Search Results

This paper presents a new methodology for the safety assessment of complex software intensive systems such as is envisioned for the coming major upgrade of the air traffic management system known as NextGen. This methodology is based on a new, more inclusive model of accident causation called Systems Theoretic Accident Model and Process (STAMP) [1]. STAMP includes not just the standard component failure mechanisms but also the new ways that software and humans contribute to accidents in complex systems. A new hazard analysis method, called Systems Theoretic Process Analysis (STPA), is built on this theoretical foundation. The STPA is based on systems theory rather than reliability theory; it treats safety as a control problem rather than a failure problem with interactive and possibly nested control loops that may include humans. In this methodology, safety is assured by closed loop control of safety parameters.

A set of devices for measurement of human balance orientation and eye movements in weightlessness was developed for neurovestibular experiments on Spacelab. The experiments involve astronaut motion, limb position changes, and moving visual fields, measurements are made of eye movements, muscular activity and orientation perception. This joint US/Canadian research program represent a group of closely related experiments designed to investigate space motion sickness, any associated changes in otolith-mediated responses occurring during weightlessness, and the continuation of changes to postflight conditions. The otoliths are a component of the vestibular apparatus which is located in the middle ear. It is responsible for maintaining the body's balance. Gravitational pull on the otoliths causes them to constantly appraise the nervous system of the position of the head with respect to the direction of gravity.

This paper reviews the relevant literature on the effects of sulfated ash, phosphorus, and sulfur on DPF, LNT, and SCR catalysts. Exhaust backpressure increase due to DPF ash accumulation, as well as the rate at which ash is consumed from the sump, were the most studied lubricant-derived DPF effects. Based on several studies, a doubling of backpressure can be estimated to occur within 270,000 to 490,000 km when using a 1.0% sulfated ash oil. Postmortem DPF analysis and exhaust gas measurements revealed that approximately 35% to 65% less ash was lost from the sump than was expected based on bulk oil consumption estimates. Despite significant effects from lubricant sulfur and phosphorus, loss of LNT NOX reduction efficiency is dominated by fuel sulfur effects. Phosphorus has been determined to have a mild poisoning effect on SCR catalysts. The extent of the effect that lubricant phosphorus and sulfur have on DOCs remains unclear, however, it appears to be minor.

The aim of this study was to explore if fingernail delamination injury following EMU glove use may be caused by compression-induced blood flow occlusion in the finger. During compression tests, finger blood flow decreased more than 60%, however this occurred more rapidly for finger pad compression (4 N) than for fingertips (10 N). A pressure bulb compression test resulted in 50% and 45% decreased blood flow at 100 mmHg and 200 mmHg, respectively. These results indicate that the finger pad pressure required to articulate stiff gloves is more likely to contribute to injury than the fingertip pressure associated with tight fitting gloves.

Thin sandwich sheets hold a promise for widespread use in automotive industry due to their good crash and formability properties. In this paper, thin stainless steel sandwich sheets with low-density core materials are investigated with regard to their performance in crashworthiness applications. The total thickness of the sandwich materials is about 1.2mm: 0.2mm thick facings and a 0.8mm thick sandwich core. Throughout the crushing of prismatic sandwich profiles, the sandwich facings are bent and stretched while the sandwich core is crushed under shear loading. Thus, a high shear crushing strength of the sandwich core material is beneficial for the overall energy absorption of the sandwich profile. It is shown theoretically that the weight specific shear crushing strength of hexagonal metallic honeycombs is higher than the one of fiber cores - irrespective of their relative density or microstructural geometry.

NASA has long recognized the advantages of providing improved information interfaces to EVA astronauts and has pursued this goal through a number of development programs over the past decade. None of these activities or parallel efforts in industry and academia has so far resulted in the development of an operational system to replace or augment the current extravehicular mobility unit (EMU) Display and Controls Module (DCM) display and cuff checklist. Recent advances in display, communications, and information processing technologies offer exciting new opportunities for EVA information interfaces that can better serve the needs of a variety of NASA missions. Hamilton Sundstrand Space Systems International (HSSSI) has been collaborating with Simon Fraser University and others on the NASA Haughton Mars Project and with researchers at the Massachusetts Institute of Technology (MIT), Boeing, and Symbol Technologies in investigating these possibilities.

This paper presents the results of a study of how people interacted with a production voice-command based interface while driving on public roadways. Tasks included phone contact calling, full address destination entry, and point-of-interest (POI) selection. Baseline driving and driving while engaging in multiple-levels of an auditory-vocal cognitive reference task and manual radio tuning were used as comparison points. Measures included self-reported workload, task performance, physiological arousal, glance behavior, and vehicle control for an analysis sample of 48 participants (gender balanced across ages 21-68). Task analysis and glance measures confirm earlier findings that voice-command interfaces do not always allow the driver to keep their hands on the wheel and eyes on the road, as some assume.

Advanced driver assistance systems (ADAS) are an increasingly common feature of modern vehicles. The influence of such systems on driver behavior, particularly in regards to the effects of intermittent warning systems, is sparsely studied to date. This paper examines dynamic changes in physiological and operational behavior during lane departure warnings (LDW) in two commercial automotive systems utilizing on-road data. Alerts from the systems, one using auditory and the other haptic LDWs, were monitored during highway driving conditions. LDW events were monitored during periods of single-task driving and dual-task driving. Dual-task periods consisted of the driver interacting with the vehicle’s factory infotainment system or a smartphone to perform secondary visual-manual (e.g., radio tuning, contact dialing, etc.) or auditory-vocal (e.g. destination address entry, contact dialing, etc.) tasks.

The combustion process after auto-ignition is investigated. Depending on the non-uniformity of the end gas, auto-ignition could initiate a flame, produce pressure waves that excite the engine structure (acoustic knock), or result in detonation (normal or developing). For the “acoustic knock” mode, a knock intensity (KI) is defined as the pressure oscillation amplitude. The KI values over different cycles under a fixed operating condition are observed to have a log-normal distribution. When the operating condition is changed (over different values of λ, EGR, and spark timing), the mean (μ) of log (KI/GIMEP) decreases linearly with the correlation-based ignition delay calculated using the knock-point end gas condition of the mean cycle. The standard deviation σ of log(KI/GIMEP) is approximately a constant, at 0.63. The values of μ and σ thus allow a statistical description of knock from the deterministic calculation of the ignition delay using the mean cycle properties

Currently, states that are out of compliance with the National Ambient Air Quality Standards must, according to the Clean Air Act Amendments of 1990 (CAAA), develop and implement control strategies that demonstrate specific degrees of reduction in emissions-with the degree of reduction depending upon the severity of the problem. One tool that has been developed to aid regulators in both deciding an appropriate course of action and to demonstrate the desired reductions in mobile emissions is EPA's Mobile 5a emission estimation model. In our study, Mobile 5a has been used to examine the effects of regulatory strategies, as applied to the Northeast United States, on vehicle emissions under worst-case ozone-forming conditions.

A technique has been developed to measure the desorption and subsequent oxidation of fuel in the oil layer by spiking the oil with liquid fuel and firing the engine on gaseous fuel or motoring with air. Experiments suggest that fuel desorption is not diffusion limited above 50 °C and indicated that approximately two to four percent of the cylinder oil layer is fresh oil from the sump. The increase in hydrocarbon emissions is of the order of 100 ppmC1 per 1% liquid fuel introduced into the fresh oil in a methane fired engine at mid-speed and light load conditions. Calculations indicate that fuel desorbing from oil is much more likely to produce hydrocarbon emissions than fuel emerging from crevices.

Human explorers of planetary surfaces would benefit greatly from a spacesuit design that facilitates locomotion. To aid in the development of such an extravehicular activity suit, a design effort incorporating the concept of mechanical counter pressure (MCP) was undertaken. Three-dimensional laser scanning of the human body was used to identify the main effects of knee flexion angle on the size and shape of the leg. This laser scanning quantified the changes in shape that must be supported by an MCP garment and the tension that must be developed to produce even MCP. Evaluation of a hybrid-MCP concept using inextensible materials demonstrated strong agreement between experimental data and a mathematical model with rigid cylinder geometry. Testing of a form-fitting garment on the right lower leg of a subject demonstrated successful pressure production. Further research is required to evaluate how evenly pressure can be distributed using the hybrid-MCP concept.

A human-centered systems analysis was applied to the adverse aircraft weather encounter problem in order to identify desirable functions of weather and icing information. The importance of contingency planning was identified as emerging from a system safety design methodology as well as from results of other aviation decision-making studies. The relationship between contingency planning support and information on regions clear of adverse weather was investigated in a scenario-based analysis. A rapid prototype example of the key elements in the depiction of icing conditions was developed in a case study, and the implications for the components of the icing information system were articulated.

Extravehicular activity (EVA) is investigated through experiments testing an actual extravehicular mobility unit (EMU) performing several EVA tasks in the laboratory, and a dynamic model of the EMU space suit is developed. Building directly on earlier work in EVA simulation, the space suit model was created from mass, inertia, and performance data to augment the unsuited 12-segment human model used in previous studies. A modified Preisach model was used to mathematically describe the hysteretic torque characteristics of joints in a pressurized space suit, and implemented numerically based on observed suit parameters. Computational simulations, based loosely on a 1995 EVA involving manipulation of the Spartan astrophysics payload, were performed to observe the effect of suit constraints on simulated astronaut performance.

This paper describes a post-race analysis of team KOMMIT EVT’s electric motorcycle data collected during the 2016 Pikes Peak International Hill Climb (PPIHC). The motorcycle consumed approximately 4 kWh of battery energy with an average and maximum speed of 107 km/h and 149 km/h, respectively. It was the second fastest electric motorcycle with a finishing time of 11:10.480. Data was logged of the motorcycle’s speed, acceleration, motor speed, power, currents, voltages, temperatures, throttle position, GPS position, rider’s heart rate and the ambient environment (air temperature, pressure and humidity). The data was used to understand the following factors that may have prevented a faster time: physical fitness of the rider, thermal limits of the motor and controller, available battery energy and the sprocket ratio between the motor and rear wheel.

MIT Lincoln Laboratory is tasked by the U.S. Federal Aviation Administration to investigate the use of the NEXRAD polarimetric radars* for the remote sensing of icing conditions hazardous to aircraft. A critical aspect of the investigation concerns validation that has relied upon commercial airline icing pilot reports and a dedicated campaign of in situ flights in winter storms. During the month of February in 2012 and 2013, the Convair-580 aircraft operated by the National Research Council of Canada was used for in situ validation of snowstorm characteristics under simultaneous observation by NEXRAD radars in Cleveland, Ohio and Buffalo, New York. The most anisotropic and easily distinguished winter targets to dual pol radar are ice crystals.

With the increasing complexity of automotive systems and the related increasing use of software in them, new approaches are needed to ensure safety. In these new types of automotive systems, safety and reliability are different and require different engineering approaches. Accidents are increasingly due to design errors and to dysfunctional interactions among components rather than component failure. In addition, safety must be engineered and built into the design from the beginning; it is not possible to effectively and affordably add safety devices onto a finished design. This paper describes the need for new approaches to automotive safety and describes an alternative to the traditional reliability-based approaches to safety engineering. The new approach is based on systems theory and views accidents in terms of lack of control or enforcement of the behavioral constraints required to ensure safety.

The introduction of new safety critical features using software-intensive systems presents a growing challenge to hazard analysis and requirements development. These systems are rich in feature content and can interact with other vehicle systems in complex ways, making the early development of proper requirements critical. Catching potential problems as early as possible is essential because the cost increases exponentially the longer problems remain undetected. However, in practice these problems are often subtle and can remain undetected until integration, testing, production, or even later, when the cost of fixing them is the highest. In this paper, a new technique is demonstrated to perform a hazard analysis in parallel with system and requirements development. The proposed model-based technique begins during early development when design uncertainty is highest and is refined iteratively as development progresses to drive the requirements and necessary design features.