Search NASA⌕ Search

SEARCH · Search NASA

Results for “Failsafe”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 19 records
All sourcesNASA NTRSDOE OSTI
NASA NTRSDate not supplied

Humans as Automation Failsafe: HAT Assistant

Humans are frequently left to “backstop” automated systems, and Human Factors specialists have argued against this for decades with, at best, partial success. What if we took a different tack... and designed to support it? The participants were involved in a recent effort to review and document cases across multiple domains where operators acted as a “failsafe” for automation, intervening in unanticipated situations to maximize success and minimize damage. We defined a “Human As Failsafe” (HAF) incident and then investigated conditions and practices making HAF success more or less likely. Analyzing these historical incidents, we suggested remediation approaches. The project also examined the legal concept of culpability (i.e., when intervention should have happened but didn’t) and proposed a state-machine-based analytic simulation to identify when HAF interventions are plausible. The panel objective will be to briefly present these concepts, but more generally to discuss designing for inevitable HAF events. This presentation with review the concept of a HAT Assistant to support multi-vehicle control of drones in a wildland firefighting context.

humans as failsafe↗
NASA NTRS1975

A failsafe analysis using NASTRAN's piecewise linear analysis and a nine node linear crack element

A two-dimensional crack element was implemented into NASTRAN as a user dummy element and used to study failsafe characteristics of the C5A fuselage. The element is formulated from Reitsner's functional requiring that it satisfy compatability with the linear boundary displacement elements in NASTRAN. Its accuracy is demonstrated by analyzing for the stress intensity factors of two simple crack configurations for which there are classic solutions.

Wilkinson, R. F.↗
NASA NTRS2010

FAILSAFE Health Management for Embedded Systems

The FAILSAFE project is developing concepts and prototype implementations for software health management in mission- critical, real-time embedded systems. The project unites features of the industry-standard ARINC 653 Avionics Application Software Standard Interface and JPL s Mission Data System (MDS) technology (see figure). The ARINC 653 standard establishes requirements for the services provided by partitioned, real-time operating systems. The MDS technology provides a state analysis method, canonical architecture, and software framework that facilitates the design and implementation of software-intensive complex systems. The MDS technology has been used to provide the health management function for an ARINC 653 application implementation. In particular, the focus is on showing how this combination enables reasoning about, and recovering from, application software problems.

Horvath, Gregory A.↗
NASA NTRS2009

Guaranteeing Failsafe Operation of Extended-Scene Shack-Hartmann Wavefront Sensor Algorithm

A Shack-Hartmann sensor (SHS) is an optical instrument consisting of a lenslet array and a camera. It is widely used for wavefront sensing in optical testing and astronomical adaptive optics. The camera is placed at the focal point of the lenslet array and points at a star or any other point source. The image captured is an array of spot images. When the wavefront error at the lenslet array changes, the position of each spot measurably shifts from its original position. Determining the shifts of the spot images from their reference points shows the extent of the wavefront error. An adaptive cross-correlation (ACC) algorithm has been developed to use scenes as well as point sources for wavefront error detection. Qualifying an extended scene image is often not an easy task due to changing conditions in scene content, illumination level, background, Poisson noise, read-out noise, dark current, sampling format, and field of view. The proposed new technique based on ACC algorithm analyzes the effects of these conditions on the performance of the ACC algorithm and determines the viability of an extended scene image. If it is viable, then it can be used for error correction; if it is not, the image fails and will not be further processed. By potentially testing for a wide variety of conditions, the algorithm s accuracy can be virtually guaranteed. In a typical application, the ACC algorithm finds image shifts of more than 500 Shack-Hartmann camera sub-images relative to a reference sub -image or cell when performing one wavefront sensing iteration. In the proposed new technique, a pair of test and reference cells is selected from the same frame, preferably from two well-separated locations. The test cell is shifted by an integer number of pixels, say, for example, from m= -5 to 5 along the x-direction by choosing a different area on the same sub-image, and the shifts are estimated using the ACC algorithm. The same is done in the y-direction. If the resulting shift estimate errors are less than a pre-determined threshold (e.g., 0.03 pixel), the image is accepted. Otherwise, it is rejected.

Sidick, Erikin↗
NASA NTRSDate not supplied

Humans as Failsafe

Automation often relies on the human to "jump" into the loop and solve problems when the automation can’t due to conditions outside of which it was designed for or automaton failure. This talk proposes a methodology (Human Autonomy Assistant) to address that situation. Examples are provided from a wild fire context.

multi-vehicle control↗
NASA NTRS2010

Magnetostrictive Brake

A magnetostrictive brake has been designed as a more energy-efficient alternative to a magnetic fail-safe brake in a robot. (In the specific application, failsafe signifies that the brake is normally engaged; that is, power must be supplied to allow free rotation.) The magnetic failsafe brake must be supplied with about 8 W of electric power to initiate and maintain disengagement. In contrast, the magnetostrictive brake, which would have about the same dimensions and the same torque rating as those of the magnetic fail-safe brake, would demand only about 2 W of power for disengagement. The brake (see figure) would include a stationary base plate and a hub mounted on the base plate. Two solenoid assemblies would be mounted in diametrically opposed recesses in the hub. The cores of the solenoids would be made of the magnetostrictive alloy Terfenol-D or equivalent. The rotating part of the brake would be a ring-and spring- disk subassembly. By means of leaf springs not shown in the figure, this subassembly would be coupled with the shaft that the brake is meant to restrain. With no power supplied to the solenoids, a permanent magnet would pull axially on a stepped disk and on a shelf in the hub, causing the ring to be squeezed axially between the stepped disk and the hub. The friction associated with this axial squeeze would effect the braking action. Supplying electric power to the solenoids would cause the magnetostrictive cylinders to push radially inward against a set of wedges that would be in axial contact with the stepped disk. The wedges would convert the radial magnetostrictive strain to a multiplied axial displacement of the stepped disk. This axial displacement would be just large enough to lift the stepped disk, against the permanent magnetic force, out of contact with the ring. The ring would then be free to turn because it would no longer be squeezed axially between the stepped disk and the hub.

Diftler, Myron A.↗
NASA NTRS2013

Autonomous Control of Space Nuclear Reactors

Nuclear reactors to support future robotic and manned missions impose new and innovative technological requirements for their control and protection instrumentation. Long-duration surface missions necessitate reliable autonomous operation, and manned missions impose added requirements for failsafe reactor protection. There is a need for an advanced instrumentation and control system for space-nuclear reactors that addresses both aspects of autonomous operation and safety. The Reactor Instrumentation and Control System (RICS) consists of two functionally independent systems: the Reactor Protection System (RPS) and the Supervision and Control System (SCS). Through these two systems, the RICS both supervises and controls a nuclear reactor during normal operational states, as well as monitors the operation of the reactor and, upon sensing a system anomaly, automatically takes the appropriate actions to prevent an unsafe or potentially unsafe condition from occurring. The RPS encompasses all electrical and mechanical devices and circuitry, from sensors to actuation device output terminals. The SCS contains a comprehensive data acquisition system to measure continuously different groups of variables consisting of primary measurement elements, transmitters, or conditioning modules. These reactor control variables can be categorized into two groups: those directly related to the behavior of the core (known as nuclear variables) and those related to secondary systems (known as process variables). Reliable closed-loop reactor control is achieved by processing the acquired variables and actuating the appropriate device drivers to maintain the reactor in a safe operating state. The SCS must prevent a deviation from the reactor nominal conditions by managing limitation functions in order to avoid RPS actions. The RICS has four identical redundancies that comply with physical separation, electrical isolation, and functional independence. This architecture complies with the safety requirements of a nuclear reactor and provides high availability to the host system. The RICS is intended to interface with a host computer (the computer of the spacecraft where the reactor is mounted). The RICS leverages the safety features inherent in Earth-based reactors and also integrates the wide range neutron detector (WRND). A neutron detector provides the input that allows the RICS to do its job. The RICS is based on proven technology currently in use at a nuclear research facility. In its most basic form, the RICS is a ruggedized, compact data-acquisition and control system that could be adapted to support a wide variety of harsh environments. As such, the RICS could be a useful instrument outside the scope of a nuclear reactor, including military applications where failsafe data acquisition and control is required with stringent size, weight, and power constraints.

Merk, John↗
DOE OSTI2020

Online adaptive basis refinement and compression for reduced-order models via vector-space sieving

In many applications, projection-based reduced-order models (ROMs) have demonstrated the ability to provide rapid approximate solutions to high-fidelity full-order models (FOMs). However, there is no a priori assurance that these approximate solutions are accurate; their accuracy depends on the ability of the low-dimensional trial basis to represent the FOM solution. As a result, ROMs can generate inaccurate approximate solutions, e.g., when the FOM solution at the online prediction point is not well represented by training data used to construct the trial basis. To address this fundamental deficiency of standard model-reduction approaches, this work proposes a novel online-adaptive mechanism for efficiently enriching the trial basis in a manner that ensures convergence of the ROM to the FOM, yet does not incur any FOM solves. The mechanism is based on the previously proposed adaptive $h$-refinement method for ROMs, but improves upon this work in two crucial ways. First, the proposed method enables basis refinement with respect to any orthogonal basis (not just the Kronecker basis), thereby generalizing the refinement mechanism and enabling it to be tailored to the physics characterizing the problem at hand. Second, the proposed method provides a fast online algorithm for periodically compressing the enriched basis via an efficient proper orthogonal decomposition (POD) method, which does not incur any operations that scale with the FOM dimension. We report these two features allow the proposed method to serve as (1) a failsafe mechanism for ROMs, as the method enables the ROM to satisfy any prescribed error tolerance online (even in the case of inadequate training), and (2) an efficient online basis-adaptation mechanism, as the combination of basis enrichment and compression enables the basis to adapt online while controlling its dimension.

42 ENGINEERING↗
DOE OSTI2020

Mechanical Regulation of Photosynthesis in Cyanobacteria

Photosynthetic organisms regulate their responses to many diverse stimuli in an effort to balance light harvesting with utilizable light energy for carbon fixation and growth (source–sink regulation). This balance is critical to prevent the formation of reactive oxygen species that can lead to cell death. However, investigating the molecular mechanisms that underlie the regulation of photosynthesis in cyanobacteria using ensemble-based measurements remains a challenge due to population heterogeneity. Here, to address this problem, we used long-term quantitative time-lapse fluorescence microscopy, transmission electron microscopy, mathematical modelling and genetic manipulation to visualize and analyse the growth and subcellular dynamics of individual wild-type and mutant cyanobacterial cells over multiple generations. We reveal that mechanical confinement of actively growing Synechococcus sp. PCC 7002 cells leads to the physical disassociation of phycobilisomes and energetic decoupling from the photosynthetic reaction centres. We suggest that the mechanical regulation of photosynthesis is a critical failsafe that prevents cell expansion when light and nutrients are plentiful, but when space is limiting. These results imply that cyanobacteria must convert a fraction of the available light energy into mechanical energy to overcome frictional forces in the environment, providing insight into the regulation of photosynthesis and how microorganisms navigate their physical environment.

BASIC BIOLOGICAL SCIENCES,BIOMASS FUELS↗
DOE OSTI2022

Impact of non‐framework cation mixing on the structure and crystallization behavior of model high‐level waste glasses

Abstract Spinel crystallization is known to be detrimental to the operation of Joule heated ceramic melters during the vitrification of iron‐rich high‐level nuclear wastes (HLW) into borosilicate glasses. The literature on this subject focuses on tackling the problem by developing empirical constraints to design compositions, which limit the fraction of spinels formed in the melter or by developing empirical models to predict the settling behavior of spinels in the melter as a function of the glass composition. While these empirical models can predict the behavior of most of the compositions, they are not failsafe as there are always some compositions, whose behavior is beyond the predictive ability of these models. This can lead to undesirable situations during the vitrification of the nuclear waste, and therefore an in‐depth investigation of the chemo‐structural descriptors controlling the crystallization behavior in these glasses is warranted. Accordingly, the present study aims to understand the impact of non‐framework cation mixing (i.e., Li + /Na + and Ca 2+ /Na + ) on the structure (through Raman spectroscopy and Mössbauer spectroscopy) and crystallization behavior (through XRD, SEM‐EDS, and vibrating sample magnetometry) of iron‐rich model HLW glasses in the system: (mol.%) x M y O–(25− x ) Na 2 O–9.12 B 2 O 3 –6.4 Al 2 O 3 –51.25 SiO 2 –7.22 Fe 2 O 3 –0.38 MnO–0.08 Cr 2 O 3 –0.55NiO (M y O = Li 2 O or CaO).

Balasubramanya, Nikhila↗
NASA NTRS1972

Design, fabrication and testing of two electrohydraulic vibration isolation systems for helicopter environments

Two electrohydraulic vibration isolation systems were designed and fabricated to reduce the vertical vibrations transmitted to the XH-51N research helicopter cabin at the blade passage frequency (18 Hz) and its first harmonic (36 Hz). Hydraulic power and electrical control are provided to two separate servoactuators from a common power supply and control electronics package located behind the pilot's seat. One servoactuator is installed between the cabin and fuselage and replaces an existing passive spring. A second servoactuator is mounted between the existing seat and cabin floor. Both servoactuators incorporate a mechanical failsafe design. The control electronics circuitry provides automatic tracking of the blade passage frequency. Results of laboratory, environmental and ground vibration tests employing an XH-51A stripped down helicopter fuselage show that the active cabin isolator reduces the vertical vibrations transmitted from the fuselage attachment point to the cabin attachment point at 18 and 36 Hz (or as an alternative, 6 Hz) by better than 90 percent.

Allen, R. E.↗
NASA NTRS1974

Design of H2-O2 space shuttle APU. Volume 1: APU design

The H2-O2 space shuttle auxiliary power unit (APU) program is a NASA-Lewis effort aimed at hardware demonstration of the technology required for potential use on the space shuttle. It has been shown that a hydrogen-oxygen power unit (APU) system is an attractive alternate to the space shuttle baseline hydrazine APU system for minimum weight. It has the capability for meeting many of the heat sink requirements for the space shuttle vehicle, thereby reducing the amount of expendable evaporants required for cooling in the baseline APU. Volume 1 of this report covers preliminary design and analysis of the current reference system and detail design of the test version of this reference system. Combustor test results are also included. Volume 2 contains the results of the analysis of an initial version of the reference system and the computer printouts of system performance. The APU consists of subsystems for propellant feed and conditioning, turbopower, and control. Propellant feed and conditioning contains all heat exchangers, valves, and the combustor. The turbopower subsystem contains a two-stage partial-admission pressure-modulated, 400-hp, 63,000-rpm turbine, a 0-to 4-g lubrication system, and a gearbox with output pads for two hydraulic pumps and an alternator (alternator not included on test unit). The electronic control functions include regulation of speed and system temperatures; and start-and-stop sequences, overspeed (rpm) and temperature limits, failsafe provisions, and automatic shutdown provisions.

Harris, E.↗
NASA NTRS1975

Pneumatic load compensating or controlling system

A pneumatic load compensating or controlling system for restraining a load with a predetermined force or applying a predetermined force to the load is described; it includes a source of pressurized air, a one-way pneumatic actuator operatively connected to a load, and a fluid conduit fluidically connecting the actuator with the source of pressurized air. The actuator is of the piston and cylinder type, and the end of the fluid conduit is connected to the upper or lower portion of the cylinder whereby the actuator alternatively and selectively restrains the load with a predetermined force or apply a predetermined force to the load. Pressure regulators are included within the system for variably selectively adjusting the pressurized fluid to predetermined values as desired or required; a pressure amplifier is included within the system for multiplying the pressurized values so as to achieve greater load forces. An accumulator is incorporated within the system as a failsafe operating mechanism, and visual and aural alarm devices, operatively associated with pressure detecting apparatus, readily indicate the proper or improper functioning of the system.

Rogers, J. R.↗
NASA NTRS1980

Feasibility study of aileron and spoiler control systems for large horizontal axis wind turbines

The feasibility of using aileron or spoiler controls as alternates to pitch control for large horizontal axis wind turbines was studied. The NASA Mod-0 100 kw machine was used as the basis for the study. Specific performance studies were conducted for 20% chord ailerons over the outboard 30% span, and for 10% chord spoilers over the same portion of the span. Both control systems utilized control deflections up to 60 deg. Results of the study show that either ailerons or spoilers can provide the control necessary to limit turbine power in high wind conditions. The aileron system, as designed, provides overspeed protection at hurricane wind speeds, low wind speed starting torque of 778 N-m (574 ft. lb) at 3.6 m/sec, and a 1.3 to 1.5% increase in annual energy compared to a fixed pitch rotor. The aileron control system preliminary design study includes aileron loads analysis and the design of a failsafe flyweight actuator for overspeed protection in the event of a hydraulic system failure.

Wentz, W. H., Jr.↗
NASA NTRS1980

Space Transportation System solid rocket booster thrust vector control system

The Solid Rocket Booster, Thrust Vector Control (TVC) system was designed in accordance with the following requirements: self-contained power supply, failsafe operation, 20 flight uses after exposure to seawater landings, optimized cost, and component interchangeability. Trade studies were performed which led to the selection of a recirculating hydraulic system powered by Auxiliary Power Units (APU) which drive the hydraulic actuators and gimbal the solid rocket motor nozzle. Other approaches for the system design were studied in arriving at the recirculating hydraulic system powered by an APU. These systems must withstand the imposed environment and be usable for a minimum of 20 Space Transportation System flights with a minimum of refurbishment. The TVC system completed the required qualification and verification tests and is certified for the intended application. Substantiation data include analytical and test data.

Verble, A. J., Jr.↗
NASA NTRS1981

Moving body velocity arresting line

The arresting of a moving body is improved through the use of steel cables that elongate to absorb the kinetic energy of the body. A sleeve surrounds the cables, protecting them from chafing and providing a failsafe energy absorbing system should the cables fail.

Hull, R. A.↗
NASA NTRS1979

Advanced manufacturing development of a composite empennage component for L-1011 aircraft

Work in process verification and tooling development continued. The decision was made to redesign the ribs to a more producible design. The bead was eliminated and the truss ribs changed to plain C sections. The solid web rib stiffeners were eliminated as well as the beads and the webs are now reinforced with a syntactic core. Syntectic is an epoxy containing glass microballoons. Two cover specimens were successfully tested. The first specimen (H27) was designed to verify the stability and compression strength of the cover when it is hot and wet. Failure occurred at 120 percent of design ultimate load. As the failure appeared to be fixture induced and was limited to one end of the panel, the remainder of the panel will be tested. The second specimen (H28) was designed to verify the failsafe aspects of the design. The test verified the design. Preparation of the PRVT test facility is nearing completion and all ten spar durability specimens were installed in the test chambers.

Source record↗