Search Results

This paper presents a new methodology for the safety assessment of complex software intensive systems such as is envisioned for the coming major upgrade of the air traffic management system known as NextGen. This methodology is based on a new, more inclusive model of accident causation called Systems Theoretic Accident Model and Process (STAMP) [1]. STAMP includes not just the standard component failure mechanisms but also the new ways that software and humans contribute to accidents in complex systems. A new hazard analysis method, called Systems Theoretic Process Analysis (STPA), is built on this theoretical foundation. The STPA is based on systems theory rather than reliability theory; it treats safety as a control problem rather than a failure problem with interactive and possibly nested control loops that may include humans. In this methodology, safety is assured by closed loop control of safety parameters.

This paper reviews the relevant literature on the effects of sulfated ash, phosphorus, and sulfur on DPF, LNT, and SCR catalysts. Exhaust backpressure increase due to DPF ash accumulation, as well as the rate at which ash is consumed from the sump, were the most studied lubricant-derived DPF effects. Based on several studies, a doubling of backpressure can be estimated to occur within 270,000 to 490,000 km when using a 1.0% sulfated ash oil. Postmortem DPF analysis and exhaust gas measurements revealed that approximately 35% to 65% less ash was lost from the sump than was expected based on bulk oil consumption estimates. Despite significant effects from lubricant sulfur and phosphorus, loss of LNT NOX reduction efficiency is dominated by fuel sulfur effects. Phosphorus has been determined to have a mild poisoning effect on SCR catalysts. The extent of the effect that lubricant phosphorus and sulfur have on DOCs remains unclear, however, it appears to be minor.

The life of an automotive engine is often limited by the ability of its components to resist wear. Zinc dialkyldithiophosphate (ZDDP) is an engine oil additive that reduces wear in an engine by forming solid antiwear films at points of moving contact. The effects of this additive are fairly well understood, but there is little theory behind the kinetics of antiwear film formation and removal. This lack of dynamic modeling makes it difficult to predict the effects of wear at the design stage for an engine component or a lubricant formulation. The purpose of this discussion is to develop a framework for modeling the formation and evolution of ZDDP antiwear films based on the relevant chemical pathways and physical mechanisms at work.

The aim of this study was to explore if fingernail delamination injury following EMU glove use may be caused by compression-induced blood flow occlusion in the finger. During compression tests, finger blood flow decreased more than 60%, however this occurred more rapidly for finger pad compression (4 N) than for fingertips (10 N). A pressure bulb compression test resulted in 50% and 45% decreased blood flow at 100 mmHg and 200 mmHg, respectively. These results indicate that the finger pad pressure required to articulate stiff gloves is more likely to contribute to injury than the fingertip pressure associated with tight fitting gloves.

Thin sandwich sheets hold a promise for widespread use in automotive industry due to their good crash and formability properties. In this paper, thin stainless steel sandwich sheets with low-density core materials are investigated with regard to their performance in crashworthiness applications. The total thickness of the sandwich materials is about 1.2mm: 0.2mm thick facings and a 0.8mm thick sandwich core. Throughout the crushing of prismatic sandwich profiles, the sandwich facings are bent and stretched while the sandwich core is crushed under shear loading. Thus, a high shear crushing strength of the sandwich core material is beneficial for the overall energy absorption of the sandwich profile. It is shown theoretically that the weight specific shear crushing strength of hexagonal metallic honeycombs is higher than the one of fiber cores - irrespective of their relative density or microstructural geometry.

NASA has long recognized the advantages of providing improved information interfaces to EVA astronauts and has pursued this goal through a number of development programs over the past decade. None of these activities or parallel efforts in industry and academia has so far resulted in the development of an operational system to replace or augment the current extravehicular mobility unit (EMU) Display and Controls Module (DCM) display and cuff checklist. Recent advances in display, communications, and information processing technologies offer exciting new opportunities for EVA information interfaces that can better serve the needs of a variety of NASA missions. Hamilton Sundstrand Space Systems International (HSSSI) has been collaborating with Simon Fraser University and others on the NASA Haughton Mars Project and with researchers at the Massachusetts Institute of Technology (MIT), Boeing, and Symbol Technologies in investigating these possibilities.

Two critical milestones that must be achieved during concept design are 1) definition of a product architecture that meets performance, producibility, and strategic objectives, and 2) estimation of the integration risk in each candidate concept. This paper addresses these issues by describing the role played by the producibility members of an Integrated Product Team (IPT) during concept design. Our focus is on the execution of the what we call the “chain method”, which illustrates the structure of function delivery in a concept in a simple pictorial way and helps the IPT to understand the advantages or disadvantages of using a modular or an integral product architecture. The producibility members play a central role in capturing and evaluating the chains for different candidate concepts and decompositions.

In this paper we investigate the optimal forming of conical cups of AL 2008-T4 through the use of real-time process control. We consider a flat, frictional binder the force of which can be determined precisely through closed-loop control. Initially the force is held constant throughout the forming of the cup, and various levels of force are tested experimentally and with numerical simulation. Excellent agreement between experiment and simulation is observed. The effects of binder force on cup shape, thickness distribution, failure mode and cup failure height are investigated, and an “optimal” constant binder force is determined. For this optimal case, the corresponding punch force is recorded as a function of punch displacement and is used in subsequent closed-loop control experiments. In addition to the constant force test, a trial variable binder force test was performed to extend the failure height beyond that obtained using the “optimal” constant force level.

Currently, states that are out of compliance with the National Ambient Air Quality Standards must, according to the Clean Air Act Amendments of 1990 (CAAA), develop and implement control strategies that demonstrate specific degrees of reduction in emissions-with the degree of reduction depending upon the severity of the problem. One tool that has been developed to aid regulators in both deciding an appropriate course of action and to demonstrate the desired reductions in mobile emissions is EPA's Mobile 5a emission estimation model. In our study, Mobile 5a has been used to examine the effects of regulatory strategies, as applied to the Northeast United States, on vehicle emissions under worst-case ozone-forming conditions.

A technique has been developed to measure the desorption and subsequent oxidation of fuel in the oil layer by spiking the oil with liquid fuel and firing the engine on gaseous fuel or motoring with air. Experiments suggest that fuel desorption is not diffusion limited above 50 °C and indicated that approximately two to four percent of the cylinder oil layer is fresh oil from the sump. The increase in hydrocarbon emissions is of the order of 100 ppmC1 per 1% liquid fuel introduced into the fresh oil in a methane fired engine at mid-speed and light load conditions. Calculations indicate that fuel desorbing from oil is much more likely to produce hydrocarbon emissions than fuel emerging from crevices.

Enhanced information management techniques made available through emerging Information Technology platforms hold a promise of providing significant improvements in both the effectiveness and efficiency of developing complex products. Determining actual management implementations that deliver on this promise has often proven elusive. Work in conjunction with the Lean Aircraft Initiative at MIT has revealed a straight forward use of Information Technology that portends significant cost reductions. By integrating previously separate types of data involved in the process of product development, engineers and designers can make decisions that will significantly reduce ultimate costs. Since the results presented are not specific to particular technologies or manufacturing processes, the conclusions are broadly applicable.

A sampling system was developed to measure the evolution of the speciated hydrocarbon emissions from a single-cylinder SI engine in a simulated starting and warm-up procedure. A sequence of exhaust samples was drawn and stored for gas chromatograph analysis. The individual sampling aperture was set at 0.13 s which corresponds to ∼ 1 cycle at 900 rpm. The positions of the apertures (in time) were controlled by a computer and were spaced appropriately to capture the warm-up process. The time resolution was of the order of 1 to 2 cycles (at 900 rpm). Results for four different fuels are reported: n-pentane/iso-octane mixture at volume ratio of 20/80 to study the effect of a light fuel component in the mixture; n-decane/iso-octane mixture at 10/90 to study the effect of a heavy fuel component in the mixture; m-xylene and iso-octane at 25/75 to study the effect of an aromatics in the mixture; and a calibration gasoline.

The Urban Vehicle Design Competition was inspired by the success of the Clean Air Car Race and the Great Electric Car Race. The academic community recognized the tremendous educational value of these events, and encouraged development of UVDC from its inception. The project was designed by engineering students to benefit students throughout North America. The rules of the competition include technical paper requirements that make the competition extremely attractive to professors who wish to build a course around this theme. The response of more than 2000 engineering students at 80 universities throughout the United States and Canada has indicated the success of the structure of the competition. The first major objective of the UVDC project has been met. Ninety-three teams throughout the country entered the UVDC design portion of the contest. The second portion of the project is the prototype contest of August 1972.

Measurements were made of exhaust histories of the following species: unburned hydrocarbons (HC), carbon monoxide, carbon dioxide, oxygen, and nitric oxide (NO). The measurements show that the exhaust flow can be divided into two distinct phases: a leading gas low in HC and high in NO followed by a trailing gas high in HC and low in NO. Calculations of time resolved equivalence ratio throughout the exhaust process show no evidence of a stratified combustion. The exhaust mass flow rate is time resolved by forcing the flow to be locally quasi-steady at an orifice placed in the exhaust pipe. The results with the quasi-steady assumption are shown to be consistent with the measurements. Predictions are made of time resolved mass flow rate which compare favorably to the experimental data base. The composition and flow histories provide sufficient information to calculate the time resolved flow rates of the individual species measured.

This paper summarizes the results of both the preliminary studies and the initial cycle tests of a unique type of IC engine capable of operating in the absence of an atmosphere. This engine has been designed specifically for use in the general space program, and it is intended to satisfy requirements of high power to weight ratio, reliability, compactness, and short development time. The history of the en-engine's development is discussed together with problems encountered in the study. However, primary emphasis is on the recently conducted cycle tests.

A human-centered systems analysis was applied to the adverse aircraft weather encounter problem in order to identify desirable functions of weather and icing information. The importance of contingency planning was identified as emerging from a system safety design methodology as well as from results of other aviation decision-making studies. The relationship between contingency planning support and information on regions clear of adverse weather was investigated in a scenario-based analysis. A rapid prototype example of the key elements in the depiction of icing conditions was developed in a case study, and the implications for the components of the icing information system were articulated.

A design framework based on the principles of lean manufacturing and axiomatic design was used as a guideline for designing an automotive component manufacturing system. A brief overview of this design decomposition is given to review its structure and usefulness. Examples are examined to demonstrate how this design framework was applied to the design of a gear manufacturing system. These examples demonstrate the impact that low-level design decisions can have on high-level system objectives and the need for a systems-thinking approach in manufacturing system design. Results are presented to show the estimated performance improvements resulting from the new system design.

MIT Lincoln Laboratory is tasked by the U.S. Federal Aviation Administration to investigate the use of the NEXRAD polarimetric radars* for the remote sensing of icing conditions hazardous to aircraft. A critical aspect of the investigation concerns validation that has relied upon commercial airline icing pilot reports and a dedicated campaign of in situ flights in winter storms. During the month of February in 2012 and 2013, the Convair-580 aircraft operated by the National Research Council of Canada was used for in situ validation of snowstorm characteristics under simultaneous observation by NEXRAD radars in Cleveland, Ohio and Buffalo, New York. The most anisotropic and easily distinguished winter targets to dual pol radar are ice crystals.

With the increasing complexity of automotive systems and the related increasing use of software in them, new approaches are needed to ensure safety. In these new types of automotive systems, safety and reliability are different and require different engineering approaches. Accidents are increasingly due to design errors and to dysfunctional interactions among components rather than component failure. In addition, safety must be engineered and built into the design from the beginning; it is not possible to effectively and affordably add safety devices onto a finished design. This paper describes the need for new approaches to automotive safety and describes an alternative to the traditional reliability-based approaches to safety engineering. The new approach is based on systems theory and views accidents in terms of lack of control or enforcement of the behavioral constraints required to ensure safety.

The introduction of new safety critical features using software-intensive systems presents a growing challenge to hazard analysis and requirements development. These systems are rich in feature content and can interact with other vehicle systems in complex ways, making the early development of proper requirements critical. Catching potential problems as early as possible is essential because the cost increases exponentially the longer problems remain undetected. However, in practice these problems are often subtle and can remain undetected until integration, testing, production, or even later, when the cost of fixing them is the highest. In this paper, a new technique is demonstrated to perform a hazard analysis in parallel with system and requirements development. The proposed model-based technique begins during early development when design uncertainty is highest and is refined iteratively as development progresses to drive the requirements and necessary design features.