Search NASASearch

SEARCH · Search NASA

Results for “hazard analysis and control”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

Application of System-Theoretic Process Analysis (STPA) to a NASA Concept Electric Aircraft Battery System

System-Theoretic Process Analysis (STPA) is a systems-based hazard analysis method that identifies unsafe interactions and control deficiencies in complex systems but has been rarely used for NASA programs in favor of more well-established hazard analyses. To evaluate its applicability, a NASA Safety and Mission Assurance (SMA) team applied the STPA method to an early-stage hybrid electrified aircraft concept, focusing on the energy storage system and electric powertrain. Objectives include assessing STPA’s value relative to traditional methods and its suitability for early design phases. Activities include team training, system review, detailed STPA execution, and comparison with traditional analyses. Findings show STPA provides a structured, comprehensive hazard evaluation and can identify additional risks by expanding analysis boundaries. However, traditional methods can yield similar results when applied rigorously, though they typically require more mature designs. Overall, STPA is a valuable addition, particularly for early development, informing safety requirements and supporting preliminary hazard analyses. Further pilot applications are recommended.

Electric Aviation

Crewed Space Vehicle Battery Safety Requirements

This requirements document is applicable to all batteries on crewed spacecraft, including vehicle, payload, and crew equipment batteries. It defines the specific provisions required to design a battery that is safe for ground personnel and crew members to handle and/or operate during all applicable phases of crewed missions, safe for use in the enclosed environment of a crewed space vehicle, and safe for use in launch vehicles, as well as in unpressurized spaces adjacent to the habitable portion of a space vehicle. The required provisions encompass hazard controls, design evaluation, and verification. The extent of the hazard controls and verification required depends on the applicability and credibility of the hazard to the specific battery design and applicable missions under review. Evaluation of the design and verification program results shall be completed prior to certification for flight and ground operations. This requirements document is geared toward the designers of battery systems to be used in crewed vehicles, crew equipment, crew suits, or batteries to be used in crewed vehicle systems and payloads (or experiments). This requirements document also applies to ground handling and testing of flight batteries. Specific design and verification requirements for a battery are dependent upon the battery chemistry, capacity, complexity, charging, environment, and application. The variety of battery chemistries available, combined with the variety of battery-powered applications, results in each battery application having specific, unique requirements pertinent to the specific battery application. However, there are basic requirements for all battery designs and applications, which are listed in section 4. Section 5 includes a description of hazards and controls and also includes requirements.

Jeevarajan, Judith A.

Proper battery system design for GAS experiments

The purpose of this paper is to help the GAS experimenter to design a battery system that meets mission success requirements while at the same time reducing the hazards associated with the battery system. Lead-acid, silver-zinc and alkaline chemistry batteries will be discussed. Lithium batteries will be briefly discussed with emphasis on back-up power supply capabilities. The hazards associated with different battery configurations will be discussed along with the controls necessary to make the battery system two-fault tolerant.

Calogero, Stephen A.

Planning for Execution Monitoring on A Planetary Rover

A planetary rover will be traversing largely unknown and often unknowable terrain. In addition to geometric obstacles such as cliffs, rocks, and holes, it may also have to deal with non-geometric hazards such as soft soil and surface breakthroughs which often cannot be detected until rover is in imminent danger. Therefore, the rover must monitor its progress throughout a traverse, making sure to stay on course and to detect and act on any previously unseen hazards. Its onboard planning system must decide what sensors to monitor, what landmarks to take position readings from, and what actions to take if something should go wrong. The planning systems being developed for the Pathfinder Planetary Rover to perform these execution monitoring tasks are discussed. This system includes a network of planners to perform path planning, expectation generation, path analysis, sensor and reaction selection, and resource allocation.

Erann Gat

Some Experiments on the Passage of High-Energy Protons in Dense Matter

A series of experiments designed to study the nuclear cascade resulting from the passage of 1 to 3 GeV protons in matter has been in progress at the Brookhaven Cosmotron. Preliminary results on the fluxes of fast neutrons (upper limits) and of strongly interacting particles above 50 MeV are summarized here (Fig. 1 and Table 1). The four cases studied are: 1-GeV protons on Fe, on chondritic material, and on C 5 H 8 O 2 , and 3-GeV protons on Fe.

Proton Irradiation

Biocybernetic Closed-Loop System for Mitigating Hazardous States of Awareness

The past century of passenger flight has seen continuous improvement in aviation safety by the aerospace industry. However, while commercial aviation accident rates have continued to decline, human error-related incident and accident rates remain remarkably constant across all types of aviation (Shappell, et al., 2007). Unfortunately, this level of human error is unacceptable when considering projections for increased traffic volume (FAA, 2009), and is likely to yield more incidents and accidents unless a more complete understanding of operator error is achieved and remediations are implemented. One area of interest highlighted by researchers is Hazardous States of Awareness (HSAs) that can result from deficiencies in the design and inappropriate use of human-machine interfaces. Identifying and mitigating HSAs is critical for reducing operator errors. One promising approach uses psychophysiological measures which enable automated systems to adapt to the operator?s state and modify modes of operation to support optimal human performance (Scerbo, 2007). This paper will survey previous research and describe future directions for the application of psychophysiological measures of operators derived from cortical and autonomic assessment to perform real-time adaptive modulation of human-automation task mode mixes. The authors will present a summary of previous work done at NASA LaRC and Old Dominion University using a Psychophysiologically Adaptive System (PAS) in which the level of automation of the NASA Multi-Attribute Task Battery was modulated based on Engagement Indices derived from the users? electroencephalogram (Pope, Bogart, & Bartolome, 1995; for review see, Scerbo, Freeman, & Mikulka, 2003). Future theoretical and methodological directions for this type of closed-loop research will be discussed. Specifically, the capacity for this type of PAS to maintain effective operator state and to enable validation of candidate physiological indices will be described. Consideration will also be given to critical system characteristics (e.g., engagement indices, methods for invoking changes among system states, individual differences among users, etc.) that have been or still need to be studied. The potential of the PAS approach for interactive system design and prototyping will also be described. Examples of adaptive automation flight deck concepts in recent experiments will be highlighted and discussed.

Chad L Stephens

Manned Mars Systems Study

A study is underway to determine attractive system options, perform trade studies, and provide comparative data for astronaut missions to Mars. Because of an emphasis in this work on deriving requirements and candidates for the transportation and facility infrastructure for such missions, all relevant technologies and mission constraints are also being considered. These include on-orbit assembly, trajectory type, launch opportunities, propellant storage, crew size, cabin pressure, artificial gravity, life-support systems, radiation hazards, power/energy storage, thermal control, human factors, communications, abort scenarios, landing techniques, exploration strategies and science activities. It is planned to scope several example missions and to identify enabling and significantly enhancing technologies for accomplishing the goals of the human exploration of Mars.

Benton C Clark

NASA. Johnson Space Center primary battery applications

The role of the Power Branch/EP5 of JSC in primary battery applications is to support those JSC organizations having direct application responsibility with trade studies, battery selection recommendations, and with development, qualification, and provisioning of primary batteries. Battery subsystem management is provided. Payload hazard report preparation is supported, as is the review and comment of such reports for the JSC Payload Safety Panel, who approves the flight safety for all Orbiter payloads. JSC battery users are provided with safety analysis and test support to achieve safety approval. Finally, it is the responsibility of the Power Branch to define and maintain battery safety requirement documentation for JSC.

Bragg, Bob J.

High-Precision Shape Control of In-Space Deployable Large Membrane/Thin-Shell Reflectors

This innovation has been developed to improve the resolutions of future spacebased active and passive microwave antennas for earth-science remote sensing missions by maintaining surface figure precisions of large membrane/thin-shell reflectors during orbiting. The intention is for these sensing instruments to be deployable at orbit altitudes one or two orders of magnitude higher than Low Earth Orbit (LEO), but still being able to acquire measurements at spatial resolution and sensitivity similar to those of LEO. Because active and passive microwave remote sensors are able to penetrate through clouds to acquire vertical profile measurements of geophysical parameters, it is desirable to elevate them to the higher orbits to obtain orbital geometries that offer large spatial coverage and more frequent observations. This capability is essential for monitoring and for detailed understanding of the life cycles of natural hazards, such as hurricanes, tropical storms, flash floods, and tsunamis. Major components of this high-precision antenna-surface-control system include a membrane/thin shell reflector, a metrology sensor, a controller, actuators, and corresponding power amplifier and signal conditioning electronics (see figure). Actuators are attached to the back of the reflector to produce contraction/ expansion forces to adjust the shape of the thin-material reflector. The wavefront-sensing metrology system continuously measures the surface figure of the reflector, converts the surface figure to digital data and feeds the data to the controller. The controller determines the control parameters and generates commands to the actuator system. The flexible, piezoelectric polymer actuators are thus activated, providing the control forces needed to correct any distortions that exist in the reflector surface. Piezoelectric polymer actuators are very thin and flexible. They can be implemented on the back of the membrane/thin-shell reflector without introducing significant amounts of mass or stiffness to the reflector. They can be rolled up or folded to accommodate the packaging needed for launch. An analytical model of the system, which includes the membrane reflector, actuator, and controller has been developed to investigate the functionality of this control system on a 35-meter-diameter membrane reflector. The performance of this system under external disturbances such as in space thermal loads and W-error due to inflation has been investigated. A subscale breadboard has been developed, and the functionality of this control concept has been demonstrated by this breadboard.

Houfei Fang

Analysis of Screen Channel LAD Bubble Point Tests in Liquid Methane at Elevated Temperature

This paper examines the effect of varying the liquid temperature and pressure on the bubble point pressure for screen channel Liquid Acquisition Devices in cryogenic liquid methane using gaseous helium across a wide range of elevated pressures and temperatures. Testing of a 325 x 2300 Dutch Twill screen sample was conducted in the Cryogenic Components Lab 7 facility at the NASA Glenn Research Center in Cleveland, Ohio. Test conditions ranged from 105 to 160K and 0.0965 – 1.78 MPa. Bubble point is shown to be a strong function of the liquid temperature and a weak function of the amount of subcooling at the LAD screen. The model predicts well for saturated liquid but under predicts the subcooled data.

Reaction Control System

International Space Station Lithium-Ion Battery

The International Space Station (ISS) primary Electric Power System (EPS) currently uses Nickel-Hydrogen (Ni-H2) batteries to store electrical energy. The electricity for the space station is generated by its solar arrays, which charge batteries during insolation for subsequent discharge during eclipse. The Ni-H2 batteries are designed to operate at a 35 depth of discharge (DOD) maximum during normal operation in a Low Earth Orbit. Since the oldest of the 48 Ni-H2 battery Orbital Replacement Units (ORUs) has been cycling since September 2006, these batteries are now approaching their end of useful life. In 2010, the ISS Program began the development of Lithium-Ion (Li-Ion) batteries to replace the Ni-H2 batteries and concurrently funded a Li-Ion ORU and cell life testing project. When deployed, they will be the largest Li-Ion batteries ever utilized for a human-rated spacecraft. This paper will include an overview of the ISS Li-Ion battery system architecture, the Li-Ion battery design and development, controls to limit potential hazards from the batteries, and the status of the Li-Ion cell and ORU life cycle testing.

battery

Final Thermal Design and Thermal Vacuum Testing of the StarBurst Instrument

The StarBurst Multimessenger Pioneer is a small satellite mission serving as a wide-field gamma-ray observatory designed to capture the initial emissions of short gamma-ray bursts, electromagnetic signatures of neutron star mergers. This paper presents the final thermal design and analysis of the StarBurst Instrument, comprising the bus-to-instrument interface plate, control electronics, and twelve crystal detector units, which form the core of the mission’s science capability. The passive thermal control system design requires consideration of restrictive keep-out zones, unknown orbital parameters, and narrow temperature limits of the detectors. Also summarized is the instrument level thermal vacuum cycle test, correlated model refinements, and updated model results. Following successful completion of the instrument test campaign, the hardware was integrated with the spacecraft bus for spacecraft level testing, including additional thermal vacuum testing. The results from the spacecraft level thermal vacuum test will further inform the instrument thermal model, ensuring accurate flight temperature predictions. StarBurst launches as a secondary payload in 2027 and has a mission duration of at least one year.

StarBurst

NASA's Advanced Control Law Program for the F-8 Digital Fly-By-Wire Aircraft

This paper briefly describes the NASA F-8 Digital Fly-By-Wire (DFBW) program and Langley Research Center's role in investigating and promoting advanced control laws for possible flight experimentation. The primary purpose of the paper is to provide background material for papers describing some of the F-8 DFBW adaptive control law studies. The paper provides a brief description of the Phase II DFBW F-8 aircraft and its control system, discusses some of the advanced control law study objectives and guidelines, and provides some mathematical models which are useful in the control analysis problem.

Optimal Control

NASA's Advanced Control Law Program for the F-8 Digital Fly-By-Wire Aircraft

This paper briefly describes the NASA F-8 Digital Fly-By-Wire (DFBW) and Langley Research Center's role in investigating and promoting advanced control laws for possible flight experimentation. The primary purpose of the paper is to provide background material for the papers that follow which describe some of the F-8 DFBW adaptive control law studies. The paper provides a brief description of the Phase II DFBW F-8 aircraft and its control system, discusses some of the advanced control law study objectives and guidelines, and provides some mathematical models which are useful in the control analysis problem.

Aerospace Materials

Flammability Test Method for Materials Intended for Use as Fire Barriers in Crewed Habitats

In some crewed-spacecraft applications, onboard materials are intentionally selected to function as hazard control barriers to prevent powered hardware and/or ignited flammable items from igniting nearby flammable materials by acting as non-breaching, non-flammable containment (e.g., cargo transfer bags, zero gravity stowage racks, and jettison stowage bags on the International Space Station). Historically, flammability self-extinguishment testing of broad acreage or outermost layer materials alone was believed to be sufficient to verify overall flammability compliance. Though required, testing on design features such as threaded seams and zippers was not performed due to the incorrect assumption that flammability performance would not be impacted. However, recent coupon level testing of layups and configurations consisting of multiple materials have revealed that these features may be more susceptible to ignition and fire propagation than the bulk material. Additionally, configurational coupon ignition and propagation testing does not explicitly determine a material’s ability to provide protection to vulnerable flammable hardware. The need to evaluate this gap in assessing material or layup effectiveness as fire barriers between ignition sources and flammable materials led to the development of a new configuration-based fire barrier test. Test setup, relevant configurations, and test validation are discussed. The new barrier test method establishes a configuration for the test apparatus, identifies a conservative ignitor configuration, and defines pass/fail criteria. Test setup, relevant configurations, and test validation are discussed.

Susana Harper