SEARCH · Search NASA
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
Design safety criteria for Space Transportation System propulsion system payloads are discussed. Terms such as inhibit, monitoring, safing, safe distance, safe and arm device, and flow control device are defined and their use in design of safety requirements described.
Safety for pyrotechnic ignition systems is becoming a major concern for the military. In the past twenty years, stray electromagnetic fields have steadily increased during peacetime training missions and have dramatically increased during battlefield missions. Almost all of the ordnance systems in use today depend on an electrical bridgewire for ignition. Unfortunately, the bridgewire is the cause of the majority of failure modes. The common failure modes include the following: broken bridgewires; transient RF power, which induces bridgewire heating; and cold temperatures, which contracts the explosive mix away from the bridgewire. Finding solutions for these failure modes is driving the costs of pyrotechnic systems up. For example, analyses are performed to verify that the system in the environment will not see more energy than 20 dB below the 'No-fire' level. Range surveys are performed to determine the operational, storage, and transportation RF environments. Cryogenic tests are performed to verify the bridgewire to mix interface. System requirements call for 'last minute installation,' 'continuity checks after installation,' and rotating safety devices to 'interrupt the explosive train.' As an alternative, MDESC has developed a new approach based upon our enabling laser diode technology. We believe that Microlaser initiated ordnance offers a unique solution to the bridgewire safety concerns. For this presentation, we will address, from a system safety viewpoint, the safety design and the test requirements for a Microlaser ordnance system. We will also review how this system could be compliant to MIL-STD-1576 and DOD-83578A and the additional necessary requirements.
During the design phase of the Mobile Quarantine Facility (MQF), a primary consideration was fire safety. Therefore, appropriate criteria and ground rules were used in the design and construction of the facility. The fire codes and fire-requirement listings that are used by commerical airlines were supplied to the Manned Spacecraft Center (MSC) by the Federal Aviation Agency (FAA). After these codes were reviewed, a basic ground rule was adopted that flame protection for all combustible materials should be at least equivalent to or better than the standards for commercial aircraft. Because the MQF was designed to operate with an interior atmosphere of air rather than with an oxygen-enriched atmosphere such as that of the Apollo spacecraft cabin, the requirements for MQF material were not as stringent as those for the spacecraft.
The desire to understand and explore space has driven man to overcome the confines of the Earth's atmosphere and accept the challenge of spaceflight. With our increasing ability to travel, work, and explore in space comes a need for a better understanding of the hazards in this relatively new endeavor. One of the most important and immediate needs is to be able to predict the ignition, spread, and growth of fire on board spacecraft. Fire safety aboard spacecraft has always been a concern; however, with the increasing number and duration of proposed missions, it is imperative that the spacecraft be designed with a solid understanding of fire hazards, insuring that all risks have been minimized and extinguishment systems are available.
The SP-100 Program is developing a nuclear reactor power system that can enhance and/or enable future civilian and military space missions. The program is directed to develop space reactor technology to provide electrical power in the range of tens to hundreds of kilowatts. The major nuclear assembly test is to be conducted at the Hanford Site near Richland, Washington, and is designed to validate the performance of the 2.4-MWt nuclear and heat transport assembly.
Single cell tests were benign for external short, inadvertent charge and overdischarge into reversal up to 4.5 A. At lower current loads cells die (may be due to excessive dendrite formation) benignly. String level external short circuits lead to an unbalanced overdischarge, with one cell going into reversal. The result is catastrophic violent venting. Unbalanced string overdischarges at different currents causes catastrophic violent venting also. Heat-to-vent is very dramatic displaying violent venting Simulated internal short is also catastrophic and displays violent venting. Battery is not UL-rated; hence does not have dual-fault tolerance or tolerance to inherent cell tolerance to failures Battery Design for NASA JSC's human-rated application for use on ISS was changed to include two bypass diodes per cell to provide for two-failure tolerance to overdischarge into reversal (and external short) hazards.
The national airspace system is exceptionally safe, specifically in terms of commercial air traffic operations. The introduction of innovative aircraft (such as electric vertical takeoff and landing vehicles) undergoing novel operations (such as for an urban air passenger carrying mission) is a potential disruptor to the current means of regulating and ensuring the safety of air travel. The aviation industry and associated regulatory bodies are adapting their approaches to assuring system safety to enable these new paradigms. However, any system safety analysis requires that a hazard assessment be performed. In this work, we consider the Functional Hazard Assessment (FHA) and Systems Theoretic Process Analysis (STPA) techniques for hazard assessment and evaluate whether they can be used in a complementary fashion for regulatory approval purposes. We perform an FHA and an STPA on an electric vertical takeoff and landing (eVTOL) vehicle undergoing an urban air mobility (UAM) passenger carrying reference scenario and present excerpts of this analysis. We then draw parallels between the techniques and highlight elements where they naturally reinforce to each other’s results, specifically in the consideration of hazard severity with respect to flight phases, the design of hazard mitigations, and the applicability of the results to all types of regulatory approvals (e.g., type certification, operational approval, and crew training).
Flutter may sound like a benign word when associated with a flag in a breeze, a butterfly, or seaweed in an ocean current. When used in the context of aerodynamics, however, it describes a highly dangerous, potentially deadly condition. Consider the case of the Lockheed L-188 Electra Turboprop, an airliner that first took to the skies in 1957. Two years later, an Electra plummeted to the ground en route from Houston to Dallas. Within another year, a second Electra crashed. In both cases, all crew and passengers died. Lockheed engineers were at a loss as to why the planes wings were tearing off in midair. For an answer, the company turned to NASA s Transonic Dynamics Tunnel (TDT) at Langley Research Center. At the time, the newly renovated wind tunnel offered engineers the capability of testing aeroelastic qualities in aircraft flying at transonic speeds near or just below the speed of sound. (Aeroelasticity is the interaction between aerodynamic forces and the structural dynamics of an aircraft or other structure.) Through round-the-clock testing in the TDT, NASA and industry researchers discovered the cause: flutter. Flutter occurs when aerodynamic forces acting on a wing cause it to vibrate. As the aircraft moves faster, certain conditions can cause that vibration to multiply and feed off itself, building to greater amplitudes until the flutter causes severe damage or even the destruction of the aircraft. Flutter can impact other structures as well. Famous film footage of the Tacoma Narrows Bridge in Washington in 1940 shows the main span of the bridge collapsing after strong winds generated powerful flutter forces. In the Electra s case, faulty engine mounts allowed a type of flutter known as whirl flutter, generated by the spinning propellers, to transfer to the wings, causing them to vibrate violently enough to tear off. Thanks to the NASA testing, Lockheed was able to correct the Electra s design flaws that led to the flutter conditions and return the aircraft to safe flight. Today, all aircraft must have a flutter boundary 15 percent beyond the aircraft s expected maximum speed to ensure that flutter conditions are not encountered in flight. NASA continues to support research in new aircraft designs to improve knowledge of aeroelasticity and flutter. Through platforms such as Dryden Flight Research Center s Active Aeroelastic Wing (AAW) research aircraft, the Agency researches methods for in-flight validation of predictions and for controlling and taking advantage of aeroelastic conditions to enhance aircraft performance.
The Skylab Program is presenting a unique set of requirements by extending the capabilities of both men and equipment to withstand extended periods of time in space. The progression of space programs which preceded Skylab have provided a set of building blocks of knowledge and experience coupled with an extensive ground test program which makes it possible to plan its flight program without earlier, unmanned test flights. This approach, however, makes it mandatory that to the maximum extent possible, we factor into the design review process all the 'lessons learned' which are applicable. It is this conscious review of the Skylab design, based on checklists prepared from design criteria, gleaned from a variety of sources and experiences, which is the subject of this paper. A brief description of the Skylab Program, its objectives, and the missions planned for it are presented briefly to better understand the degree of extrapolation of hardware development from previous programs.
For abstract, see N75-13438.
A headway sensing system for an automated mixed traffic vehicle (AMTV) employing an array of optical proximity sensor elements is described, and its performance is presented in terms of object detection profiles. The problem of sensing in turns is explored experimentally and requirements for future turn sensors are discussed. A recommended headway sensor configuration, employing multiple source elements in the focal plane of one lens operating together with a similar detector unit, is described. Alternative concepts including laser radar, ultrasonic sensing, imaging techniques, and radar are compared to the present proximity sensor approach. Design concepts for an AMTV body which will minimize the probability of injury to pedestrians or passengers in the event of a collision are presented.
Explore the source record for details and available documents.
Safety design features in the motor vehicle and highway construction fields result from systems analysis approach to prevent or lessen death, injury, and property damage results. Systems analysis considers the prevention of crashes, increased survivability in crashes, and prompt medical attention to injuries as well as other postcrash salvage measures. The interface of these system elements with the driver, the vehicle, and the environment shows that action on the vehicle system produces the greatest safety payoff through design modifications. New and amended safety standards developed through hazard analysis technique improved accident statistics in the 70'; these regulations include driver qualifications and countermeasures to identify the chronic drunken driver who is involved in more than two-thirds of all auto deaths.
This paper presents guidelines on designing systems for safety, developed by the Technical Committee 7 on Reliability and Safety of the European Workshop on Industrial Computer Systems. The focus is on complementing the traditional development process by adding the following four steps: (1) overall safety analysis; (2) analysis of the functional specifications; (3) designing for safety; (4) validation of design. Quantitative assessment of safety is possible by means of a modular questionnaire covering various aspects of the major stages of system development.
Experiments conducted in spacecraft and drop towers show that thin-sheet materials have reduced flammability ranges and flame-spread rates under quiescent low-gravity environments (microgravity) as compared to normal gravity. Furthermore, low-gravity flames may be suppressed more easily by atmospheric dilution or decreasing atmospheric total pressure than their normal-gravity counterparts. The addition of a ventilating air flow to the low-gravity flame zone, however, can greatly enhance the flammability range and flame spread. These results, along with observations of flame and smoke characteristics useful for microgravity fire-detection 'signatures', promise to be of considerable value to spacecraft fire-safety designs. The paper summarizes the fire detection and suppression techniques proposed for the Space Station Freedom and discusses both the application of low-gravity combustion knowledge to improve fire protection and the critical needs for further research.
Airplane design safety considerations covering turbine cooling, liquid methane fuel, turbine wheel burst damage and lightning hazards
Experiments conducted in spacecraft and drop towers show that thin-sheet materials have reduced flammability ranges and flame-spread rates under quiescent low-gravity environments (microgravity) compared to normal gravity. Furthermore, low-gravity flames may be suppressed more easily by atmospheric dilution or decreasing atmospheric total pressure than their normal-gravity counterparts. The addition of a ventilating air flow to the low-gravity flame zone, however, can greatly enhance the flammability range and flame spread. These results, along with observations of flame and smoke characteristics useful for microgravity fire-detection 'signatures', promise to be of considerable value to spacecraft fire-safety designs. The paper summarizes the fire detection and suppression techniques proposed for the Space Station Freedom and discusses both the application of low-gravity combustion knowledge to improve fire protection and the critical needs for further research.
This technology evaluation report documents the findings and recommendations of the Engineering for Complex Systems Program (formerly Design for Safety) PRACA Enhancement Pilot Study of the Space Shuttle Program's (SSP's) Problem Reporting and Corrective Action (PRACA) System. A team at NASA Ames Research Center (ARC) performed this Study. This Study was initiated as a follow-on to the NASA chartered Shuttle Independent Assessment Team (SIAT) review (performed in the Fall of 1999) which identified deficiencies in the current PRACA implementation. The Pilot Study was launched with an initial qualitative assessment and technical review performed during January 2000 with the quantitative formal Study (the subject of this report) started in March 2000. The goal of the PRACA Enhancement Pilot Study is to evaluate and quantify the technical aspects of the SSP PRACA systems and recommend enhancements to address deficiencies and in preparation for future system upgrades.