SEARCH · Search NASA
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
Several requirements analysis techniques widely used in safety-critical systems are being adapted to support the analysis of secure systems. Perhaps the most relevant system safety techique for Intrusion Detection Systems is hazard analysis.
With the rapid advancement and acceleration in the electric vehicle (EV) industry within the United States, major automakers and EV charging companies are increasingly adopting the North American Charging Standard (NACS) connector style, now officially known as J3400. This shift is expected to enhance charging infrastructure, providing a better customer experience by making it easier for all EV drivers to access a wider network of direct-current (DC) fast chargers (DCFCs). However, the adoption of the J3400 standard presents challenges for many EVs already on the roads and some currently coming off production lines that are equipped with the Combined Charging System (CCS) connector, which this report will refer to as the North American standard, CCS1. These vehicles will need adapters to use new or existing J3400 infrastructure. During this transition, several issues have emerged. Firstly, there is a need to standardize the new connector type to ensure it is interoperable, safe, and reliable. Second, existing CCS EV drivers need a way to access the J3400 network, which will require electric vehicle supply equipment (EVSE) or sites with both connector types, driver-provided adapters to physically convert from CCS to J3400, or EVSE with retained adapters designed for use with the EVSE. Third, adapter standards will need to be written to specify how they will be designed and what evaluations will be needed to ensure safe and reliable performance. To address these challenges, adapters that support different types of charging connectors will be essential. These adapters will play a crucial role in supporting the transition and ensuring continued service for legacy EVs with CCS inlets as the J3400 standard becomes the predominant one in the United States. Consequently, the National Charging Experience (ChargeX) Consortium has investigated and performed a teardown analysis on the different adapter versions on the market. The aim is to create a failure mode and effects analysis (FMEA) on what are expected to be the most common adapter types used in this transition. In order to support this work, we executed an FMEA exercise with the main goal of identifying gaps in the existing adapters' performance and conformance to the most common safety requirements of high-power and high-voltage devices. This effort focused on adapters provided by the driver, as these may present the highest safety and reliability risks. The recommendations made here apply to both retained and driver-provided adapters.
Current needs for high-reliability, reusable software; rapid, evolutionary development; and verification of innovative software architectures have focused attention on improving techniques for analyzing the safety and reliability of embedded software.
The pressing need to improve traffic safety has become a societal concern in many cities around the world. Many traffic accidents are not occurring as stand-alone events but as consequences of other road incidents and hazards. To capture the traffic safety indications from a holistic aspect, this paper presents a suite of visualization techniques to explore large traffic safety datasets collected from different sources using adaptive study areas which include the whole region (Hamilton County, Ohio, U.S.) as well as smaller sub-areas. In the present study, these data source include (1) Hamilton County’s 911 emergency response data, which includes traffic incidents as well as other types of incidents throughout the county, and (2) Tennessee crash data, which contains only vehicle crashes with more detail on the circumstances of each crash. We find that both abstract and spatial visualization techniques are used to derive a better understanding of traffic safety patterns for different traffic participants in various urban environments. In addition to the entire region of Hamilton County, safety is examined on the highways, in the downtown area, and in a shopping district east of the city center. It is possible to characterize incidents in the different areas, gain a better understanding of common incident patterns, and identify outliers in the data. Finally, a textured tile calendar is presented to compare spatiotemporal patterns.
Armstrong Flight Research Center is NASA’s premier flight research center. It is located on Edwards AFB in the high desert of California. The AFRC Safety and Mission Assurance Directorates Human Factors Program is one tool that enables Armstrong to be the national center of excellence for conducting leading edge aerospace flight research, airborne science, and airborne astronomy by providing responsive, effective, and adaptive Safety & Mission Assurance support. The AFRC Human Factors Specialist is also a member of the Agency Human Factors Task Force which provides and expands the understanding and impact of Human Factors across the Agency. The Program is managed by the Office of Safety and Mission Assurance at NASA Headquarters.
In a half century of human spaceflight, NASA has continuously refined agency safety and reliability requirements in response to mission demands, critical failures, and technology development. Early spacecraft, including Mercury, Gemini and Apollo vehicles, were highly reliant on dissimilar redundancy and demonstrated test margins. Later programs, such as the reusable Space Transportation System (STS) and International Space Station (ISS), introduced probabilistic studies and isolated two-failure tolerance to improve robustness at the expense of added complexity. More recently, the Orion Multi-Program Crew Vehicle (MPCV) program adopted universal single-failure tolerance with two categorical exceptions; Zero-Failure Tolerant (0FT) and Design for Minimum Risk (DFMR) hardware. Failure tolerance variances are defined and managed in accordance with agency human-rating requirements, and require concurrence from program Technical Authorities (TA) as well as the MPCV Safety and Mission Assurance Safety and Engineering Review Panel (MSERP). To understand and reaffirm standards applied to Apollo, Space Shuttle and Orion vehicles, Orion and Deep Space Gateway Safety and Mission Assurance (S&MA) representatives conducted accelerated research to compare unique safety and reliability criteria against ground and flight anomalies, based on information contained in post-mission reports and the Problem Reporting and Corrective Action (PRACA) database. In some cases, high-profile failures and narrow escapes have reinforced decisions to maintain or adapt safety requirements. In others, empirical trends have highlighted the need for vigilance and innovative safety guidelines. Given the inability to achieve absolute compliance with evolving safety and reliability requirements, the team conducted a targeted review of DFMR and 0FT propulsion elements within the framework of changing system design, inspection, materials and process developments to formulate conclusions on technological maturity, failure density, and net changes in safety risk. Based on the aggregate performance of high-reliability and failure-tolerant systems, the authors have attempted to establish best practices and guidelines to inform future program decisions. On a somewhat cautionary note, this study is not intended to direct a universal set of requirements for future missions based on prior lessons learned. Spacecraft safety is a multi-variable problem, and attempts to mitigate past failures will not guarantee future success. However, this assessment offers a retrospective review of policy changes, implementation and effectiveness. In the future, NASA, European Space Agency (ESA) and industry partners may benefit from a more robust correlation between requirements and performance, as space-faring nations work toward more challenging, complex and long-duration commercial and deep-space ventures.
In-time integrated safety management will be paramount for safely enabling the envisioned transformations of the future National Airspace System (NAS). The path for realizing the vision includes addressing the increasing need for advanced data analytics and fusion of aviation safety data, managed by human decision-makers. The paper describes safety management systems and its’ challenges, and how the concept of In-time Aviation Safety Management Systems addresses the need to ensure an adaptable and resilient future safety system in the envisioned transformed NAS. Finally, it discusses potential human factors challenges, including new human roles and responsibilities, new information and cognitive requirements, new intelligent technologies that change human-system interaction and coordination, and new design paradigms for human system integration and teaming.
In-time integrated safety management will be paramount for safely enabling the envisioned transformations of the future National Airspace System (NAS). The path for realizing the vision includes addressing the increasing need for advanced data analytics and fusion of aviation safety data, managed by human decision-makers. The paper describes safety management systems and its’ challenges, and how the concept of In-time Aviation Safety Management Systems addresses the need to ensure an adaptable and resilient future safety system in the envisioned transformed NAS. Finally, it discusses potential human factors challenges, including new human roles and responsibilities, new information and cognitive requirements, new intelligent technologies that change human-system interaction and coordination, and new design paradigms for human system integration and teaming.
The underlying philosophy of the general approach to failure reduction and control is presented. Safety and reliability management techniques developed in the industries which have participated in the U.S. space and defense programs are described along with adaptations to nonaerospace activities. The examples given illustrate the scope of applicability of these techniques. It is indicated that any activity treated as a 'system' is a potential user of aerospace safety and reliability management techniques.
An adaptive control architecture for safe performance of a transport aircraft subject to various adverse conditions is proposed and verified in this report. This architecture combines a nominal controller based on a Linear Quadratic Regulator with integral action, and an adaptive controller that accommodates actuator saturation and bounded disturbances. The effectiveness of the baseline controller and its adaptive augmentation are evaluated using a stand-alone control veri fication methodology. Case studies that pair individual parameter uncertainties with critical flight maneuvers are studied. The resilience of the controllers is determined by evaluating the degradation in closed-loop performance resulting from increasingly larger deviations in the uncertain parameters from their nominal values. Symmetric and asymmetric actuator failures, flight upsets, and center of gravity displacements, are some of the uncertainties considered.
This poster presents the current adaptive control research being conducted at NASA ARC and LaRC in support of the Integrated Resilient Aircraft Control (IRAC) project. The technique "Approximate Stability Margin Analysis of Hybrid Direct-Indirect Adaptive Control" has been developed at NASA ARC to address the needs for stability margin metrics for adaptive control that potentially enables future V&V of adaptive systems. The technique "Direct Adaptive Control With Unknown Actuator Failures" is developed at NASA LaRC to deal with unknown actuator failures. The technique "Adaptive Control with Adaptive Pilot Element" is being researched at NASA LaRC to investigate the effects of pilot interactions with adaptive flight control that can have implications of stability and performance.
Nuclear Safety covers significant developments in the field of nuclear safety. The scope is limited to topics relevant to the analysis and control of hazards associated with nuclear energy, operations involving fissionable materials, and the products of nuclear fission and their effects on the environment. Primary emphasis is on safety in reactor design, construction, and operation; however, safety considerations in regard to the entire fuel cycle, including fuel fabrication, spent-fuel processing, nuclear waste disposal, handling of radioisotopes, and environmental effects of these operations, are also treated. Table of Contents for this issue follows. Table of Contents for this issue follows. GENERAL SAFETY CONSIDERATIONS: 127 Quality Assurance in the Construction of Nuclear Power Plants by Sidney A. Bernsen, 141 1974 ANS Topical Meeting on Fast Reactor Safety by M. H. Fontana; CONTROL AND INSTRUMENTATION: 150 GBR-4 Protection Systems: Failures and Their Consequences by Peter Burgsmüller, J. J. Dekais, Albert Krähe, Raffaello Pignatelli, and Gottfried Vieider, 162 Standby Emergency Power Systems. Part 2—The Later Plants by E. W. Hagen; PLANT SAFETY FEATURES: 180 Radiotoxic Hazard Measure for Buried Solid Radioactive Waste by J. Hamstra, 190 The Thirteenth AEC Air-Cleaning Conference by D. W. Moeller, D. W. Underhill, and M. W. First, 203 Book Review: Nuclear Criticality Safety; CONSEQUENCES OF EFFLUENT RELEASE: 204 Environmental Radiation Effects of Nuclear Facilities in New York State by M. S. Terpilak and B. L. Jorgensen, 222 Book Review: Thermal Ecology; OPERATING EXPERIENCES: 223 Set-Point Drift in Nuclear Power-Plant Safety-Related Instrumentation Adapted by the Nuclear Safety Staff, 224 Diesel-Generator Operating Experience at Nuclear Power Plants, 227 Summary of Operating U. S. Power Reactors as of Jan. 1, 1975, 232 Selected Safety-Related Occurrences Reported in November and December 1974 Compiled by William R. Casto, 235 Recent Occurrences at Nuclear Reactors and Their Causes Compiled by William R. Casto; CURRENT EVENTS: 243 General Administrative Activities Compiled by Wm. B. Cottrell, 251 Action on Power-Reactor Projects Undergoing Regulatory Review or Consideration Compiled by Wm. B. Cottrell, 266 Action on Nonreactor Projects Undergoing Regulatory Review or Consideration Compiled by Wm. B Cottrell, 268 Proposed Rule Changes as of Jan. 1, 1975; MISCELLANY: 149 Course in Italy on High-Energy Radiation Dosimetry and Protection (Announcement), 250 Course at Northwestern on Safety of Light-Water-Cooled Nuclear Power Plants (Announcement), 266 Symposium of the Combined Effects on the Environment of Radioactive, Chemical, and Thermal Releases from the Nuclear Industry (Announcement), 271 Short Course on Engineering for Extreme Winds and Tornadoes (Announcement), 272 Three 1-Week Courses at MIT on Nuclear Power-Reactor Safety (Announcement), 272 Harvard University Short Courses (Announcement).
Motion planning remains a fundamental problem in robotics. Sampling-based algorithms use randomization to allow efficient solutions to this complex problem. As mobile robots and autonomous vehicles become more prevalent in everyday life, motion planning must be applied to increasingly challenging scenarios. Safety has become a paramount concern in motion planning for ensuring robotic applications enrich human lives. To date, many motion planning techniques to increase safety in the face of uncertain and dynamic environments have been developed. This dissertation first addresses distributional safety of Rapidly-Exploring Random Trees (RRT) through our algorithm W-Safe RRT. To acknowledge distributional uncertainty and poor modeling, W-Safe RRT uses the Wasserstein metric to provide a probabilistic bound on the distributional distance between a robot and obstacles. Human-interpretable environmental agent classification allows online safety margin adaptation. We propose and analyze an integrating region method for online classification that increases actor labeling accuracy based on behavioral feature values when compared to state of the art methods. The method performs class assignments based on local maximum likelihood in a created behavioral feature-space, allowing a notion of classification uncertainty. Model-based methods with safety guarantees can quickly become computationally in tractable, especially with multiple agents, higher dimensions, and plentiful unknowns. Sampling based algorithms have been parallelized for computation with multi-core computers and GPUs. We consider the use of quantum algorithms and computers for sampling-based motion planning for the first time. Quantum computing performs operations on superpositions of states and can solve certain problems much more efficiently than classical computers, but introduces previously unseen challenges. With Quantum-RRT, we recast the motion planning problem into a database-search structure and use Quantum Amplitude Amplification to find reachable states in the database with a quadratic performance increase over classical methods. We address two error sources with this method: quantum measurement and quantum oracle errors. We then extend this method to Parallel Quantum-RRT, which uses a manager-worker architecture with multiple parallel quantum workers to increase database search efficiency. We compare algorithm architectures and characterize probabilities of multiple workers finding solutions. Lastly, we test in simulation the quantum algorithms against classical versions in a wide variety of scenarios, concluding that a similar parallelization improvement is to be found in the quantum case as was found in the parallelization of classical RRT.
Given the current evolution of the National Airspace and future trajectory towards novel and evolving operations with varying levels of autonomy, complexity, and acceptable risk, there is an opportunity to support safety assurance by extending existing methodologies, such as Functional Hazard Assessment (FHA). In response to challenges in performing FHA for novel aviation concepts, we propose a concept for Computational Functional Hazard Assessment (CFHA), which provides processes, methods, and tools for incorporating external data to facilitate further exploration of the hazard space iterativelty throughout the design process. The core components of CFHA involve knowledge capture from historical and operational data, functional architecture specification via a formal modeling language, and simulation for hazardous scenario analysis. Through this concept, we aim to adapt conventional safety assessment to address the increasingly complex hazard space generated from emerging operations.
Given the current evolution of the National Airspace and future trajectory towards novel and evolving operations with varying levels of autonomy, complexity, and acceptable risk, there is an opportunity to support safety assurance by extending existing methodologies, such as Functional Hazard Assessment (FHA). In response to challenges in performing FHA for novel aviation concepts, we propose a concept for Computational Functional Hazard Assessment (CFHA), which provides processes, methods, and tools for incorporating external data to facilitate further exploration of the hazard space iterativelty throughout the design process. The core components of CFHA involve knowledge capture from historical and operational data, functional architecture specification via a formal modeling language, and simulation for hazardous scenario analysis. Through this concept, we aim to adapt conventional safety assessment to address the increasingly complex hazard space generated from emerging operations.
Over the last five decades, extensive research has been performed to design and develop adaptive control systems for aerospace systems and other applications where the capability to change controller behavior at different operating conditions is highly desirable. Although adaptive flight control has been partially implemented through the use of gain-scheduled control, truly adaptive control systems using learning algorithms and on-line system identification methods have not seen commercial deployment. The reason is that the certification process for adaptive flight control software for use in national air space has not yet been decided. The purpose of this paper is to examine the gaps between the state-of-the-art methodologies used to certify conventional (i.e., non-adaptive) flight control system software and what will likely to be needed to satisfy FAA airworthiness requirements. These gaps include the lack of a certification plan or process guide, the need to develop verification and validation tools and methodologies to analyze adaptive controller stability and convergence, as well as the development of metrics to evaluate adaptive controller performance at off-nominal flight conditions. This paper presents the major certification gap areas, a description of the current state of the verification methodologies, and what further research efforts will likely be needed to close the gaps remaining in current certification practices. It is envisioned that closing the gap will require certain advances in simulation methods, comprehensive methods to determine learning algorithm stability and convergence rates, the development of performance metrics for adaptive controllers, the application of formal software assurance methods, the application of on-line software monitoring tools for adaptive controller health assessment, and the development of a certification case for adaptive system safety of flight.
Enhanced engine operation--operation that is beyond normal limits--has the potential to improve the adaptability and safety of aircraft in emergency situations. Intelligent use of enhanced engine operation to improve the handling qualities of the aircraft requires sophisticated risk estimation techniques and a risk management system that spans the flight and propulsion controllers. In this paper, an architecture that weighs the risks of the emergency and of possible engine performance enhancements to reduce overall risk to the aircraft is described. Two examples of emergency situations are presented to demonstrate the interaction between the flight and propulsion controllers to facilitate the enhanced operation.
Soft robot arms offer safety and adaptability due to their passive compliance, but this compliance typically limits their payload capacity and prevents them from performing many tasks. This paper presents a model-based design approach to effectively increase the payload capacity of soft robot arms. The proposed approach uses localized body stiffening to decrease the compliance at the end effector without sacrificing the robot’s range of motion. This approach is validated on both a simulated and a real soft robot arm, where experiments show that increasing the stiffness of localized regions of their bodies reduces the compliance at the end effector and increases the height to which the arm can lift a payload. By increasing the payload capacity of soft robot arms, this approach has the potential to improve their efficacy in a variety of tasks including object manipulation and exploration of cluttered environments.