detection

This paper describes a quantitative methodology for bounding the false positive (FP) and false negative (FN) probabilities associated with a human-rated launch vehicle abort trigger (AT) that includes sensor data qualification (SDQ). In this context, an AT is a hardware and software mechanism designed to detect the existence of a specific abort condition. Also, SDQ is an algorithmic approach used to identify sensor data suspected of being corrupt so that suspect data does not adversely affect an AT's detection capability. The FP and FN methodologies presented here were developed to support estimation of the probabilities of loss of crew and loss of mission for the Space Launch System (SLS) which is being developed by the National Aeronautics and Space Administration (NASA). The paper provides a brief overview of system health management as being an extension of control theory; and describes how ATs and the calculation of FP and FN probabilities relate to this theory. The discussion leads to a detailed presentation of the FP and FN methodology and an example showing how the FP and FN calculations are performed. This detailed presentation includes a methodology for calculating the change in FP and FN probabilities that result from including SDQ in the AT architecture. To avoid proprietary and sensitive data issues, the example incorporates a mixture of open literature and fictitious reliability data. Results presented in the paper demonstrate the effectiveness of the approach in providing quantitative estimates that bound the probability of a FP or FN abort determination.

risk assessment↗

DOE OSTI2023

Probabilistic Failure Criterion of SiC/SiC Composites Under Multiaxial Loading

Owing to its excellent mechanical properties and stability under high temperature and neutron irradiation conditions, SiC/SiC composites have emerged as a promising material for light water reactors (LWRs) in the development of accident-tolerant fuel (ATF) systems. Structural integrity and retention of hermeticity are two crucial requirements for SiC/SiC claddings during normal operations, and both of them are closely related to the proportional limit stress (PLS) of the material. Understanding the behavior of SiC/SiC composites under multiaxial stress states and developing a probabilistic approach for evaluating the structural vulnerability are of paramount importance for reliability-based analysis and design of SiC/SiC composite claddings. So far, there has been very limited effort towards experimental and analytical investigations of probabilistic failure of SiC/SiC claddings. This critical knowledge gap motivates this research. A probabilistic failure criterion for SiC/SiC composites under multi-axial loading is developed, and this criterion is incorporated into reliability analysis of the structural integrity of SiC/SiC fuel cladding. The research consists of two parts: 1) experimental investigation of multiaxial failure behavior of SiC/SiC composites, and 2) theoretical modeling of time-dependent probabilistic failure of SiC/SiC cladding. In the experimental investigation, the PLS is determined through the examination of stress-strain response, the acoustic emission measurement, as well as the X-ray computed tomography. The theoretical framework is derived by combin- ing the finite weakest-link statistical model and the subcritical damage growth model. This theoretical model captures the time-dependent failure mechanism of the material, which has a major consequence for predicting the lifetime distribution of the cladding. Meanwhile, the model also predicts that the failure statistics of the cladding depends strongly on the cladding length. The results of the multiaxial experiments reveal the level of statistical variation of the PLS of SiC/SiC materials under different stress states. The theoretical model provides a robust analytical tool for extrapolation of small-scale laboratory test results to the behavior of full-scale claddings. These findings establish a scientific foundation for the development of reliability-based design of SiC/SiC fuel claddings, which will play an essential role in improving the structural safety and integrity of LWRs.

42 ENGINEERING↗

NASA NTRS2014

NASA's Space Launch System: An Enabling Capability for Discovery

The National Aeronautics and Space Administration's (NASA's) Space Launch System (SLS) Program, managed at the Marshall Space Flight Center, is making progress toward delivering a new capability for human spaceflight and scientific missions beyond Earth orbit. Developed with the goals of safety, affordability, and sustainability in mind, the SLS rocket will launch the Orion Multi-Purpose Crew Vehicle (MPCV), equipment, supplies, and major science missions for exploration and discovery. Making its first uncrewed test flight in 2017 and its first crewed flight in 2021, the SLS will evolve into the most powerful launch vehicle ever flown, capable of supporting human missions into deep space and to Mars. This paper will summarize the planned capabilities of the vehicle, the progress the SLS Program has made in the years since the Agency formally announced its architecture in September 2011, and the path the program is following to reach the launch pad in 2017 and then to evolve the 70 metric ton (t) initial lift capability to 130 t lift capability. The paper will outline the milestones the program has already reached, from developmental milestones such as the manufacture of the first flight hardware and recordbreaking engine testing, to life-cycle milestones such as the vehicle's Preliminary Design Review in the summer of 2013. The paper will also discuss the remaining challenges in both delivering the 70 t vehicle and in evolving its capabilities to the 130 t vehicle, and how the program plans to accomplish these goals. In addition, this paper will demonstrate how the Space Launch System is being designed to enable or enhance not only human exploration missions, but robotic scientific missions as well. Because of its unique launch capabilities, SLS will support simplifying spacecraft complexity, provide improved mass margins and radiation mitigation, and reduce mission durations. These capabilities offer attractive advantages for ambitious science missions by reducing infrastructure requirements, cost, and schedule. A traditional baseline approach for a mission to investigate the Jovian system would require a complicated trajectory with several gravity-assist planetary fly-bys to achieve the necessary outbound velocity. The SLS rocket, offering significantly higher C3 energies, can more quickly and effectively take the mission directly to its destination, providing scientific results sooner and at lower operational cost. The SLS rocket will launch payloads of unprecedented mass and volume, such as "monolithic" telescopes and in-space infrastructure, and will revolutionize science mission planning and design for years to come. As this paper will explain, SLS is making measurable progress toward becoming a global infrastructure asset for robotic and human scouts of all nations by harnessing business and technological innovations to deliver sustainable solutions for space exploration.

Creech, Stephen D.↗

NASA NTRS2014

NASA's Space Launch System: An Enabling Capability for Discovery

The National Aeronautics and Space Administration's (NASA's) Space Launch System (SLS) Program, managed at the Marshall Space Flight Center, is making progress toward delivering a new capability for human spaceflight and scientific missions beyond Earth orbit. Developed with the goals of safety, affordability, and sustainability in mind, the SLS rocket will launch the Orion Multi-Purpose Crew Vehicle (MPCV), equipment, supplies, and major science missions for exploration and discovery. Making its first uncrewed test flight in 2017 and its first crewed flight in 2021, the SLS will evolve into the most powerful launch vehicle ever flown, capable of supporting human missions into deep space and to Mars. This paper will summarize the planned capabilities of the vehicle, the progress the SLS Program has made in the years since the Agency formally announced its architecture in September 2011, and the path the program is following to reach the launch pad in 2017 and then to evolve the 70 metric ton (t) initial lift capability to 130 t lift capability. The paper will outline the milestones the program has already reached, from developmental milestones such as the manufacture of the first flight hardware and recordbreaking engine testing, to life-cycle milestones such as the vehicle's Preliminary Design Review in the summer of 2013. The paper will also discuss the remaining challenges in both delivering the 70 t vehicle and in evolving its capabilities to the 130 t vehicle, and how the program plans to accomplish these goals. In addition, this paper will demonstrate how the Space Launch System is being designed to enable or enhance not only human exploration missions, but robotic scientific missions as well. Because of its unique launch capabilities, SLS will support simplifying spacecraft complexity, provide improved mass margins and radiation mitigation, and reduce mission durations. These capabilities offer attractive advantages for ambitious science missions by reducing infrastructure requirements, cost, and schedule. A traditional baseline approach for a mission to investigate the Jovian system would require a complicated trajectory with several gravity-assist planetary fly-bys to achieve the necessary outbound velocity. The SLS rocket, offering significantly higher C3 energies, can more quickly and effectively take the mission directly to its destination, providing scientific results sooner and at lower operational cost. The SLS rocket will launch payloads of unprecedented mass and volume, such as "monolithic" telescopes and in-space infrastructure, and will revolutionize science mission planning and design for years to come. As this paper will explain, SLS is making measurable progress toward becoming a global infrastructure asset for robotic and human scouts of all nations by harnessing business and technological innovations to deliver sustainable solutions for space exploration.

Creech, Stephen D.↗

NASA NTRS2015

Fault Management Architectures and the Challenges of Providing Software Assurance

Fault Management (FM) is focused on safety, the preservation of assets, and maintaining the desired functionality of the system. How FM is implemented varies among missions. Common to most missions is system complexity due to a need to establish a multi-dimensional structure across hardware, software and spacecraft operations. FM is necessary to identify and respond to system faults, mitigate technical risks and ensure operational continuity. Generally, FM architecture, implementation, and software assurance efforts increase with mission complexity. Because FM is a systems engineering discipline with a distributed implementation, providing efficient and effective verification and validation (V&V) is challenging. A breakout session at the 2012 NASA Independent Verification & Validation (IV&V) Annual Workshop titled "V&V of Fault Management: Challenges and Successes" exposed this issue in terms of V&V for a representative set of architectures. NASA's Software Assurance Research Program (SARP) has provided funds to NASA IV&V to extend the work performed at the Workshop session in partnership with NASA's Jet Propulsion Laboratory (JPL). NASA IV&V will extract FM architectures across the IV&V portfolio and evaluate the data set, assess visibility for validation and test, and define software assurance methods that could be applied to the various architectures and designs. This SARP initiative focuses efforts on FM architectures from critical and complex projects within NASA. The identification of particular FM architectures and associated V&V/IV&V techniques provides a data set that can enable improved assurance that a system will adequately detect and respond to adverse conditions. Ultimately, results from this activity will be incorporated into the NASA Fault Management Handbook providing dissemination across NASA, other agencies and the space community. This paper discusses the approach taken to perform the evaluations and preliminary findings from the research.

Fault Management↗

NASA NTRSDate not supplied

Open Innovation for a NASA Architecture Library

NASA’s Center of Excellence for Collaborative Innovation (CoECI) uses open innovation, or “crowdsourcing”, to access the global public to find ideas, concepts, designs, or solutions that meet a previously unmet need possibly resulting in significant advances in performance. The Center of Excellence for Collaborative Innovation was launched at the request of the White House Office of Science and Technology Policy. This is both a non-traditional method of innovation and a non-traditional method of outreach to the public to involve them in space technologies and programs. It has been used often for software development and new hardware technology. In this case we applied it to innovate with systems engineering tools for creating space architectures. The challenge was sponsored by NASA Engineering and Safety Center Systems Engineering Technical Fellow as part of a program for NASA’s adoption of MBSE. It was a trial to see if there would be as much participation or quality submissions with this more specialized topic and skill. The challenge sought space architecture representations and decompositions to create a library of modeled parts in a system modeling language (SysML). Mission architects mostly start from scratch to build model elements representing the functional and physical architecture of a system in SysML. There are a few beginning libraries, but these are also local to a program or group. A common library will save system engineers a large amount of time, will allow project stakeholders to recognize common graphics and quickly understand the architecture options. The challenge was promoted internationally, especially through professional organizations and universities with a systems engineering focus. It was open for 4 months, purposefully over the winter holiday break time to allow participants extra time outside of work or school. The challenge was designed so that expertise in space hardware was not necessary but getting to play with models of space architecture could provide motivation to participate. We did not receive as many entries as other broader outreach challenges, but the ones we received were extremely thorough and high quality. Solutions came from individuals and teams, students and professional consultants from the United States and Europe. We learned a few lessons about how to engage with the public and what characteristics of a problem result in good crowdsourcing results. The outreach challenge produced several useful ideas and modeled space elements, and the group will be engaging the winners to learn more about their new approaches.

innovation↗

NASA NTRSDate not supplied

Leveling Arguments: Easier Said Than Done

The aerospace industry’s current desire to rapidly adopt new technologies is inconsistent with the traditional approach to creating new aerospace certification standards. To address this, an FAA-sponsored international Overarching Properties Working Group comprising industry representatives and certifying agencies has introduced the concept of Overarching Properties (OPs). OPs provide a foundation for proposing alternative Means of Compliance (MoC) by demonstrating a product's possession of the Intent, Correctness, and Innocuity properties. Handling criticality levels with the OPs is in its infancy but still required to integrate alternative MoC into the existing aerospace certification infrastructure. This paper examines the impact of criticality levels on the creation and evaluation of OP-related arguments (OPRAs), specifically focusing on the Auxiliary Power Unit (APU) system. The study highlights the need for tailored OPRA creation based on assigned criticality levels and proposes self-assessment techniques to strengthen arguments. This research serves as a stepping stone in exploring criticality levels for OPs and bridging the gap in aerospace certification practices.

argument↗

NASA NTRS2006

Exploration Health Risks: Probabilistic Risk Assessment

Maintenance of human health on long-duration exploration missions is a primary challenge to mission designers. Indeed, human health risks are currently the largest risk contributors to the risks of evacuation or loss of the crew on long-duration International Space Station missions. We describe a quantitative assessment of the relative probabilities of occurrence of the individual risks to human safety and efficiency during space flight to augment qualitative assessments used in this field to date. Quantitative probabilistic risk assessments will allow program managers to focus resources on those human health risks most likely to occur with undesirable consequences. Truly quantitative assessments are common, even expected, in the engineering and actuarial spheres, but that capability is just emerging in some arenas of life sciences research, such as identifying and minimize the hazards to astronauts during future space exploration missions. Our expectation is that these results can be used to inform NASA mission design trade studies in the near future with the objective of preventing the higher among the human health risks. We identify and discuss statistical techniques to provide this risk quantification based on relevant sets of astronaut biomedical data from short and long duration space flights as well as relevant analog populations. We outline critical assumptions made in the calculations and discuss the rationale for these. Our efforts to date have focussed on quantifying the probabilities of medical risks that are qualitatively perceived as relatively high risks of radiation sickness, cardiac dysrhythmias, medically significant renal stone formation due to increased calcium mobilization, decompression sickness as a result of EVA (extravehicular activity), and bone fracture due to loss of bone mineral density. We present these quantitative probabilities in order-of-magnitude comparison format so that relative risk can be gauged. We address the effects of conservative and nonconservative assumptions on the probability results. We discuss the methods necessary to assess mission risks once exploration mission scenarios are characterized. Preliminary efforts have produced results that are commensurate with earlier qualitative estimates of risk probabilities in this and other operational contexts, indicating that our approach may be usefully applied in support of the development of human health and performance standards for long-duration space exploration missions. This approach will also enable mission-specific probabilistic risk assessments for space exploration missions.

Rhatigan, Jennifer↗