Search NASA⌕ Search

SEARCH · Search NASA

Results for “safeguards by design”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 19 records

Safeguard: Progress and Test Results for a Reliable Independent On-Board Safety Net for UAS

As demands increase to use unmanned aircraft systems (UAS) for a broad spectrum of commercial applications, regulatory authorities are examining how to safely integrate them without compromising safety or disrupting traditional airspace operations. For small UAS, several operational rules have been established; e.g., do not operate beyond visual line-of-sight, do not fly within five miles of a commercial airport, do not fly above 400 feet above ground level. Enforcing these rules is challenging for UAS, as evidenced by the number of incident reports received by the Federal Aviation Administration (FAA). This paper reviews the development of an onboard system - Safeguard - designed to monitor and enforce conformance to a set of operational rules defined prior to flight (e.g., geospatial stay-out or stay-in regions, speed limits, and altitude constraints). Unlike typical geofencing or geo-limitation functions, Safeguard operates independently of the off-the-shelf UAS autopilot and is designed in a way that can be realized by a small set of verifiable functions to simplify compliance with existing standards for safety-critical systems (e.g. for spacecraft and manned commercial transportation aircraft systems). A framework is described that decouples the system from any other devices on the UAS as well as introduces complementary positioning source(s) for applications that require integrity and availability beyond what can be provided by the Global Positioning System (GPS). This paper summarizes the progress and test results for Safeguard research and development since presentation of the design concept at the 35th Digital Avionics Systems Conference (DASC '16). Significant accomplishments include completion of software verification and validation in accordance with NASA standards for spacecraft systems (to Class B), development of improved hardware prototypes, development of a simulation platform that allows for hardware-in-the-loop testing and fast-time Monte Carlo evaluations, and flight testing on multiple air vehicles. Integration testing with NASA's UAS Traffic Management (UTM) service-oriented architecture was also demonstrated.

Young, Steven D.↗

An Overview of Experiments and Modeling of Polysiloxane-Coated Thermal Protection Systems for Missions to Mars, Titan, and Beyond.

Phenolic Impregnated Carbon Ablator (PICA) gained heritage during the historic Stardust mission, where it successfully returned samples from a comet’s tail and has since been instrumental in delivering payloads to the surface of Mars [1-3]. Most recently, PICA enabled the safe return of samples collected from asteroid Bennu as part of the OSIRIS-REx mission. This rich legacy underscores PICA’s critical role in allowing NASA’s most ambitious exploration missions. However, the friable nature of its phenolic phase presents challenges during handling and pre-launch activities. To mitigate this issue, PICA is coated with a polysiloxane resin system, which serves to suppress particulate dispersion and thereby safeguard spacecraft components. A comprehensive understanding of the polysiloxane resin’s behavior is imperative, as it profoundly shapes the material response of PICA during atmospheric entry by influencing its thermal and oxidative stability. This influence extends to thermocouple plugs embedded within thermal protection systems. These plugs have demonstrated their significance in missions such as Mars Science Laboratory (MSL) and Mars 2020, where the MEDLI and MEDLI2 instrumentation suites delivered in-valuable insights into the performance of thermal protection systems during entry into the Martian atmosphere [4]. Looking ahead, missions such as Dragonfly, set to descend into Titan’s dense atmosphere, aim to leverage advanced sensor technologies to further refine our understanding of thermal protection response [5]. Moreover, thermocouple plugs play an essential role in validating cutting-edge material response models, such as those pioneered under NASA’s Entry Systems Modeling Project (ESM), designed, in-part, to predict the operational integrity of thermal protection systems under the extreme stresses of atmospheric entry. To achieve these modeling goals, ground-based experiments are crucial to provide the foundational data necessary for developing and refining these predictive tools. To this end, an extensive test campaign was conducted at the Hypersonic Materials Environmental Test System (HyMETS) to investigate the high-temperature behavior of the polysiloxane resin in an air environment [6]. These experiments revealed critical phenomena, including the formation of a silicon oxycarbide layer that enhances oxidation resistance, moderates surface temperatures, and alters in-depth thermal response. Building on these findings, subsequent tests were designed to simulate atmospheric entry conditions in reactive gases, such as CO2 and N2, to mimic the environments of Mars and Titan, respectively, as well as non-reactive gases representing the atmospheres of the Ice Giants (Neptune and Uranus). A heating rate dependent decomposition mechanism has been identified for the polysiloxane resin under oxidizing conditions (Fig. 1). In the initial stage, the resin and the underlying thermal protection system undergo pyrolysis, rapidly generating a thin amorphous silicon oxycarbide interwoven with carbonaceous char and residual fibers from PICA. During the second stage, the nascent oxide layer establishes a robust, oxidation-resistant thermal barrier coating, which significantly impedes heat transfer to the underlying carbonaceous char, resulting in a stagnation of the surface temperature. A key factor contributing to this thermal resistance is the low recombination efficiency of atomic oxygen (γ), which further diminishes the heat load on the material’s interior layers [7]. Moreover, as the surface temperature stagnates, the silicon oxycarbide phase separates into distinct regions of silica and free graphite. Ultimately, when the heat flux reaches a critical threshold, a third stage is triggered, leading to the breakdown of the coating through carbothermal reduction, exposing the underlying char layer. This exposure leads to a dramatic surface temperature spike, driven by highly exothermic reactions between atomic oxygen and the char layer, further accelerating material degradation. A detailed mass and heat transfer model of PICA coated with polysiloxane resin was implemented in the Porous material Analysis Toolbox based on OpenFOAM, PATO [8]. The initial stage was considered negligible in this model because the resin decomposition occurs rapidly within a thin surface layer. Instead, the coating was directly considered as an oxygen-resistant thermal barrier coating. For the second stage, the thin amorphous silicon oxycarbide was treated as a pure silica surface to simplify the thermochemical behavior. The model ac-counts for surface equilibrium processes using representative elements of the coating-environment system. For the third stage, specific boundary conditions were developed to estimate the onset and progression of the coating removal. Two-dimensional material response simulations were conducted to compare uncoated and coated PICA using boundary conditions calibrated with HyMETS data. Fig. 2 illustrates that the simulations closely align with experimental data, successfully reproducing measured temperature profiles. This work will include the latest advancements in the coating model, including the calibration of recombination of atomic oxygen at the surface during the second phase. These simulated results will be further validated against additional CO2 data points from HyMETS, reinforcing the models’ predictive capabilities. These mechanisms and their effects on thermal protection systems, including thermochemical behavior and thermocouple probe performance in extreme environments, provide crucial insights for optimizing spacecraft designs that safeguard scientific payload and ensure mission success in future planetary exploration endeavors.

Active Oxidation↗

A matrix safety frame approach to robot safety for space applications

The planned use of autonomous robots in space applications has generated many new safety problems. This thesis assesses safety of autonomous robot systems through the structure of a proposed three-dimensional matrix safety frame. By identifying the common points of accidents and fatalities involving terrestrial robots, reviewing terrestrial robot safety standards, and modifying and extending these results to space applications, hazards are identified and their associated risks assessed. Three components of the safeguarding dimension of the matrix safety frame, safeguarding through design and operation for intrinsic safety, and incorporation of add-on safety systems are explained through examples for both terrestrial and space robots. A space robot hazard identification checklist, a qualitative tool for robot systems designers, is developed using the structure imparted by the matrix safety frame. The development of an expert system from the contents of the checklist is discussed.

Montgomery, T. D.↗

System for Hydrogen Sensing

A low-power, wireless gas-sensing system is designed to safeguard the apparatus to which it is attached, as well as associated personnel. It also ensures the efficiency and operational integrity of the hydrogen-powered apparatus. This sensing system can be operated with lower power consumption (less than 30 nanowatts), but still has a fast response. The detecting signal can be wirelessly transmitted to remote locations, or can be posted on the Web. This system can also be operated by harvesting energy.

Lin, Jenshan↗

Strategies to Mitigate Ammonia Release on the International Space Station

International Space Station (ISS) is crucial to its continuous operation. Off-nominal situations can arise from virtually any aspect of ISS operations. One situation of particular concern is the inadvertent release of a chemical into the ISS atmosphere. In sufficient quantities, a chemical release can render the ISS uninhabitable regardless of the chemical s toxicity as a result of its effect on the hardware used to maintain the environment. This is certainly true with system chemicals which are integral components to the function and purpose of the system. Safeguards, such as design for minimum risk, multiple containment, hazard assessments, rigorous safety reviews, and others, are in place to minimize the probability of a chemical release to the ISS environment thereby allowing the benefits of system chemicals to outweigh the risks associated with them. The thermal control system is an example of such a system. Heat generated within the ISS is transferred from the internal thermal control system (ITCS) to the external thermal control system (ETCS) via two, single-barrier interface heat exchangers (IFHX). The ITCS and ETCS are closed-loop systems which utilize water and anhydrous ammonia, respectively, as heat-transfer fluids. There is approximately 1200 lbs. (208 gallons) of anhydrous ammonia in the ETCS circulating through the two heat exchangers, transferring heat from the ITCS water lines. At the amounts present in the ETCS, anhydrous ammonia is one system chemical that can easily overwhelm the station atmosphere scrubbing capabilities and render the ISS uninhabitable in the event of a catastrophic rupture. Although safeguards have certainly minimized the risk of an ammonia release into the Station atmosphere, credible release scenarios and controls to manage these scenarios are examined.

Macatangay, Ariel V.↗

Autonomous Formation Flying from Ground to Flight

The cost of on-orbit operations remains a significant and increasingly visible concern in the support of satellite missions. Headway has been made in automating some ground operations; however, increased mission complexity and more precise orbital constraints have compelled continuing human involvement in mission design and maneuver planning operations. AI Solutions, Inc. in cooperation with the National Aeronautics and Space Administration's (NASA) Goddard Space Flight Center (GSFC) has tackled these more complex problems through the development of AutoCon as a tool for an automated solution. NASA is using AutoCon to automate the maneuver planning for the Earth Orbiter-1 (EO-1) mission. AutoCon was developed originally as a ground system tool. The EO-1 mission will be using a scaled version of AutoCon on-board the EO-1 satellite to command orbit adjustment maneuvers. The flight version of AutoCon plans maneuvers based on formation flying algorithms developed by GSFC, JPL, and other industry partners. In its fully autonomous mode, an AutoCon planned maneuver will be executed on-board the satellite without intervention from the ground. This paper describes how AutoCon automates maneuver planning for the formation flying constraints of the EO-1 mission. AutoCon was modified in a number of ways to automate the maneuver planning on-board the satellite. This paper describes how the interface and functionality of AutoCon were modified to support the on-board system. A significant component of this modification was the implementation of a data smoother, based on a Kalman filter, that ensures that the spacecraft states estimated by an on-board GPS receiver are as accurate as possible for maneuver planning. This paper also presents the methodology use to scale the AutoCon functionality to fit and execute on the flight hardware. This paper also presents the modes built that allow the incremental phasing in of autonomy. New technologies for autonomous operations are usually received with significant, and probably appropriate trepidation. A number of safeguards have been designed in both AutoCon and the interfacing systems to alleviate the potential of mission-impacting anomalies from the on-board autonomous system. This paper describes the error checking, input data integrity validation and limits set on maneuvers in AutoCon and the on-board system.

Chapman, Keith B.↗

Autonomous Formation Flying from the Ground to Flight

The cost of on-orbit operations remains a significant and increasingly visible concern in the support of satellite missions. Headway has been made in automating some ground operations; however, increased mission complexity and more precise orbital constraints have compelled continuing human involvement in mission design and maneuver planning operations. AI Solutions, Inc. in cooperation with the National Aeronautics and Space Administration's (NASA) Goddard Space Flight Center (GSFC) has tackled these more complex problems through the development of AutoCon(TM) as a tool for an automated solution. NASA is using AutoCon(TM) to automate the maneuver planning for the Earth Orbiter-1 (EO-1) mission. AutoCon(TM) was developed originally as a ground system tool. The EO-1 mission will be using a scaled version of AutoCon(TM) on-board the EO-1 satellite to command orbit adjustment maneuvers. The flight version of AutoCon(TM) plans maneuvers based on formation flying algorithms developed by GSFC, JPL, and other industry partners. In its fully autonomous mode, an AutoCon(TM) planned maneuver will be executed on-board the satellite without intervention from the ground. This paper describes how AutoCon(TM) automates maneuver planning for the formation flying constraints of the EO-1 mission. AutoCon(TM) was modified in a number of ways to automate the maneuver planning on-board the satellite. This paper describes how the interface and functionality of AutoCon(TM) were modified to support the on-board system. A significant component of this modification was the implementation of a data smoother, based on a Kalman filter, that ensures that the spacecraft states estimated by an on-board GPS receiver are as accurate as possible for maneuver planning. This paper also presents the methodology used to scale the AutoCon(TM) functionality to fit and execute on the flight hardware. This paper also presents the modes built into the system that allow the incremental phasing in of autonomy. New technologies for autonomous operations are usually received with significant, and probably appropriate, trepidation. A number of safeguards have been designed in both AutoCon(TM) and the interfacing systems to alleviate the potential of mission-impacting anomalies from the on-board autonomous system. This paper describes the error checking, input data integrity validation, and limits set on maneuvers in AutoCon(TM) and the on-board system.

Chapman, Keith B.↗

System security in the space flight operations center

The Space Flight Operations Center is a networked system of workstation-class computers that will provide ground support for NASA's next generation of deep-space missions. The author recounts the development of the SFOC system security policy and discusses the various management and technology issues involved. Particular attention is given to risk assessment, security plan development, security implications of design requirements, automatic safeguards, and procedural safeguards.

Wagner, David A.↗

Differential Processing of Low and High LET Radiation Induced DNA Damage: Investigation of Switch from ATM to ATR Signaling

The members of the phosphatidylinositol kinase-like kinase family of proteins namely ataxia-telangiectasia mutated (ATM) and ATM- and Rad3-related (ATR) are directly responsible for the maintenance of genomic integrity by mounting DDR through signaling and facilitating the recruitment of repair factors at the sites of DNA damage along with coordinating the deployment of cell cycle checkpoints to permit repair by phosphorylating Checkpoint kinase Chk1, Chk2 and p53. High LET radiation from GCR (Galactic Cosmic Rays) consisting mainly of protons and high energy and charged (HZE) particles from SPE (Solar Particle Event) pose a major health risk for astronauts on their space flight missions. The determination of these risks and the design of potential safeguards require sound knowledge of the biological consequences of lesion induction and the capability of the cells to counter them. We here strive to determine the coordination of ATM and ATR kinases at the break sites directly affecting checkpoint signaling and DNA repair and whether differential processing of breaks induced by low and high LET radiation leads to possible augmentation of swap of these damage sensors at the sites of DNA damage. Exposure of cells to IR triggers rapid autophosphorylation of serine-1981 that causes dimer dissociation and initiates monomer formation of ATM. ATM kinase activity depends on the disruption of the dimer, which allows access and phosphorylation of downstream ATM substrates like Chk2. Evidence suggests that ATM is activated by the alterations in higher-order chromatin structure although direct binding of ATM to DSB ends may be a crucial step in its activation. On the other hand, in case of ATR, RPA (replication protein A)-coated ssDNA (single-stranded DNA) generated as a result of stalled DNA replication or during processing of chromosomal lesions is crucial for the localization of ATR to sites of DNA damage in association with ATR-interacting protein (ATRIP). Although the majority of RPA-coated ssDNA is generally present only during DNA replication, ATR activation in G1 and G2-phase might still require formation of RPA-coated ssDNA, probably initiated by the MRN-CtIP complex and then extended by the Exo1- or BLM-dependent mechanisms at the sites of DSBs. Evidence accumulates that activation of ATM and ATR are oppositely regulated by the length of single stranded overhangs generated at the break sites by processes mentioned above and these stretches of single stranded overhangs hold the clue for ATM to ATR switch at broken DNA ends. We irradiated 82-6hTERT human fibroblast cells with low LET gamma-rays and high LET Fe and Si particles. Preliminary results with cells exposed to 1Gy gamma-rays show that the kinetics of pChk2-pT68 foci formation is comparable to that of gamma-H2AX although they appear to recede quicker. The number and intensity of observed foci reaches a maximum at 30 min and 60 min post IR for Chk2-pT68 and gamma-H2AX foci respectively and all Chk2-pT68 foci colocalize with gamma-H2AX foci. The kinetics of Chk1-pS345 and ATRIP are being determined. Results of Chk2-pT68 foci kinetics was also corroborated by western blot experiments, although phosphorylation was detected as early as 10 min and started receding 30 min post IR with 2Gy of gamma-rays. On the other hand, level of ATR-pS428 reached its maximum between 60 and 120 min and was maintained until the last measured time point of 4 hours post IR as determined by western blotting. Experiments performed with high LET Fe and Si particles will be reported.

Saha, Janapriya↗

Effects of weightlessness in man.

The program for the Apollo 16 flight was designed to include both safeguards against and investigations of the physiological problems arising from increase in the period of manned space flight. Precautions included the provision of a controlled diet with high potassium content, carefully controlled work loads and work-rest cycles, and an emergency cardiology consultation service, and investigations were made to enable preflight vs postflight comparisons of metabolic, cardiovascular, and central nervous system data. Results of these investigations indicate that adjustment to weightlessness can be satisfactorily assisted by appropriate countermeasures, including attention to diet.

Berry, C. A.↗

Validating the autonomous EO-1 science agent

This paper describes the validation process for the Autonomous Science Agent, a software agent that is currently flying onboard NASA EO-1 spacecraft. The agent autonomously collects, analyzes, and reacts to onboard science data. The Autonomous Science Agent has been designed using a layered architectural approach with specific redundant safeguards to reduce the risk of an agent malfunction to the EO-1 spacecraft. This safe design has been thoroughly validated by informal validation methods supplemented by sub-system and system-level testing. This paper describes the analysis used to define agent safety, elements of the design that increase the safety of the agent, and the process used to validate agent safety.

software↗

Validating the Autonomous Science Agent

This paper describes the validation process for the Autonomous Science Agent, a software agent that will fly onboard the EO-1 spacecraft from 2003-2004. This agent will recognize science events, retarget the spacecraft to respond to the science events, and reduce data downlink to only the highest value science data. The autonomous science agent has been designed using a layered architectural approach with specific redundant safeguards to reduce the risk of an agent malfunction to the EO-1 spacecraft. This 'safe' design is also in the process of being thoroughly validated by informal validation methods and extensive testing. This paper describes the analysis used to define agent safety, elements of the design that increase the safety of the agent, and the process being used to validate agent safety prior to the agent software controlling the spacecraft.

agent safety↗

Safe Agents in Space: Preventing and Responding to Anomalies in the Autonomous Sciencecraft Experiment

This paper describes the design of the Autonomous Sciencecraft Experiment, a software agent that has been running on-board the EO-I spacecraft since 2003. The agent recognizes science events, retargets the spacecraft to respond to the science events, and reduces data downlink to only the highest value science data. The autonomous science agent was designed using a layered architectural approach with specific redundant safeguards to reduce the risk of an agent malfUnction to the EO-I spacecraft. The agent was designed to be "safe" by first preventing anomalies, then by automatically detecting and responding to them when possible. This paper describes elements of the design that increase the safety of the agent, the anomalies that occurred during the experiment, and how the agent responded to these anomalies.

autonomous science agent↗

An Approach for Defining IASMS Services, Functions, and Capabilities

Assuring safety in the NAS with the inclusion of new entrants, such as Advanced Air Mobility (AAM), will require overcoming unique safety challenges that result from combining innovative technologies with novel airspace concepts for moving people and cargo using autonomous vehicles. The focus of the In-time Aviation Safety Management System (IASMS) is to overcome AAM’s safety assurance challenges. The IASMS Concept of Operations (ConOps) describes an interconnected set of services, functions, and capabilities (SFCs) designed to manage operational risks, identify unknown risks, and inform system designs. This paper describes an approach for defining SFCs based on technology trends in research, assessment of known and unknown risks in voluntary safety reports, and causal and contributing factors in aviation accidents and incidents. This approach would identify potential SFCs that further expand the Monitor, Assess, and Mitigate (M-A-M) functionality that represents the enabling framework of the IASMS. Safety implications that will result from integration of AAM in the transformation of the National Airspace System (NAS) were addressed in National Academies committees reports on AAM and IASMS. Development of a ConOps for IASMS was a top recommendation and can be represented as a reframing of safety assurance that builds on real-time alerting such as the Traffic Alert and Collision Avoidance System, and adds the more encompassing in-time temporal parameter in recognition of the different timelines for collecting and assessing safety data for risk mitigations. For example, mining for safety trends from data sources such as the Aviation Safety Information Analysis and Sharing system occurs over a longer time period. Research on AAM operations poses that SFCs can be designed to monitor the safety margin appropriate for AAM including with regards to the distance between current flight parameters and nominal ideal conditions. These in-time comparisons will become more complex as the density of operations increases at least in certain areas and can include planned and actual 4D trajectory, and in-time comparisons having implications on conflict modeling and prediction including expected and actual departure time, fix/waypoint crossing times, and arrival time. These comparisons would be integrated as part of SFCs that redefine and inform new safety margin. An increased safety margin improves management of operational risks while reducing the potential for anomalies. An increased safety margin also has implications for operator confidence in the certainty of its operations and trust in automation. Technology trends in research could be used to refine existing SFCs and define needs for additional SFCs that provide safety improvements to the design and operation of vehicles, airspace design, and operator performance requirements. NASA is developing innovative approaches to safeguard against major accidents and incidents that have occurred in the NAS and those anticipated with the inclusion of envisioned AAM operations. The innovations use operational performance data to monitor, detect, and predict flight variations exceeding safe nominal patterns, such as would be caused by navigational error, severe weather complications, or hijacking of UAS controls. These innovative approaches have high potential to prevent accidents and incidents in the new AAM era. It is anticipated that elements of the innovations will evolve into SFCs for the IASMS. Voluntary safety reports can be monitored to identify anomalies related to design or operational performance risks. Reports could be periodically monitored and assessed for specific topics. Reports might serve as weak signals or precursors indicative of emergent risk such as when combined with other safety information. The architecture could include SFCs that are based on voluntary safety reports recognizing the periodic temporal nature of data analysis. As previously mentioned, aviation accidents with their causal and contributing precursors can inform the need for SFCs in the IASMS. Accidents and incidents at San Francisco International Airport such as Asiana 214 and Air Canada 759 illustrate how combinations of different factors lead to increased risk. These types of precursors and different factors have implications on the types of SFCs that could be needed to monitor and manage different sources and types of design and operational risk. Continuing to assure the safety of AAM as designs and operations gain in complexity can be accompanied by defining SFCs that also increase in complexity. These SFCs can leverage information from findings and recommendations synthesized across on-going research, voluntary safety reports, and accident and incident reports. These SFCs can serve to refine accuracy of algorithms and resolve limitations with current practices. The IASMS architecture represents the framework for the SFCs and their critical role in safety assurance.

In-Time Aviation Safety Management System↗

An object-oriented, technology-adaptive information model

The primary objective was to develop a computer information system for effectively presenting NASA's technologies to American industries, for appropriate commercialization. To this end a comprehensive information management model, applicable to a wide variety of situations, and immune to computer software/hardware technological gyrations, was developed. The model consists of four main elements: a DATA_STORE, a data PRODUCER/UPDATER_CLIENT and a data PRESENTATION_CLIENT, anchored to a central object-oriented SERVER engine. This server engine facilitates exchanges among the other model elements and safeguards the integrity of the DATA_STORE element. It is designed to support new technologies, as they become available, such as Object Linking and Embedding (OLE), on-demand audio-video data streaming with compression (such as is required for video conferencing), Worldwide Web (WWW) and other information services and browsing, fax-back data requests, presentation of information on CD-ROM, and regular in-house database management, regardless of the data model in place. The four components of this information model interact through a system of intelligent message agents which are customized to specific information exchange needs. This model is at the leading edge of modern information management models. It is independent of technological changes and can be implemented in a variety of ways to meet the specific needs of any communications situation. This summer a partial implementation of the model has been achieved. The structure of the DATA_STORE has been fully specified and successfully tested using Microsoft's FoxPro 2.6 database management system. Data PRODUCER/UPDATER and PRESENTATION architectures have been developed and also successfully implemented in FoxPro; and work has started on a full implementation of the SERVER engine. The model has also been successfully applied to a CD-ROM presentation of NASA's technologies in support of Langley Research Center's TAG efforts.

Anyiwo, Joshua C.↗

SAFEGUARD: An Assured Safety Net Technology for UAS

As demands increase to use unmanned aircraft systems (UAS) for a broad spectrum of commercial applications, regulatory authorities are examining how to safely integrate them without loss of safety or major disruption to existing airspace operations. This work addresses the development of the Safeguard system as an assured safety net technology for UAS. The Safeguard system monitors and enforces conformance to a set of rules defined prior to flight (e.g., geospatial stay-out or stay-in regions, speed limits, altitude limits). Safeguard operates independently of the UAS autopilot and is strategically designed in a way that can be realized by a small set of verifiable functions to simplify compliance with regulatory standards for commercial aircraft. A framework is described that decouples the system from any other devices on the UAS as well as introduces complementary positioning source(s) for applications that require integrity and availability beyond what the Global Positioning System (GPS) can provide. Additionally, the high level logic embedded within the software is presented, as well as the steps being taken toward verification and validation (V&V) of proper functionality. Next, an initial prototype implementation of the described system is disclosed. Lastly, future work including development, testing, and system V&V is summarized.

Dill, Evan T.↗

NASA Reactor Facility Hazards Summary

The Lewis Research Center of the National Aeronautics and Space Administration proposes to build a nuclear research reactor which will be located in the Plum Brook Ordnance Works near Sandusky, Ohio. The purpose of this report is to inform the Advisory Committee on Reactor Safeguards of the U. S. Atomic Energy Commission in regard to the design Lq of the reactor facility, the characteristics of the site, and the hazards of operation at this location. The purpose of this research reactor is to make pumped loop studies of aircraft reactor fuel elements and other reactor components, radiation effects studies on aircraft reactor materials and equipment, shielding studies, and nuclear and solid state physics experiments. The reactor is light water cooled and moderated of the MTR-type with a primary beryllium reflector and a secondary water reflector. The core initially will be a 3 by 9 array of MTR-type fuel elements and is designed for operation up to a power of 60 megawatts. The reactor facility is described in general terms. This is followed by a discussion of the nuclear characteristics and performance of the reactor. Then details of the reactor control system are discussed. A summary of the site characteristics is then presented followed by a discussion of the larger type of experiments which may eventually be operated in this facility. The considerations for normal operation are concluded with a proposed method of handling fuel elements and radioactive wastes. The potential hazards involved with failures or malfunctions of this facility are considered in some detail. These are examined first from the standpoint of preventing them or minimizing their effects and second from the standpoint of what effect they might have on the reactor facility staff and the surrounding population. The most essential feature of the design for location at the proposed site is containment of the maximum credible accident.

Source record↗