SEARCH · Search NASA

Results for “Resilience event”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 19 records

All sources NASA NTRS DOE OSTI

NASA NTRS2020

Designing Trajectories Resilient to Missed Thrust Events Using Expected Thrust Fraction

With the adoption of efficient low-thrust propulsion methods, the probability of a missed thrust event occurring has become a significant concern for short and long- duration missions. If the missed thrust events take place during a critical portion of the trajectory, the mission can be compromised. Therefore, it is essential to de- velop trajectories that are resilient to missed thrust events. This paper investigates the use of expected thrust fraction, which embeds the stochastic nature of missed thrust events into a deterministic optimal control problem. The performance of trajectories designed using expected thrust fraction is compared with traditionally designed trajectories to measure changes in resiliency to missed thrust events. In this investigation, trajectories designed using expected thrust fraction arrive with a median lateness half that of traditionally designed trajectories. Using expected thrust fraction can help astrodynamicists mitigate risks posed by the use of low- thrust propulsion.

Laipert, Frank E.↗

NASA NTRS2021

Design of Solar Sailing Trajectories Resilient to Safe Mode Events

Solar sails are an enabling technology for stand-alone small-satellite deep-space exploration. However, their always-on nature, combined with the time of flight required for deep-space missions, makes them particularly susceptible to safe mode events. Unlike missions using electric propulsion, exclusively solar sail- ing missions cannot carry extra propellant to make up for a safe mode event, and more powerful methods like expected availability cannot be directly applied. This work extends the expected availability and duty cycle approaches to solar sailing. Through an application to NASA’s Solar Cruiser mission, a 46 % increase in tra- jectory resilience is obtained at negligible change in the mission’s time of flight. Additionally, it is shown that when a safe mode event stops the spacecraft from reaching its target orbit, the developed methods reduce the expected final error by approximately an order of magnitude.

Johnson, Les↗

NASA NTRS2019

Neural Network Based Optimal Control: Resilience to Missed Thrust Events for Long Duration Transfers

A growing number of spacecraft are continuing to adopt new and more efficient forms of in-space propulsion. One shared characteristic of these high-efficiency propulsion techniques is their limited thrust capabilities. This requires them to thrust continuously for long periods of time, making the spacecraft susceptible to potential missed thrust events. This work demonstrates how neural networks can autonomously correct for missed thrust events during a low-thrust long-duration transfer trajectory. The research applies and tests the developed method to au- tonomously correct a Mars return trajectory. Additionally, methods for improving the response of neural networks to missed thrust events are presented and further investigated.

Laipert, Frank E.↗

NASA NTRS2016

In-Space Structural Assembly: Applications and Technology

As NASA exploration moves beyond earth's orbit, the need exists for long duration space systems that are resilient to events that compromise safety and performance. Fortunately, technology advances in autonomy, robotic manipulators, and modular plug-and-play architectures over the past two decades have made in-space vehicle assembly and servicing possible at acceptable cost and risk. This study evaluates future space systems needed to support scientific observatories and human/robotic Mars exploration to assess key structural design considerations. The impact of in-space assembly is discussed to identify gaps in structural technology and opportunities for new vehicle designs to support NASA's future long duration missions.

Belvin, W. Keith↗

NASA NTRSDate not supplied

Using Degradation Modeling to Identify Fragile Operational Conditions in Human- and Component-driven Resilience Assessment

Studying failure events shows that many high-impact events result from the complex interactions between precipitating failure events and degraded operational conditions. Often, when a system is put in operations, unforeseen practical realities (e.g., maintenance and/or workforce availability) lead the system to be operated in configurations outside its envisioned nominal range. However, design-time failure models often assume that the failure events are initiated in an idealized, nominal state of system operation, resulting in an incomplete assessment of future risk. To solve this, this paper develops a framework to consider degraded operational performance in scenario-based resilience models which uses a corresponding model of performance degradation to determine the values of deteriorated model parameters in the resilience model. This framework is demonstrated on a remotely-piloted rover to determine the (individual and combined) effect of drive-train wear and operator fatigue on the resilience of the rover to drive-train faults. This demonstration showed the substantial impact that degradation has on resilience, highlighting the need to account for degradation in resilience models–specifically, unconsidered degradation can lead to overestimates of resilience (and thus underestimates of safety margin) and because resilience can degrade prior to visible unreliability, which can lead to an operational environment with a high propensity for high-impact unforeseen failure events.

resilience↗

NASA NTRSDate not supplied

Using Degradation Modeling to Identify Fragile Operational Conditions in Human- and Component-driven Resilience Assessment

Studying failure events shows that many high-impact events result from the complex interactions between precipitating failure events and degraded operational conditions. Often, when a system is put in operations, unforeseen practical realities (e.g., maintenance and/or workforce availability) lead the system to be operated in configurations outside its envisioned nominal range. However, design-time failure models often assume that the failure events are initiated in an idealized, nominal state of system operation, resulting in an incomplete assessment of future risk. To solve this, this paper develops a framework to consider degraded operational performance in scenario-based resilience models which uses a corresponding model of performance degradation to determine the values of deteriorated model parameters in the resilience model. This framework is demonstrated on a remotely-piloted rover to determine the (individual and combined) effect of drive-train wear and operator fatigue on the resilience of the rover to drive-train faults. This demonstration showed the substantial impact that degradation has on resilience, highlighting the need to account for degradation in resilience models--specifically, unconsidered degradation can lead to overestimates of resilience (and thus underestimates of safety margin) and because resilience can degrade prior to visible unreliability, which can lead to an operational environment with a high propensity for high-impact unforeseen failure events.

Daniel Hulse↗

NASA NTRSDate not supplied

Reports of Resilient Performance: Investigating Operators' Descriptions of Safety-producing Behaviors in the Aviation Safety Reporting System

While many existing taxonomies and frameworks provide a common vocabulary for describing how human operators fail in the context of sociotechnical systems, at present, there is no common vocabulary to describe how humans succeed. Such a framework would facilitate systematically collecting and analyzing data on how human performance can produce safety, not just how it can reduce safety. One potentially rich source of currently available information for exploring desired performance is the reports submitted to NASA’s Aviation Safety Reporting System (ASRS). These de-identified, confidential, and voluntary narrative reports are submitted by pilots, controllers, ground operators, and others within aviation operations. While these reports are primarily submitted to describe safety risks, incidents, and problems, they also often describe how those risks were mitigated, and provide a window into aspects of everyday work in aviation. This paper describes an analysis of ASRS narratives to understand how operators talk about their own resilient behaviors during adverse safety conditions and events. Guided by Erik Hollnagel’s Resilience Assessment Grid framework (i.e., anticipate, monitor, respond, learn), we illustrate our approach and methodology with examples from reports. We also highlight some of the challenges and how further research is needed in developing a taxonomy of operators’ descriptions of resilient performance.

resilient behaviors↗

NASA NTRSDate not supplied

Reports of Resilient Performance: Investigating Operators' Descriptions of Safety-producing Behaviors in the Aviation Safety Reporting System

While many existing taxonomies and frameworks provide a common vocabulary for describing how human operators fail in the context of sociotechnical systems, at present, there is no common vocabulary to describe how humans succeed. Such a framework would facilitate systematically collecting and analyzing data on how human performance can produce safety, not just how it can reduce safety. One potentially rich source of currently available information for exploring desired performance is the reports submitted to NASA’s Aviation Safety Reporting System (ASRS). These de-identified, confidential, and voluntary narrative reports are submitted by pilots, controllers, ground operators, and others within aviation operations. While these reports are primarily submitted to describe safety risks, incidents, and problems, they also often describe how those risks were mitigated, and provide a window into aspects of everyday work in aviation. These reports can be searched in a variety of ways. This paper describes methods for systematically examining ASRS narratives to understand how operators talk about their own resilient behaviors during adverse safety conditions and events. Guided by Erik Hollnagel’s Resilience Assessment Grid framework (i.e., anticipate, monitor, respond, learn), various approaches and tools for such inquiries are described. The approach, process, challenges, and suggestions to building an operator-based description of resilient performance are discussed, and tools to facilitate data analysis to maximize learning from these reports are described.

ASRS narratives↗

NASA NTRSDate not supplied

Uncovering Hazards Using a Multi-Objective Optimization to Explore the Faulty State-Space

Considering resilience when designing complex engineered systems is crucial to ensure the system is safe under unexpected hazardous scenarios. Traditional risk-based approaches, such as Failure Modes and Effects Analysis (FMEA) are useful for designing the system to mitigate hazardous scenarios that can be identified by the designer, but often require experience or prior knowledge of system failures to generate. More recently, researchers have developed simulation tools that enable the designer to model large sets of hazardous scenarios (driven by both internal faults and external factors) through simulation. While these tools enable a wider scope of fault modes to be evaluated (e.g., by injecting combined set of fault modes or injecting modes at different times), the resulting assessments (like FMEA) still require knowledge of the specific modes to be evaluated. However, failure to analyze a wide variety of fault scenarios can lead to an incomplete picture of the system resilience, especially to "surprise events'' which may be difficult for the designer to identify and predict beforehand. To overcome this challenge, previous work developed a fault sampling approach for resilience simulations which would procedurally-generate a wide variety of potential faults by systematically perturbing the health states of the system. While the resulting fault modes generated covered a much larger space hazards than would be otherwise considered (and identified many unique failure trajectories which would not have otherwise been identified), it also significantly increased the computational cost of the analysis and resulted in the simulation and analysis of a large set of essentially duplicate scenarios. Additionally, as the number of dimensions in the faulty state-space increases, the full elaboration of possible modes becomes computationally infeasible, justifying the use of a more targeted search. To resolve this limitation, this work proposes the use of a multiobjective optimization algorithm to search the health state space for potential fault modes that are both (1) hazardous and (2) unique. To solve this type of problem, this work proposes the use of a cooperative co-evolutionary algorithm. To demonstrate this approach, it will be applied to a model of an autonomous rover which uses line markings to navigate, focusing on potential hazards in the drive system which could cause the rover to crash. To determine the merit of the approach, it will further be compared with the previously-presented range elaboration approach and a random mode generation approach on the basis of computational efficiency and found modes.

Resilience↗

NASA NTRS2018

Optimization of Second Fault Detection Thresholds to Maximize Mission POS

In order to support manned spaceflight safety requirements, the Space Launch System (SLS) has defined program-level requirements for key systems to ensure successful operation under single fault conditions. To accommodate this with regards to Navigation, the SLS utilizes an internally redundant Inertial Navigation System (INS) with built-in capability to detect, isolate, and recover from first failure conditions and still maintain adherence to performance requirements. The unit utilizes multiple hardware- and software-level techniques to enable detection, isolation, and recovery from these events in terms of its built-in Fault Detection, Isolation, and Recovery (FDIR) algorithms. Successful operation is defined in terms of sufficient navigation accuracy at insertion while operating under worst case single sensor outages (gyroscope and accelerometer faults at launch). In addition to first fault detection and recovery, the SLS program has also levied requirements relating to the capability of the INS to detect a second fault, tracking any unacceptable uncertainty in knowledge of the vehicle's state. This detection functionality is required in order to feed abort analysis and ensure crew safety. Increases in navigation state error and sensor faults can drive the vehicle outside of its operational as-designed environments and outside of its performance envelope causing loss of mission, or worse, loss of crew. The criteria for operation under second faults allows for a larger set of achievable missions in terms of potential fault conditions, due to the INS operating at the edge of its capability. As this performance is defined and controlled at the vehicle level, it allows for the use of system level margins to increase probability of mission success on the operational edges of the design space. Due to the implications of the vehicle response to abort conditions (such as a potentially failed INS), it is important to consider a wide range of failure scenarios in terms of both magnitude and time. As such, the Navigation team is taking advantage of the INS's capability to schedule and change fault detection thresholds in flight. These values are optimized along a nominal trajectory in order to maximize probability of mission success, and reducing the probability of false positives (defined as when the INS would report a second fault condition resulting in loss of mission, but the vehicle would still meet insertion requirements within system-level margins). This paper will describe an optimization approach using Genetic Algorithms to tune the threshold parameters to maximize vehicle resilience to second fault events as a function of potential fault magnitude and time of fault over an ascent mission profile. The analysis approach, and performance assessment of the results will be presented to demonstrate the applicability of this process to second fault detection to maximize mission probability of success.

Anzalone, Evan↗

NASA NTRS2018

Optimization of Second Fault Detection Thresholds to Maximize Mission Probability of Success

In order to support manned spaceflight safety requirements, the Space Launch System (SLS) has defined program-level requirements for key systems to ensure successful operation under single fault conditions. The SLS program has also levied requirements relating to the capability of the Inertial Navigation System to detect a second fault. This detection functionality is required in order to feed abort analysis and ensure crew safety. Increases in navigation state error due to sensor faults in a purely inertial system can drive the vehicle outside of its operational as-designed environmental and performance envelope. As this performance outside of first fault detections is defined and controlled at the vehicle level, it allows for the use of system level margins to increase probability of mission success on the operational edges of the design. A top-down approach is utilized to assess vehicle sensitivity to second sensor faults. A wide range of failure scenarios in terms of both fault magnitude and time is used for assessment. The approach also utilizes a schedule to change fault detection thresholds autonomously. These individual values are optimized along a nominal trajectory in order to maximize probability of mission success in terms of system-level insertion requirements while minimizing the probability of false positives. This paper will describe an approach integrating Genetic Algorithms and Monte Carlo analysis to tune the threshold parameters to maximize vehicle resilience to second fault events over an ascent mission profile. The analysis approach and performance assessment and verification will be presented to demonstrate the applicability of this approach to second fault detection optimization to maximize mission probability of success through taking advantage of existing margin.

Anzalone, Evan J.↗

NASA NTRS2021

Ecosystem age-class dynamics and distribution in the LPJ-wsl v2.0 global ecosystem model

Forest ecosystem processes follow classic responses with age, peaking production around canopy closure and declining thereafter. Although age dynamics might be more dominant in certain regions over others, demographic effects on net primary production (NPP) and heterotrophic respiration (Rh) are bound to exist. Yet, explicit representation of ecosystem demography is notably absent in many global ecosystem models. This is concerning because the global community relies on these models to regularly update our collective understanding of the global carbon cycle. This paper aims to present the technical developments of a computationally efficient approach for representing age-class dynamics within a global ecosystem model, the Lund–Potsdam–Jena – Wald, Schnee, Landschaft version 2.0 (LPJ-wsl v2.0) dynamic global vegetation model and to determine if explicit representation of demography influenced ecosystem stocks and fluxes at global scales or at the level of a grid cell. The modeled age classes are initially created by simulated fire and prescribed wood harvesting or abandonment of managed land, otherwise aging naturally until an additional disturbance is simulated or prescribed. In this paper, we show that the age module can capture classic demographic patterns in stem density and tree height compared to inventory data, and that simulated patterns of ecosystem function follow classic responses with age. We also present two scientific applications of the model to assess the modeled age-class distribution over time and to determine the demographic effect on ecosystem fluxes relative to climate. Simulations show that, between 1860 and 2016, zonal age distribution on Earth was driven predominately by fire, causing a 45- to 60-year difference in ages between older boreal (50–90° N) and younger tropical (23° S–23° N) ecosystems. Between simulation years 1860 and 2016, land-use change and land management were responsible for a decrease in zonal age by −6 years in boreal and by −21 years in both temperate (23–50° N) and tropical latitudes, with the anthropogenic effect on zonal age distribution increasing over time. A statistical model helped to reduce LPJ-wsl v2.0 complexity by predicting per-grid-cell annual NPP and Rh fluxes by three terms: precipitation, temperature, and age class; at global scales, R2 was between 0.95 and 0.98. As determined by the statistical model, the demographic effect on ecosystem function was often less than 0.10 kg C/sq. myr but as high as 0.60 kg C/sq. myr where the effect was greatest. In the eastern forests of North America, the simulated demographic effect was of similar magnitude, or greater than, the effects of climate; simulated demographic effects were similarly important in large regions of every vegetated continent. Simulated spatial datasets are provided for global ecosystem ages and the estimated coefficients for effects of precipitation, temperature and demography on ecosystem function. The discussion focuses on our finding of an increasing role of demography in the global carbon cycle, the effect of demography on relaxation times (resilience) following a disturbance event and its implications at global scales, and a finding of a 40 Pg C increase in biomass turnover when including age dynamics at global scales. Whereas time is the only mechanism that increases ecosystem age, any additional disturbance not explicitly modeled will decrease age. The LPJ-wsl v2.0 age module represents another step forward towards understanding the role of demography in global ecosystems.

LPJ-wsl↗

NASA NTRS2021

Expected Thrust Fraction: Resilient Trajectory Design Applied to the Earth Return Orbiter

Electric propulsion is an enabling technology for NASA’s Mars Sample Return mission that affords an order of magnitude reduction in fuel. Unfortunately, elec- tric propulsion’s low-thrust capabilities require long thrusting arcs that make space- craft susceptible to disturbances resulting in missed thrust events. One method for designing trajectories resilient to such missed thrust events is expected thrust frac- tion, which embeds their stochastic nature into a time-varying duty cycle. This paper investigates the application of expected thrust fraction to the Earth Return Orbiter’s outbound Earth-to-Mars trajectory and compares it with trajectories de- signed using traditional methods to mitigate missed thrust events. Through the use of expected thrust fraction, a trajectory with a baseline 65.4% success rate is im- proved to an 86.6% success rate at the cost of only a 12 kg reduction in delivered mass. Additionally, when expected thrust fraction is used in conjunction with a terminal coast, a 96.0% success rate is achieved, which is higher than any single mitigation technique.

Laipert, Frank↗

NASA NTRSDate not supplied

Modeling Distributed Situation Awareness in Resilience-Based Design of Complex Engineered Systems

Human operators play a major role in the resilience of complex systems–while human error is one of the biggest contributors to hazardous events, operators additionally play a critical role in mitigating hazardous events. A key factor underlying this operator resilience is situation awareness–the ability of operators to understand their environment and each other to achieve desired system functions. In contrast to situation awareness-related accident models in the literature, which are largely conceptual in nature, this work proposes the use of a dynamic simulation framework to concretely model both the effects of situation awareness-related human errors and situation awareness-related hazard-mitigating properties using the distributed situation awareness theory. This work then presents specialized model constructs to enable agents’ individual perceptions of the system state and transactions with other agents (and thus distributed situation awareness) to be represented in simulation. To demonstrate this framework, it is then adapted to an aircraft taxiway case study, where it is used to model aircraft conflicts due to lack of vision and poor communications from the air traffic controller. This demonstration shows the potential of using simulation models to rigorously understand situation awareness-related human errors and thus inform the design of resilience.

Resilience Modeling↗

NASA NTRSDate not supplied

Modeling Distributed Situation Awareness in Resilience-based Design of Complex Systems

Resilience Modeling↗

NASA NTRSDate not supplied

Going Beyond Reliability to Robustness and Resilience in Space Life Support Systems

The words reliability, robustness, and resilience are often used interchangeably to describe tough and dependable systems but the distinctions between them suggest how to design more serviceable space systems. Reliability is simply the quality of consistently performing well. A system that dependably meets its design requirements in the specified environment is reliable. The designers may not consider themselves responsible for failures under unanticipated conditions. Robustness is the capability of performing without failure under a wide range of conditions, which can go beyond the expected range to include possible off-nominal conditions. Resilience is the ability to recover from or adapt to unanticipated damaging events, such as failures, accidents, external disruptions, and repurposing. Such changes can invalidate the usual operating assumptions and cause system failure. Reliability, robustness, and resilience describe dependable performance under increasingly difficult conditions, first the specified environment, then a wider possible environment, and finally unanticipated damaging conditions. These three qualities are increasingly desirable and increasingly difficult to achieve. Engineering for resilience would design systems that can ignore or repair failures, survive accidents, and recover from unanticipated disruptions. Increasing the resilience of space systems would greatly increase space crew safety. Improving reliability and robustness requires dealing with known problems, but improving resilience requires implementing a general approach to reducing the impact of unknown future events. The need for robustness and resilience has been stated for decades but little has been done. Systems designers often assume that they understand everything they need to know. The potential failures caused by changes, failures, accidents, unknown environments, and unknown unknowns can be ignored. Such overconfidence can lead to neglect of reliability, robustness, and resilience.

Harry W. Jones↗

NASA NTRSDate not supplied

Going Beyond Reliability to Robustness and Resilience in Space Life Support Systems

Harry W. Jones↗

NASA NTRSDate not supplied

Investigating the Relationship between the Cell Wall Integrity Pathway and Unfolded Protein Response

Plants have made significant contributions to astronaut health in spaceflight missions. To further spaceflight research in optimizing plant viability, this study aims to understand the factors involved in maintaining cell wall integrity, which is vital to plant morphology and structural stability. Spaceflight can negatively impact the cell wall; thus, it is crucial to investigate how to mitigate spaceflight stressors to maintain the integrity of the cell wall. The structural integrity of plants’ cell walls depends on secondary cell wall biogenesis, which enables the repair and architectural support of plants like A. thaliana. This biogenesis is triggered by a signal transduction cascade: first initiated by cell wall stress, the CWI (cell wall integrity) pathway is activated, followed by the UPR (unfolded protein response), then the cell wall’s integrity is maintained through secondary cell wall biogenesis. Through a re-analysis of GeneLab Dataset 321 (GLDS-321), a study from NASA’s Open Science Data Repository that investigates the effects of spaceflight on the UPR, several genes were found to be associated with the cell wall. This proposal postulates a relationship between the UPR and the CWI pathway and their direct effect on secondary cell wall biogenesis by investigating IRX7, a gene associated with secondary cell wall biogenesis. The predicted outcome of overexpressing IRX7 is increased resilience of the cell wall by upregulating both the UPR and the CWI pathway, while silencing IRX7 is predicted to compromise the cell wall integrity by downregulating the UPR and the CWI pathway. This study will give insight into the needed measures to increase cell wall resilience in stressful environments: As spaceflight durations increase and uncertain climate change events progress on Earth, understanding how to optimize cell wall resilience – a fundamental pillar of plant health – can effectively enhance mass crop production and quality and ensure the physical and psychological health of astronauts in long-term space missions.

GL4HS↗