Search NASASearch

SEARCH · Search NASA

Results for “Realizability Analysis”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 19 records

From Partial to Global Assume-Guarantee Contracts: Compositional Realizability Analysis in FRET

Realizability checking refers to the formal procedure that aims to determine whether an implementation exists, always complying to a set of requirements, regardless of the stimuli provided by the system’s environment. Such a check is essential to ensure that the specification does not allow behavior that can force the system to violate safety constraints. In this paper, we present an approach that decomposes realizability checking into smaller, more tractable problems. More specifically, our approach automatically partitions specifications into sets of non-interfering requirements. We prove that checking whether a specification is realizable reduces to checking that each partition is realizable.We have integrated realizability checking and implemented our decomposition approach within the open-source Formal Requirements ElicitationTool (FRET). A FRET user may check the realizability of a specification monolithically or compositionally. We evaluate our approach by comparing monolithic and compositional checking and showcase the strengths of our decomposition approach on a variety of industrial-level case studies

Anastasia Mavridou

MARGInS: Model-Based Analysis of Realizable Goals in Systems

Under NASAs Constellation effort, the Exploration Technology Development Program funded research toward a system validation capability that applied machine learning and test-case generation techniques to the analysis of black-box system behavior. The behavior analysis capability scaled to spaces of hundreds of input parameters and tens of thousands of test cases. Aerospace systems at the vehicle level, especially those systems which contain some level of autonomy, are best described by hybrid and non-linear mathematics. Even simplified models of such systems need parameter dimensionalities in the hundreds or thousands of parameters in order to capture sufficient fidelity. The System Safety Assessments (such as those described in the SAE ARP 4761A Safety Assessment Process guidelines) for these systems are prone to errorinteractions between the vehicles subsystems are complex, and can display emergent behaviors. NASA captured this new analysis in the Model-based Analysis of Realizable Goals in Systems (MARGInS) tool and applied it to the Pad Abort 1 (PA-1) simulation as part of the independent validation and verification cycle before the PA-1 flight test in May of 2010. MARGInS evaluated the adherence of the high-fidelity simulation to its requirements, and deter- mined the margins to failure from the expected nominal input conditions. Following the PA-1 test, the capabilities within the MARGInS framework have been extended with sophisticated statistical and white-box test case generation techniques and applied to other NASA missions. The frame- work now includes a critical factors analysis that was applied to NASAs Orion simulation and design. NASAs Aeronautics Research Mission Directorate (ARMD) leveraged the existing MARGInS framework for work on aviation safety for civil transport vehicles and for research on autonomy issues. The NASA ARMD effort created a time series output prediction capability that has been used to characterize trajectories for a plane with an adaptive control system, and a safety boundary detection capability that has been applied to an air traffic control concept of operation for the Federal Aviation Administration. The statistical and machine- learning based techniques within MARGInS have been successfully combined with concolic execution to improve the coverage of a critical unit by driving system-level inputs. The use case driving the concolic execution and MARGInS integration was inspired by the Air France 447 disaster in which the loss of a critical functionality (the airspeed calculation from the pitot tubes) led to loss of the entire plane with the people aboard. To illustrate capabilities and limitations, we will highlight the analyses for the applications listed above. We will then discuss the future plans for MARGInS and its interfaces with other tools.

Validation

MARGInS Model-Based Analysis of Realizable Goals in Systems

The high complexity of modern aircraft and spacecraft requires elaborate Verification and Validation (V&V) approaches to make sure that such complex systems work properly and reliably. MARGInS is a framework for the analysis, understanding, and prediction of the behavior of a complex, hybrid system. MARGInS contains a set of machine learning and statistical algorithms for multivariate clustering, treatment learning, critical factor determination, time-series analysis, event prediction, and safety-boundary detection and characterization. The framework supports system testing and can be configured to find novel features in test suites, determine classes of behavior, propose new experiments that can efficiently explore and characterize the boundaries between classes of system behavior, and to create visualizations and reports.

He, Yuning

Calculations of turbulent separated flows

A numerical study of incompressible turbulent separated flows is carried out by using two-equation turbulence models of the K-epsilon type. On the basis of realizability analysis, a new formulation of the eddy-viscosity is proposed which ensures the positiveness of turbulent normal stresses - a realizability condition that most existing two-equation turbulence models are unable to satisfy. The present model is applied to calculate two backward-facing step flows. Calculations with the standard K-epsilon model and a recently developed RNG-based K-epsilon model are also made for comparison. The calculations are performed with a finite-volume method. A second-order accurate differencing scheme and sufficiently fine grids are used to ensure the numerical accuracy of solutions. The calculated results are compared with the experimental data for both mean and turbulent quantities. The comparison shows that the present model performs quite well for separated flows.

Zhu, J.

Requirements Analysis is Key to Realizing Increased Value from Remote Sensing

This note explores requirements analysis - one of the critical and very often overlooked activities that enable satellites to measure what is important and to translate observations into effective and affordable information. Recent experience at the Stennis Space Center is used to illuminate some approaches for improving requirements practice.

Ryan, Robert

SSME LOX post flow analysis/fluid structure interaction. Volume 1: Flow analysis

The realization of measures to improve the performance of the Space Shuttle is, to a large extent, dependent on an improved understanding of the fluid flow phenomena occurring in the main engine. The overall arrangement of the primary components of the Space Shuttle Main Engine (SSME) are presented. The impingement of the hot gases from the transfer ducts onto the LOX posts causes them to be subjected to severe thermal and gas dynamic loads, which in the past have resulted in the occasional breakage of some elements of the outer row of posts during test firings of the engine, particularly at higher power levels. Large velocities in the gap between the LOX posts may also be a contributing factor in causing dynamic stability problems. The deforming structural response of the posts to the pressure loading may likely affect the gas flowfield by producing a moving flowfield boundary, thereby creating a dynamically coupled unsteady fluid-structure system. The objective was to investigate the three-dimensional, turbulent flow around a simplified SSME LOX post array using an existing Reynolds averaged Navier-Stokes flow solver and a suitable turbulence model to parameterize the turbulent shear stresses. Numerical computations were performed to analyze the effect on the flowfield of varying the spacing between the LOX posts, which were modeled as rigid, three-dimensional circular cylinders. The methodology used in the computations is described. Results are presented.

Burke, Roger W.

Determining design gust loads for nonlinear aircraft similarity between methods based on matched filter theory and on stochastic simulation

This is a work-in-progress paper. It explores the similarity between the results from two different analysis methods - one deterministic, the other stochastic - for computing maximized and time-correlated gust loads for nonlinear aircraft. To date, numerical studies have been performed using two different nonlinear aircraft configurations. These studies demonstrate that results from the deterministic analysis method are realizable in the stochastic analysis method.

Scott, Robert C.

Development of a process for producing ribbon shaped filaments

Silicon carbide (SiC) ribbon filaments were produced on a carbon ribbon substrate, about 1500 microns (60 mils) wide and 100 microns (4 mils) thick in lengths up to 2 meters (6 ft), and with tensile strengths up to 142 KN/cm sq (206 Ksi). During the course of the study, ribbon filaments of boron were also produced on the carbon ribbon substrate; the boron ribbon produced was extremely fragile. The tensile strength of the SiC ribbon was limited by large growths or flaws caused by anomalies at the substrate surface; these anomalies were either foreign dirt or substrate imperfections or both. Related work carried out on round 100 micron (4 mils) diameter SiC filaments on a 33 micron (1.3 mil) diameter, very smooth carbon monofilament substrate has shown that tensile strengths as high as 551 KN/cm sq (800 Ksi) are obtainable with the SiC-carbon round substrate combination, and indicates that if the ribbon substrate surface and ribbon deposition process can be improved similar strengths can be realizable. Cost analysis shows that 100 micron x 5-10 micron SiC ribbon can be very low cost reinforcement material.

Debolt, H. E.

Insight and Evidence Motivating the Simplification of Dual-Analysis Hybrid Systems into Single-Analysis Hybrid Systems

Many hybrid data assimilation systems currently used for NWP employ some form of dual-analysis system approach. Typically a hybrid variational analysis is responsible for creating initial conditions for high-resolution forecasts, and an ensemble analysis system is responsible for creating sample perturbations used to form the flow-dependent part of the background error covariance required in the hybrid analysis component. In many of these, the two analysis components employ different methodologies, e.g., variational and ensemble Kalman filter. In such cases, it is not uncommon to have observations treated rather differently between the two analyses components; recentering of the ensemble analysis around the hybrid analysis is used to compensated for such differences. Furthermore, in many cases, the hybrid variational high-resolution system implements some type of four-dimensional approach, whereas the underlying ensemble system relies on a three-dimensional approach, which again introduces discrepancies in the overall system. Connected to these is the expectation that one can reliably estimate observation impact on forecasts issued from hybrid analyses by using an ensemble approach based on the underlying ensemble strategy of dual-analysis systems. Just the realization that the ensemble analysis makes substantially different use of observations as compared to their hybrid counterpart should serve as enough evidence of the implausibility of such expectation. This presentation assembles numerous anecdotal evidence to illustrate the fact that hybrid dual-analysis systems must, at the very minimum, strive for consistent use of the observations in both analysis sub-components. Simpler than that, this work suggests that hybrid systems can reliably be constructed without the need to employ a dual-analysis approach. In practice, the idea of relying on a single analysis system is appealing from a cost-maintenance perspective. More generally, single-analysis systems avoid contradictions such as having to choose one sub-component to generate performance diagnostics to another, possibly not fully consistent, component.

Todling, Ricardo

Mars 2020 Thermal Protection Systems Sizing and Development

The Mars 2020 spacecraft delivering the Perseverance Rover to Mars was planned to be a build-to-print repeat of the Mars Science Laboratory (MSL) spacecraft that delivered the Curiosity Rover to Mars in 2012. The 2020 mission would deliver a slightly higher mass at a lower entry velocity, so the mission designers were comfortable with the cost saving approach of using an already proven design. The approach used in sizing the thermal protection systems (TPS) for the various components of the MSL spacecraft included convective heating and shock layer radiation (a small contributor) on the heatshield and only convective heating on all of the aft body parts. At the time, it was assumed that the contribution of radiation from the shock layer and the wake was negligible on the aft body at Mars. In the time since the MSL spacecraft was designed, in light of new data and analysis, NASA realized the significance of radiative heating in the aftbody on vehicles entering Mars, beginning with the InSight entry. New analyses showed that the radiant heat fluxes on aft body components at Mars were of the same order or even larger than predicted convective heat fluxes. The Mars 2020 team was tasked with showing that the TPS thicknesses designed for MSL with only convective heating would survive the Mars 2020 convective plus radiative heat flux environments. Luckily, many of the MSL aft body components were sized using an extra conservative approach, often sizing for the worst environment at the lightest, thinnest structure, even though the environments and structures were not co-located. The Mars 2020 team had to more accurately evaluate the environments and structures to show that the design would close

Mars Entry

Realizability Checking of Requirements in FRET

Requirements formalization has become increasingly popular in industrial settings as an effort to disambiguate designs and optimize development time and costs for critical system components. Formal requirements elicitation also enables the employment of analysis tools to prove important properties, such as consistency and realizability. In this report, we present the realizability analysis framework that we developed as part of the Formal Requirements Elicitation Tool (FRET). Our framework prioritizes usability, and employs state-of-the-art analysis algorithms that support infinite theories. We demonstrate the workflow for realizability checking, showcase the diagnosis process that supports visualization of conflicts between requirements and simulation of counterexamples, and discuss results from industrial-level case studies.

Formal Requirements Elicitation Tool

A Risk Analysis Tool for Estimating the Risk of Electrical Failures Due to Human Induced Defects

Aerospace electrical systems are required to withstand and adequately operate in extremely harsh environments that include, for example, high radiation exposure, temperature extremes, intense vibrational stress and drastic temperature cycling. The nature of aerospace electronics also demands high reliability since, with very few exceptions, there is no chance for hardware servicing or repairs. Common risk mitigation techniques for this type of situation are to perform a Reliability Analysis of the system throughout the development cycle, and to use electrical components that are regarded as “high reliability” because of additional controls and requirements applied in their design, manufacturing and testing. Unfortunately, studies have shown that even though these techniques are used, many systems fail to meet mission requirements well before the predicted lifetimes. This paper presents the analysis of failures of electrical parts, experienced during various stages of system development, at NASA Goddard Space Flight Center, Greenbelt MD, between the years 2001 and 2013. These components were subjected to qualification, screening and testing in which the goal was to ensure that the components would survive the stresses of the mission. The analysis categorizes failures by part type and failure mechanisms. One of the results of the analysis was the realization that a surprising proportion of failures experienced during system integration and testing were caused by human error (i.e. human induced defect). Further analysis included the determination of root failure mechanisms and any influencing factors contributing to these failures. The major causes of these defects were attributed to electrostatic damage (ESD), electrical overstress (EOS), mechanical overstress (MOS), and thermal overstress (TOS). Finally, the study proposes a risk analysis tool which incorporates these major causes for the failures, termed error-producing conditions (EPCs), and a proportionality factor representing the number of each type of failure that has occurred at the facility under study. These factors are quantified and used to communicate the risk of human induced defects for the assembly, integration and testing of space hardware based on the system’s electrical parts list. The new risk identification can trigger risk-mitigating actions more effectively, based on the presence of component categories or other hazardous conditions that have a history of failure due to human error.

Majewicz, Peter J.

New hardware realizations of nonrecursive digital filters.

Analysis of the bit-level operations involved in the convolution realizing a nonrecursive digital filter leads to hardware designs of digital filters based on the operation of counting. Two distinct designs are outlined: the first one is capable of very high speed but is rather expensive; the second is quite slow but has the advantages of low cost and high flexibility. The basic designs considered utilize fixed-point representation for the data and filter coefficients. Variants allowing floating-point representation of the coefficients are also described.

Zohar, S.

Towards a Future ICRF Realization

The data and analysis for the ICRF were completed in 1995 to define a frame to which the Hipparcos optical catalog could be fixed. Additional observations on most of the 608 sources in the overall ICRF catalog have been acquired using a small portion of geodetic observing time as well as astrometric sessions concentrating on the southern hemisphere. Positions of new sources have been determined, including approx.1200 from a VLBA phase calibrator survey. A future ICRF realization will require improved geophysical modeling, sophisticated treatment of position variations and/or source structure, optimized data selection and weighting, and reidentification of defining sources. The motivation for the next realization could be significant improvement in accuracy and density or preparation for optical extragalactic catalogs with microarcsecond precision.

Ma, Chopo

Towards a Future ICRF Realization

The data and analysis for the ICRF were completed in 1995 to define a frame to which the Hipparcos optical catalog could be fixed. Additional observations on most of the 608 sources in the overall ICRF catalog have been acquired using a small portion of geodetic observing time as well as astrometric sessions concentrating on the Southern Hemisphere. Positions of new sources have been determined, including approximately 1200 from a VLBA phase calibrator survey. A future ICRF realization will require improved geophysical modeling, sophisticated treatment of position variations and/or source structure, optimized data selection and weighting, and re-identification of defining sources. The motivation for the next realization could be significant improvement in accuracy and density or preparation for optical extragalactic catalogs with microarcsecond precision.

Ma, Chopo

International Space Station (ISS) Accommodation of a Single US Assured Crew Return Vehicle (ACRV)

The following report was generated to give the International Space Station (ISS) Program some additional insight into the operations and issues associated with accommodating a single U.S. developed Assured Crew Return Vehicle (ACRV). During the generation of this report, changes in both the ISS and ACRV programs were factored into the analysis with the realization that most of the work performed will eventually need to be repeated once the two programs become more integrated. No significant issues associated with the ISS accommodating the ACRV were uncovered. Kinematic analysis of ACRV installation showed that there are viable methods of using Shuttle and Station robotic manipulators. Separation analysis demonstrated that the ACRV departure path clears the Station structure for all likely contingency scenarios. The payload bay packaging analysis identified trades that can be made between payload bay location, Shuttle Remote Manipulator System (SRMS) reach and eventual designs of de-orbit stages and docking adapters.

Mazanek, Daniel D.