New functional redundancy approaches for attitude control thruster systems
Functional redundancy safeguards for inert gas attitude control thruster systems
Hallum, C. E.↗
SEARCH · Search NASA
Results for “functional redundancy”
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
Use of failure-mode effect analysis for improving spacecraft reliability.
Failure mode effect, block redundancy, functional redundancy and cooperative multichannel design for system reliability in Mariner spacecraft
FAILURE MODE↗
Space and Ground Trades for Human Exploration and Wearable Computing
Human exploration of the Moon and Mars will present unique trade study challenges as ground system elements shift to planetary bodies and perhaps eventually to the bodies of human explorers in the form of wearable computing technologies. This presentation will highlight some of the key space and ground trade issues that will face the Exploration Initiative as NASA begins designing systems for the sustained human exploration of the Moon and Mars, with an emphasis on wearable computing. We will present some preliminary test results and scenarios that demonstrate how wearable computing might affect the trade space noted below. We will first present some background on wearable computing and its utility to NASA's Exploration Initiative. Next, we will discuss three broad architectural themes, some key ground and space trade issues within those themes and how they relate to wearable computing. Lastly, we will present some preliminary test results and suggest guidance for proceeding in the assessment and creation of a value-added role for wearable computing in the Exploration Initiative. The three broad ground-space architectural trade themes we will discuss are: 1. Functional Shift and Distribution: To what extent, if any, should traditional ground system functionality be shifted to, and distributed among, the Earth, Moon/Mars, and the human. explorer? 2. Situational Awareness and Autonomy: How much situational awareness (e.g. environmental conditions, biometrics, etc.) and autonomy is required and desired, and where should these capabilities reside? 3. Functional Redundancy: What functions (e.g. command, control, analysis) should exist simultaneously on Earth, the Moon/Mars, and the human explorer? These three themes can serve as the axes of a three-dimensional trade space, within which architectural solutions reside. We will show how wearable computers can fit into this trade space and what the possible implications could be for the rest of the ground and space architecture(s). We intend this to be an example of explorer-centric thinking in a fully integrated explorer paradigm, where integrated explorer refers to a human explorer having instant access to all relevant data, knowledge of the environment, science models, health and safety-related events, and other tools and information via wearable computing technologies. The trade study approach will include involvement from the relevant stakeholders (Constellation Systems, CCCI, EVA Project Office, Astronaut office, Mission Operations, Space Life Sciences, etc.) to develop operations concepts (and/or operations scenarios) from which a basic high-level set of requirements could be extracted. This set of requirements could serve as a foundation (along with stakeholder buy-in) that would help define the trade space and assist in identifying candidate technologies for further study and evolution to higher-level technology readiness levels.
Lupisella, Mark↗
Predicting protein functions from redundancies in large-scale protein interaction networks
Interpreting data from large-scale protein interaction experiments has been a challenging task because of the widespread presence of random false positives. Here, we present a network-based statistical algorithm that overcomes this difficulty and allows us to derive functions of unannotated proteins from large-scale interaction data. Our algorithm uses the insight that if two proteins share significantly larger number of common interaction partners than random, they have close functional associations. Analysis of publicly available data from Saccharomyces cerevisiae reveals >2,800 reliable functional associations, 29% of which involve at least one unannotated protein. By further analyzing these associations, we derive tentative functions for 81 unannotated proteins with high certainty. Our method is not overly sensitive to the false positives present in the data. Even after adding 50% randomly generated interactions to the measured data set, we are able to recover almost all (approximately 89%) of the original associations.
Proteins/chemistry/metabolism↗
Common Cause Failures Dominate and Defeat Redundancy
Common cause failures occur when several malfunctions are produced by a single event or process. They are especially damaging when they eliminate an entire set of redundant systems and disable their intended function. Redundancy is used when the individual system failure probability is unacceptably high. Redundancy can improve the overall system failure probability if the failures are independent, but the reliability gain is limited if there are dependent failures having a common cause. No amount of redundancy can reduce the total failure probability below the common cause failure probability. Common cause failures defeat redundancy. Systems with high reliability requirements often use extensive redundancy. These highly redundant systems rarely fail unless all the redundant components providing a particular function fail. Complete failures of such highly redundant systems are then usually common cause failures. Common cause failures are prevalent in highly redundant, high reliability systems. Common cause failures dominate redundancy. Redundant systems may fail due to specification, design, manufacturing, operations, or maintenance problems that disable all the identical redundant systems. Common cause failures typically account for one tenth of all failures. If the failure probability is relatively low and common cause failures are significant, adding more than two or three redundant identical units usually gives little added reliability improvement. Common cause failures can be reduced by using diverse components with different technologies and manufacturers, by separating and shielding subsystems, and by avoiding shared control, power, or location. External events and shared vulnerabilities may still cause common cause failures.
common cause failures↗
Common Cause Failures Dominate and Defeat Redundancy
Common cause failures occur when several malfunctions are produced by a single event or process. They are especially damaging when they eliminate an entire set of redundant systems and disable their intended function. Redundancy is used when the individual system failure probability is unacceptably high. Redundancy can improve the overall system failure probability if the failures are independent, but the reliability gain is limited if there are dependent failures having a common cause. No amount of redundancy can reduce the total failure probability below the common cause failure probability. Common cause failures defeat redundancy. Systems with high reliability requirements often use extensive redundancy. These highly redundant systems rarely fail unless all the redundant components providing a particular function fail. Complete failures of such highly redundant systems are then usually common cause failures. Common cause failures are prevalent in highly redundant, high reliability systems. Common cause failures dominate redundancy. Redundant systems may fail due to specification, design, manufacturing, operations, or maintenance problems that disable all the identical redundant systems. Common cause failures typically account for one tenth of all failures. If the failure probability is relatively low and common cause failures are significant, adding more than two or three redundant identical units usually gives little added reliability improvement. Common cause failures can be reduced by using diverse components with different technologies and manufacturers, by separating and shielding subsystems, and by avoiding shared control, power, or location. External events and shared vulnerabilities may still cause common cause failures.
common cause failures↗
Kinematic functions for redundancy resolution using configuration control
The invention fulfills new goals for redundancy resolution based on manipulator dynamics and end-effector characteristics. These goals are accomplished by employing the recently developed configuration control approach. Redundancy resolution is achieved by controlling the joint inertia matrix of the end-effector mass matrix that affect the inertial torques or by reducing the joint torques due to gravity loading and payload. The manipulator mechanical-advantage and velocity-ratio are also used as performance measures to be improved by proper utilization of redundancy. Furthermore, end-effector compliance, sensitivity, and impulsive force at impact are introduced as redundancy resolution criteria. The new goals for redundancy resolution allow a more efficient utilization of the redundant joints based on the desired task requirements.
Seraji, Homayoun↗
Study of nondestructive techniques for redundancy verification
Redundant functional element, together with basic elements of system, constitutes a redundant system with primary and backup capability for performing particular functions with increased reliability. Methodology is applicable to design of a verification system for hypothetical complex communication system.
Source record↗
Fault-tolerant software for aircraft control systems
Concepts for software to implement real time aircraft control systems on a centralized digital computer were discussed. A fault tolerant software structure employing functionally redundant routines with concurrent error detection was proposed for critical control functions involving safety of flight and landing. A degraded recovery block concept was devised to allow collocation of critical and noncritical software modules within the same control structure. The additional computer resources required to implement the proposed software structure for a representative set of aircraft control functions were discussed. It was estimated that approximately 30 percent more memory space is required to implement the total set of control functions. A reliability model for the fault tolerant software was described and parametric estimates of failure rate were made.
Source record↗
The Use of Dynamic Visual Acuity as a Functional Test of Gaze Stabilization Following Space Flight
After prolonged exposure to a given gravitational environment the transition to another is accompanied by adaptations in the sensorimotor subsystems, including the vestibular system. Variation in the adaptation time course of these subsystems, and the functional redundancies that exist between them make it difficult to accurately assess the functional capacity and physical limitations of astro/cosmonauts using tests on individual subsystems. While isolated tests of subsystem performance may be the only means to address where interventions are required, direct measures of performance may be more suitable for assessing the operational consequences of incomplete adaptation to changes in the gravitational environment. A test of dynamic visual acuity (DVA) is currently being used in the JSC Neurosciences Laboratory as part of a series of measures to assess the efficacy of a countermeasure to mitigate postflight locomotor dysfunction. In the current protocol, subjects visual acuity is determined using Landolt ring optotypes presented sequentially on a computer display. Visual acuity assessments are made both while standing and while walking at 1.8 m/s on a motorized treadmill. The use of a psychophysical threshold detection algorithm reduces the required number of optotype presentations and the results can be presented immediately after the test. The difference between the walking and standing acuity measures provides a metric of the change in the subject s ability to maintain gaze fixation on the visual target while walking. This functional consequence is observable regardless of the underlying subsystem most responsible for the change. Data from 15 cosmo/astronauts have been collected following long-duration (approx. 6 months) stays in space using a visual target viewing distance of 4.0 meters. An investigation of the group mean shows a change in DVA soon after the flight that asymptotes back to baseline approximately one week following their return to earth. The performance of some subjects nicely parallels the stereotypical recovery curve observed in the group mean data. Others show dramatic changes in DVA from one test day to another. These changes may be indicative of a re-adaptation process that is not characterized by a steady improvement with the passage of time, but is instead a dynamic search for appropriate coordinative strategy to achieve the desired gaze stabilization goal. Ground-based data have been collected in our lab using DVA with one of the goals being to improve the DVA test itself. In one of these studies, the DVA test was repeated using a visual target viewing distance of 0.5 meters. While walking, the relative contributions of the otoliths and semi-circular canals that are required to stabilize gaze are affected by visual target viewing distance. It may be possible to exploit this using the current treadmill DVA test to differentially assess changes in these vestibular subsystems. The postflight DVA evaluations currently used have been augmented to include the near target version of the test. Preliminary results from these assessments, as well as the results from the ground-based tests will also be reported. DVA provides a direct measure of a subject's ability to see clearly in the presence of self-motion. The use of the current tests for providing a functionally relevant metric is evident. However, it is possible to expand the scope of DVA testing to include scenarios other than walking. A facility for measuring DVA in the presence of passive movements is being created. Using a mechanized platform to provide the perturbation, it should be possible to simulate aircraft and automobile vibration profiles. Used in conjunction with the far and near visual displays this facility should be able to assess a subject s ability to clearly see distant objects as well as those that appear on the dashboard or instrument control panel during functionally relevant situations.
Peters, B. T.↗
High-Speed Ring Bus
The high-speed ring bus at the Jet Propulsion Laboratory (JPL) allows for future growth trends in spacecraft seen with future scientific missions. This innovation constitutes an enhancement of the 1393 bus as documented in the Institute of Electrical and Electronics Engineers (IEEE) 1393-1999 standard for a spaceborne fiber-optic data bus. It allows for high-bandwidth and time synchronization of all nodes on the ring. The JPL ring bus allows for interconnection of active units with autonomous operation and increased fault handling at high bandwidths. It minimizes the flight software interface with an intelligent physical layer design that has few states to manage as well as simplified testability. The design will soon be documented in the AS-1393 standard (Serial Hi-Rel Ring Network for Aerospace Applications). The framework is designed for "Class A" spacecraft operation and provides redundant data paths. It is based on "fault containment regions" and "redundant functional regions (RFR)" and has a method for allocating cables that completely supports the redundancy in spacecraft design, allowing for a complete RFR to fail. This design reduces the mass of the bus by incorporating both the Control Unit and the Data Unit in the same hardware. The standard uses ATM (asynchronous transfer mode) packets, standardized by ITU-T, ANSI, ETSI, and the ATM Forum. The IEEE-1393 standard uses the UNI form of the packet and provides no protection for the data portion of the cell. The JPL design adds optional formatting to this data portion. This design extends fault protection beyond that of the interconnect. This includes adding protection to the data portion that is contained within the Bus Interface Units (BIUs) and by adding to the signal interface between the Data Host and the JPL 1393 Ring Bus. Data transfer on the ring bus does not involve a master or initiator. Following bus protocol, any BIU may transmit data on the ring whenever it has data received from its host. There is no centralized arbitration or bus granting. The JPL design provides for autonomous synchronization of the nodes on the ring bus. An address-synchronous latency adjust buffer (LAB) has been designed that cannot get out of synchronization and needs no external input. Also, a priority-driven cable selection behavior has been programmed into each unit on the ring bus. This makes the bus able to connect itself up, according to a maximum redundancy priority system, without the need for computer intervention at startup. Switching around a failed or switched-off unit is also autonomous. The JPL bus provides a map of all the active units for the host computer to read and use for fault management. With regard to timing, this enhanced bus recognizes coordinated timing on a spacecraft as critical and addresses this with a single source of absolute and relative time, which is broadcast to all units on the bus with synchronization maintained to the tens of nanoseconds. Each BIU consists of up to five programmable triggers, which may be programmed for synchronization of events within the spacecraft of instrument. All JPL-formatted data transmitted on the ring bus are automatically time-stamped.
Wysocky, Terry↗
Final Mission and Navigation Design for the 2016 Mars InSight Mission
Project Overview: NASA’s 12th Discovery Program mission that will place a single geophysical lander on Mars to study its deep interior using seismic (tidal, marsquake, and impact), rotational, and thermal measurements -First mission to unveil the composition, structure and thermal state of martian crust, mantle and core; Rebuild of the Phoenix flight system, upgraded with Juno/GRAIL avionics -Phoenix cruise stage: 3-axis stabilized, 3.2 square meter UTJ (Ultra Triple-Junction) solar array, X-band telecom -Phoenix aeroshell (heat shield, backshell, parachute) -Phoenix lander: radar, pulsed thrusters, legs, payload deck, 5.1 square meter UTJ solar arrays, two redundant Li-ion batteries, UHF (Ultra High Frequency)/X-band telecom -Dual string: Internally or functionally-redundant equipment; Science Payload -SEIS (Seismic Experiment for Interior Structure) / CNES (Centre National d’Etudes Spatiales); Three-axis seismometry, to measure seismic waves traveling through the interior -HP3 (Heat Flow and Physical Properties Probe) / DLR (German Aerospace Center) -Subsurface heat probe, to measure the heat flux from the interior - RISE (Rotation and Interior Structure Experiment) / JPL (Jet Propulsion Laboratory) -Radiometric geodesy, to determine precession & nutation of the planet’s rotation axis. 2016 Disclaimer: The InSight launch in 2016 was suspended due to critical issues with the Seismic Experiment for Interior Structure (SEIS) instrument that could not be fixed prior to the planned launch period. This presentation and its corresponding paper represent the state of the design for the 2016 mission. No attempt has been made to reflect the latest developments. [2018 Note: InSight (Mars Lander) was later launched and arrived on Mars on Nov. 26, 2018.]
Abilleira, F.↗
New functional approaches for redundant inert gas thruster systems.
Valving concepts and functional approaches for inert gas attitude control thrustor systems providing redundancy safeguards at minimum weight, volume and power costs
Chisel, D. M.↗
Characterization and control of self-motions in redundant manipulators
The presence of redundant degrees of freedom in a manipulator structure leads to a physical phenomenon known as a self-motion, which is a continuous motion of the manipulator joints that leaves the end-effector motionless. In the first part of the paper, a global manifold mapping reformulation of manipulator kinematics is reviewed, and the inverse kinematic solution for redundant manipulators is developed in terms of self-motion manifolds. Global characterizations of the self-motion manifolds in terms of their number, geometry, homotopy class, and null space are reviewed using examples. Much previous work in redundant manipulator control has been concerned with the redundancy resolution problem, in which methods are developed to determine, or resolve, the motion of the joints in order to achieve end-effector trajectory control while optimizing additional objective functions. Redundancy resolution problems can be equivalently posed as the control of self-motions. Alternatives for redundancy resolution are briefly discussed.
Burdick, J.↗
The Atmosphere Explorer power subsystem
The design and operation of the power subsystem for the Atmospheric Explorer spacecraft are discussed. The additional functional redundancy which was added in several component areas to improve the overall subsystem reliability is analyzed. The battery charging technique has been modified to include third electrode overcharge control. The automatic removal of all battery charge is provided to correct abnormally high battery voltages. An undervoltage detector has been added which removes all nonessential spacecraft loads when the battery voltage falls below a given level. All automatic functions can be over-ridden by ground command.
Obenschain, A.↗
Factors which Limit the Value of Additional Redundancy in Human Rated Launch Vehicle Systems
The National Aeronautics and Space Administration (NASA) has embarked on an ambitious program to return humans to the moon and beyond. As NASA moves forward in the development and design of new launch vehicles for future space exploration, it must fully consider the implications that rule-based requirements of redundancy or fault tolerance have on system reliability/risk. These considerations include common cause failure, increased system complexity, combined serial and parallel configurations, and the impact of design features implemented to control premature activation. These factors and others must be considered in trade studies to support design decisions that balance safety, reliability, performance and system complexity to achieve a relatively simple, operable system that provides the safest and most reliable system within the specified performance requirements. This paper describes conditions under which additional functional redundancy can impede improved system reliability. Examples from current NASA programs including the Ares I Upper Stage will be shown.
Anderson, Joel M.↗
The OSO-7 mission
Addition of a gyro and star sensor to the wheel section of OSO-G provided nighttime pointing capability and functional redundancy in correcting an anomaly that put the combined OSO spacecraft and launch vehicle into a flat spin.
Thole, J. M.↗
Assuring reliability program effectiveness.
An attempt is made to provide simple identification and description of techniques that have proved to be most useful either in developing a new product or in improving reliability of an established product. The first reliability task is obtaining and organizing parts failure rate data. Other tasks are parts screening, tabulation of general failure rates, preventive maintenance, prediction of new product reliability, and statistical demonstration of achieved reliability. Five principal tasks for improving reliability involve the physics of failure research, derating of internal stresses, control of external stresses, functional redundancy, and failure effects control. A final task is the training and motivation of reliability specialist engineers.
Ball, L. W.↗