Search NASA⌕ Search

SEARCH · Search NASA

Results for “CERTIFICATION”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 19 records

Software Certification and Software Certificate Management Systems

Incremental certification and re-certification of code as it is developed and modified is a prerequisite for applying modem, evolutionary development processes, which are especially relevant for NASA. For example, the Columbia Accident Investigation Board (CAIB) report 121 concluded there is "the need for improved and uniform statistical sampling, audit, and certification processes". Also, re-certification time has been a limiting factor in making changes to Space Shuttle code close to launch time. This is likely to be an even bigger problem with the rapid turnaround required in developing NASA s replacement for the Space Shuttle, the Crew Exploration Vehicle (CEV). Hence, intelligent development processes are needed which place certification at the center of development. If certification tools provide useful information, such as estimated time and effort, they are more likely to be adopted. The ultimate impact of such a tool will be reduced effort and increased reliability.

Denney, Ewen↗

Initial Experimental Airworthiness Certification Guidance for UAS. UAS Experimental Certification Process and Guidance

This paper addresses the regulatory processes and requirements already in place by which an applicant might obtain experimental airworthiness certification for a civil Unmanned Aircraft System (UAS). It is more extensive and subsequent to an earlier, similar deliverable, PD007, which was an interim study of the same topic. Since few regulatory airworthiness and operating standards exist for UAS like those for traditional manned aircraft and since most UAS have historically been developed and operated under military auspices, civil use of UAS in the NAS is a new and unfamiliar challenge requiring specific and unique considerations. Experimental certification is the most basic level of FAA approval toward routine UAS operation in the NAS. The paper reviews and explains existing FAA requirements for an applicant seeking experimental airworthiness approval and details the process for submission of necessary information. It summarizes the limited purposes for which experimental aircraft may be used and addresses pertinent aspects of UAS design, construction and operation in the NAS in harmony with traditional manned aircraft. Policy IPT position is that UAS, while different from manned aircraft, can use the same initial processes to gain civil operating experience under the experimental approval. Particular note is taken of those UAS-unique characteristics which require extra attention to assure equivalent safety of operation, such as the UAS control station and sense-and-avoid. The paper also provides "best practices" guidance for UAS manufacturers and FAA personnel in two appendices. The material in Appendix A is intended to provide guidance on assuring UAS safety to FAA, and provides FAA personnel with a suggested list of items to review, with a focus on UAS unique factors, prior to issuance of an experimental airworthiness certificate. Appendix B provides an outline for a program letter which a manufacturer could use in preparing the application for an UAS experimental airworthiness certificate.

Source record↗

Computational Materials for Qualification and Certification (CM4QC) Strategy Document: Maturation of Computational Materials Methods for Aviation-Focused Qualification and Certification of Metal Additive Manufacturing (as an Example of Process-Intensive Materials)

Although considerable scientific and technological advances have been made in recent years in additive manufacturing (AM) processes, these advances have not translated into significant market penetration of AM parts within the aviation industry. It is broadly acknowledged that using traditional qualification and certification (Q&C) approaches for AM components is one of the most significant barriers to broader adoption of AM, resulting in high costs, long product development and certification timelines, and complex design iterations during the product development cycle. A new approach is urgently needed. This document lays out a vision for a new Q&C paradigm with increased use of computational materials (CM) methods aimed at decreasing the time and cost of Q&C of process-intensive material (PIM) approaches in the aviation industry, with AM as the immediate use case. This vision was developed with substantial input from industry, regulatory agencies, government research organizations, and academia.

Edward H Glaessgen↗

Quality assurance and risk management: Perspectives on Human Factors Certification of Advanced Aviation Systems

This paper is based on the experience of engineering psychologists advising the U.K. Ministry of Defense (MoD) on the procurement of advanced aviation systems that conform to good human engineering (HE) practice. Traditional approaches to HE in systems procurement focus on the physical nature of the human-machine interface. Advanced aviation systems present increasingly complex design requirements for human functional integration, information processing, and cognitive task performance effectiveness. These developing requirements present new challenges for HE quality assurance (QA) and risk management, requiring focus on design processes as well as on design content or product. A new approach to the application of HE, recently adopted by NATO, provides more systematic ordering and control of HE processes and activities to meet the challenges of advanced aircrew systems design. This systematic approach to HE has been applied by MoD to the procurement of mission systems for the Royal Navy Merlin helicopter. In MoD procurement, certification is a judicial function, essentially independent of the service customer and industry contractor. Certification decisions are based on advice from MoD's appointed Acceptance Agency. Test and evaluation (T&E) conducted by the contractor and by the Acceptance Agency provide evidence for certification. Certification identifies limitations of systems upon release to the service. Evidence of compliance with HE standards traditionally forms the main basis of HE certification and significant non-compliance could restrict release. The systems HE approach shows concern for the quality of processes as well as for the content of the product. Human factors certification should be concerned with the quality of HE processes as well as products. Certification should require proof of process as well as proof of content and performance. QA criteria such as completeness, consistency, timeliness, and compatibility provide generic guidelines for progressive acceptance and certification of HE processes. Threats to the validity of certification arise from problems and assumptions in T&E methods. T&E should seek to reduce the risk of specification non-compliance and certification failure.

Taylor, Robert M.↗

Misclassification of causes of death among a small all-autopsied group of former nuclear workers: Death certificates vs. autopsy reports

The U.S. Transuranium and Uranium Registries performs autopsies on each of its deceased Registrants as a part of its mission to follow up occupationally-exposed individuals. This provides a unique opportunity to explore death certificate misclassification errors, and the factors that influence them, among this small population of former nuclear workers. Underlying causes of death from death certificates and autopsy reports were coded using the 10 th revision of the International Classification of Diseases (ICD-10). These codes were then used to quantify misclassification rates among 268 individuals for whom both full autopsy reports and death certificates with legible underlying causes of death were available. When underlying causes of death were compared between death certificates and autopsy reports, death certificates correctly identified the underlying cause of death’s ICD-10 disease chapter in 74.6% of cases. The remaining 25.4% of misclassified cases resulted in over-classification rates that ranged from 1.2% for external causes of mortality to 12.2% for circulatory disease, and under-classification rates that ranged from 7.7% for external causes of mortality to 47.4% for respiratory disease. Neoplasms had generally lower misclassification rates with 4.3% over-classification and 13.3% under-classification. A logistic regression revealed that the odds of a match were 2.8 times higher when clinical history was mentioned on the autopsy report than when it was not. Similarly, the odds of a match were 3.4 times higher when death certificates were completed using autopsy findings than when autopsy findings were not used. This analysis excluded cases where it could not be determined if autopsy findings were used to complete death certificates. The findings of this study are useful to investigate the impact of death certificate misclassification errors on radiation risk estimates and, therefore, improve the reliability of epidemiological studies.

63 RADIATION, THERMAL, AND OTHER ENVIRON. POLLUTAN↗

Global Trends of ASME "N-Stamp" Certifications for Nuclear Component Vendors

Historically, nuclear component manufacturing vendors, from small businesses through large conglomerates, have felt compelled to obtain an American Society for Mechanical Engineers (ASME) Nuclear Certification, known colloquially as an "N-stamp", to assure supply chain quality standards that will be acceptable to regulators and safety concerns. Since the N-stamp quality standard is a U.S.-origin code, combined with the apparent decline in the U.S. nuclear industry alongside the growth of the Asian nuclear industry, there is the question of whether the rest of the world, including new entrants to the nuclear industry, also regard N-stamp as a needed certification. This study addresses this question through analysis of the entire N-stamp database of holders, and former holders, of N-stamp certificates of all types and for all regions worldwide from 1989-2020 (the dates available in the database). From this 30 years of data, we find that actually U.S.-based vendors still consistently obtain the largest number of N-stamps worldwide over all time periods, but also find that the countries participating in the N-stamp certification process has broadly expanded beyond just North America, Japan, S. Korea and Western Europe (the primary N-stamp recipients before the mid-2000's). We produced global heats maps and bar charts to illustrate our findings, as well as further investigation into why the data shows changes over time and region. We note that nuclear entities involved with Soviet-type reactors do not participate in the N-stamp process, but instead pursue the Russian version PNAE, which is substantially similar to the ASME code. We conclude that at least from the N-stamp database, the United States nuclear component manufacturing industry is alive and well, although there have been some consolidations, and that the ASME N-stamp appears to still be a valued certificate worldwide, including in China which now ranks second only to the United States in obtaining N-stamp certificates in recent years. We further note that the vendors of new reactor types, in particular High Temperature Gas-Cooled Reactors (HTGRs) and Small Modular Reactors (SMRs), are actively engaged with ASME (and other U.S.-based nuclear standards bodies such as the American Nuclear Society and Nuclear Energy Institute) to coordinate updates to the ASME N-Stamp criteria to ensure applicability of the code for these new designs. Implications of these findings include the following: The global use of the U.S.-origin N-stamp certification supports the view that, despite the decline of the U.S. nuclear industry, the United States remains an esteemed global leader in the area of nuclear safety. As the U.S. Government works to revitalize the U.S. nuclear industry, especially in the area of exports, it may be beneficial to leverage the global standing of the N-stamp certification. The findings indicate that the N-stamp database would be a useful tool for the U.S. Government to use to track the growth of the civil nuclear industry in foreign countries, under certain circumstances. The Excel-format N-stamp database produced as part of this study may be a useful tool for this purpose. N-stamp data may be a useful tool for foreign governments to use to identify nuclear manufacturers within their own country, especially to identify "targets" for outreach on nuclear export control compliance. The U.S. Government could carry this message to foreign partners during bilateral engagements or as part of Nuclear Suppliers Group (NSG) discussions on industry outreach.

42 ENGINEERING↗

Joint JSC/GSFC two-TDRS navigation certification results for STS-29, STS-30, and STS-32

The procedures used and the results obtained in the joint Johnson Space Center (JSC)/Goddard Space Flight Center (GSFC) navigation certification of the two-Tracking and Data Relay Satellite (TDRS) S-band tracking configuration for support of low- to medium-inclination (28.5 to 62 degrees) Shuttle missions (STS-29 and STS-30) and Shuttle rendezvous missions (STS-32) are described. The objective of this certification effort was to certify the two-TDRS configuration for nominal Space Transportation System (STS) on-orbit navigation support, thereby making it possible to significantly reduce the ground tracking support requirements for routine STS on-orbit navigation. JSC had the primary responsibility for certification of the two-TDRS configuration for STS support, and GSFC supported the effort by performing Ground Network (GN) and Space Network (SN) tracking data evaluation, parallel orbit solutions, and solution comparisons. In the certification process, two types of orbit determination solutions were generated by JSC and by GSFC for each tracking arc evaluated, one type using TDRS-East and TDRS-West tracking data combined with ground tracking data (the reference solutions) and one type using only TDRS-East and TDRS-West tracking data. The two types of solutions were then compared to determine the maximum position differences over the solution arcs and whether these differences satisfied the navigation certification criteria. The certification criteria were a function of the type of Shuttle activity in the tracking arc, i.e., quiet, moderate, or active. Quiet periods included no attitude maneuvers or ventings; moderate periods included one or two maneuvers or ventings; and active periods included more than two maneuvers or ventings. The results of the individual JSC and GSFC certification analyses for the STS-29, STS-30, and STS-32 missions and the joint JSC/GSFC conclusions regarding certification of the two-TDRS S-band configuration for STS support are presented.

Schmidt, Thomas G.↗

Home Energy Professionals Certifications ISO/IEC 17024: 2021 Policies and Procedures Manual

The U.S. Department of Energy (DOE) enlisted its National Renewable Energy Laboratory (NREL) to coordinate the development of a framework for new certifications in the weatherization and home performance industry. The Home Energy Professional certifications support DOE's Weatherization Assistance Program (WAP) and the broader residential home performance industry through the credentialing process of defined job task analysis for energy auditors and quality control inspectors. The HEP certifications are not intended to supplant or infringe upon any existing industry-recognized credentials, however, the WAP and the home performance industry have utilized the advanced HEP certifications to promote quality work and standardized job task analysis since 2010. On an ongoing basis, NREL brings industry practitioners and subject matter experts together to develop, review, and revise the certification schemes in accordance with the International Organization for Standardization (ISO)/International Electrotechnical Commission (IEC) 17024 standard, "Conformity assessment - General requirements for bodies operating certification of persons" (ISO/IEC 17024). This handbook covers the policies and procedures for the process of developing, maintaining, and validating the certification schemes. Each policy and procedure includes the relevant ISO/IEC 17024 section at the beginning.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

Distributed Wind Certification Best Practices Guideline: January 16, 2023 - January 15, 2026

This Distributed Wind (DW) Certification Best Practices Guideline describes the typical approach for certification of distributed wind turbines above and below 150 kilowatts (kW) in size based on the conformity assessment requirements in the United States. The purpose of the guideline is to clarify and consistently describe the path to certification for various systems and components by helping the user navigate the complex path to certification compliance. This is done via clarification of both the required turbine type certification elements, as well as third-party electrical safety listing of turbine system components and subassemblies. In the United States specifically, there is no wind turbine certification scheme that governs or maintains a consistent set of conformity assessment requirements, and this can lead to wide ranging interpretations of the standards and required elements for certifications. This guideline attempts to simplify the path by organizing the information and guiding the user to the applicable set of requirements. Any wind turbine manufacturer or designer of wind turbines used in distributed generation applications in the United States would find value in the conformity assessment guidance in this guideline. Users are expected to be involved in the technical development of the product and supporting documentation, as the details provided are geared towards electrical and mechanical engineering of the system and components.

17 WIND ENERGY↗

Certification Validation Libraries

“The code “Certificate Validation Libraries” provides the ability to validate x509 certificates in python using a simple library. These libraries validate certificates in 3 ways: 1) validation that certificate has not expired. 2) validation that certificate has not been revoked and 3) validation of certificate's digital signature. The benefits of this code is that one can properly validate x509 certificates, thus strengthening the security of systems using these libraries.”

Maerz, StefanA↗

Experimental evaluation of the certification-trail method

Certification trails are a recently introduced and promising approach to fault-detection and fault-tolerance. A comprehensive attempt to assess experimentally the performance and overall value of the method is reported. The method is applied to algorithms for the following problems: huffman tree, shortest path, minimum spanning tree, sorting, and convex hull. Our results reveal many cases in which an approach using certification-trails allows for significantly faster overall program execution time than a basic time redundancy-approach. Algorithms for the answer-validation problem for abstract data types were also examined. This kind of problem provides a basis for applying the certification-trail method to wide classes of algorithms. Answer-validation solutions for two types of priority queues were implemented and analyzed. In both cases, the algorithm which performs answer-validation is substantially faster than the original algorithm for computing the answer. Next, a probabilistic model and analysis which enables comparison between the certification-trail method and the time-redundancy approach were presented. The analysis reveals some substantial and sometimes surprising advantages for ther certification-trail method. Finally, the work our group performed on the design and implementation of fault injection testbeds for experimental analysis of the certification trail technique is discussed. This work employs two distinct methodologies, software fault injection (modification of instruction, data, and stack segments of programs on a Sun Sparcstation ELC and on an IBM 386 PC) and hardware fault injection (control, address, and data lines of a Motorola MC68000-based target system pulsed at logical zero/one values). Our results indicate the viability of the certification trail technique. It is also believed that the tools developed provide a solid base for additional exploration.

Sullivan, Gregory F.↗

Proceedings of the Third International Workshop on Proof-Carrying Code and Software Certification

This NASA conference publication contains the proceedings of the Third International Workshop on Proof-Carrying Code and Software Certification, held as part of LICS in Los Angeles, CA, USA, on August 15, 2009. Software certification demonstrates the reliability, safety, or security of software systems in such a way that it can be checked by an independent authority with minimal trust in the techniques and tools used in the certification process itself. It can build on existing validation and verification (V&V) techniques but introduces the notion of explicit software certificates, Vvilich contain all the information necessary for an independent assessment of the demonstrated properties. One such example is proof-carrying code (PCC) which is an important and distinctive approach to enhancing trust in programs. It provides a practical framework for independent assurance of program behavior; especially where source code is not available, or the code author and user are unknown to each other. The workshop wiII address theoretical foundations of logic-based software certification as well as practical examples and work on alternative application domains. Here "certificate" is construed broadly, to include not just mathematical derivations and proofs but also safety and assurance cases, or any fonnal evidence that supports the semantic analysis of programs: that is, evidence about an intrinsic property of code and its behaviour that can be independently checked by any user, intermediary, or third party. These guarantees mean that software certificates raise trust in the code itself, distinct from and complementary to any existing trust in the creator of the code, the process used to produce it, or its distributor. In addition to the contributed talks, the workshop featured two invited talks, by Kelly Hayhurst and Andrew Appel. The PCC 2009 website can be found at http://ti.arc.nasa.gov /event/pcc 091.

Ewen, Denney, W.↗

Initial Regulatory and Certification Approach for the SUSAN Electrofan Concept

New aircraft concepts and associated technologies are required to meet emerging environ-mental impact goals, while still meeting established airworthiness certification standards and regulations. The SUbsonic Single Aft eNgine (SUSAN) Electrofan is one of these concepts, utilizing a single aft-mounted engine, electrified aircraft propulsion, and an emergency backup battery. This paper explores the current certification and regulatory barriers to this novel aircraft design and the potential methods for adapting certification and regulatory requirements for the SUSAN Electrofan concept. Although some certification requirements, such as the Extended Operations regulations for continued operation after the loss of an engine, can be met with only minor changes, other requirements require modifications to the regulations or the aircraft concept for compliance. Early insight to the certification approach for the SUSAN concept, while the design is still undergoing trade space exploration, allows the development of the aircraft alongside any modifications to certification standards.

SUSAN Electrofan↗

Certification of computational results

A conceptually novel and powerful technique to achieve fault detection and fault tolerance in hardware and software systems is described. When used for software fault detection, this new technique uses time and software redundancy and can be outlined as follows. In the initial phase, a program is run to solve a problem and store the result. In addition, this program leaves behind a trail of data called a certification trail. In the second phase, another program is run which solves the original problem again. This program, however, has access to the certification trail left by the first program. Because of the availability of the certification trail, the second phase can be performed by a less complex program and can execute more quickly. In the final phase, the two results are compared and if they agree the results are accepted as correct; otherwise an error is indicated. An essential aspect of this approach is that the second program must always generate either an error indication or a correct output even when the certification trail it receives from the first program is incorrect. The certification trail approach to fault tolerance is formalized and realizations of it are illustrated by considering algorithms for the following problems: convex hull, sorting, and shortest path. Cases in which the second phase can be run concurrently with the first and act as a monitor are discussed. The certification trail approach are compared to other approaches to fault tolerance.

Sullivan, Gregory F.↗

Experimental evaluation of certification trails using abstract data type validation

Certification trails are a recently introduced and promising approach to fault-detection and fault-tolerance. Recent experimental work reveals many cases in which a certification-trail approach allows for significantly faster program execution time than a basic time-redundancy approach. Algorithms for answer-validation of abstract data types allow a certification trail approach to be used for a wide variety of problems. An attempt to assess the performance of algorithms utilizing certification trails on abstract data types is reported. Specifically, this method was applied to the following problems: heapsort, Hullman tree, shortest path, and skyline. Previous results used certification trails specific to a particular problem and implementation. The approach allows certification trails to be localized to 'data structure modules,' making the use of this technique transparent to the user of such modules.

Wilson, Dwight S.↗

Using certification trails to achieve software fault tolerance

A conceptually novel and powerful technique to achieve fault tolerance in hardware and software systems is introduced. When used for software fault tolerance, this new technique uses time and software redundancy and can be outlined as follows. In the initial phase, a program is run to solve a problem and store the result. In addition, this program leaves behind a trail of data called a certification trail. In the second phase, another program is run which solves the original problem again. This program, however, has access to the certification trail left by the first program. Because of the availability of the certification trail, the second phase can be performed by a less complex program and can execute more quickly. In the final phase, the two results are accepted as correct; otherwise an error is indicated. An essential aspect of this approach is that the second program must always generate either an error indication or a correct output even when the certification trail it receives from the first program is incorrect. The certification trail approach to fault tolerance was formalized and it was illustrated by applying it to the fundamental problem of finding a minimum spanning tree. Cases in which the second phase can be run concorrectly with the first and act as a monitor are discussed. The certification trail approach was compared to other approaches to fault tolerance. Because of space limitations we have omitted examples of our technique applied to the Huffman tree, and convex hull problems. These can be found in the full version of this paper.

Sullivan, Gregory F.↗

Certification trails for data structures

Certification trails are a recently introduced and promising approach to fault detection and fault tolerance. The applicability of the certification trail technique is significantly generalized. Previously, certification trails had to be customized to each algorithm application; trails appropriate to wide classes of algorithms were developed. These certification trails are based on common data-structure operations such as those carried out using these sets of operations such as those carried out using balanced binary trees and heaps. Any algorithms using these sets of operations can therefore employ the certification trail method to achieve software fault tolerance. To exemplify the scope of the generalization of the certification trail technique provided, constructions of trails for abstract data types such as priority queues and union-find structures are given. These trails are applicable to any data-structure implementation of the abstract data type. It is also shown that these ideals lead naturally to monitors for data-structure operations.

Sullivan, Gregory F.↗