Search Results

This paper presents a new methodology for the safety assessment of complex software intensive systems such as is envisioned for the coming major upgrade of the air traffic management system known as NextGen. This methodology is based on a new, more inclusive model of accident causation called Systems Theoretic Accident Model and Process (STAMP) [1]. STAMP includes not just the standard component failure mechanisms but also the new ways that software and humans contribute to accidents in complex systems. A new hazard analysis method, called Systems Theoretic Process Analysis (STPA), is built on this theoretical foundation. The STPA is based on systems theory rather than reliability theory; it treats safety as a control problem rather than a failure problem with interactive and possibly nested control loops that may include humans. In this methodology, safety is assured by closed loop control of safety parameters.

A relationship between the risk of significant thoracic injury (AIS ≥ 3) and Hybrid III dummy sternal deflection for shoulder belt loading is developed. This relationship is based on an analysis of the Association Peugeot-Renault accident data of 386 occupants who were restrained by three-point belt systems that used a shoulder belt with a force-limiting element. For 342 of these occupants, the magnitude of the shoulder belt force could be estimated with various degrees of certainty from the amount of force-limiting band ripping. Hyge sled tests were conducted with a Hybrid III dummy to reproduce the various degrees of band tearing. The resulting Hybrid III sternal deflections were correlated to the frequencies of AIS ≥ 3 thoracic injury observed for similar band tearing in the field accident data. This analysis indicates that for shoulder belt loading a Hybrid III sternal deflection of 50 mm corresponds to a 40 to 50% risk of an AIS ≥ 3 thoracic injury.

This paper reviews the relevant literature on the effects of sulfated ash, phosphorus, and sulfur on DPF, LNT, and SCR catalysts. Exhaust backpressure increase due to DPF ash accumulation, as well as the rate at which ash is consumed from the sump, were the most studied lubricant-derived DPF effects. Based on several studies, a doubling of backpressure can be estimated to occur within 270,000 to 490,000 km when using a 1.0% sulfated ash oil. Postmortem DPF analysis and exhaust gas measurements revealed that approximately 35% to 65% less ash was lost from the sump than was expected based on bulk oil consumption estimates. Despite significant effects from lubricant sulfur and phosphorus, loss of LNT NOX reduction efficiency is dominated by fuel sulfur effects. Phosphorus has been determined to have a mild poisoning effect on SCR catalysts. The extent of the effect that lubricant phosphorus and sulfur have on DOCs remains unclear, however, it appears to be minor.

Although rollover crashes represent a small fraction (approximately 3%) of all motor vehicle crashes, they account for roughly one quarter of crash fatalities to occupants of cars, light trucks, and vans (NHTSA Traffic Safety Facts, 2004). Therefore, the National Highway Traffic Safety Administration (NHTSA) has identified rollover injuries as one of its safety priorities. Motor vehicle manufacturers are developing technologies to reduce the risk of injury associated with rollover collisions. This paper describes the development by General Motors Corporation (GM) of a suite of laboratory tests that can be used to develop sensors that can deploy occupant protection devices like roof rail side air bags and pretensioners in a rollover as well as a discussion of the challenges of conducting this suite of tests.

A methodology involving Design for Six Sigma (DFSS) and Multi-body dynamic simulation is employed to tune a body-on-frame vehicle, for improved ride (shake) performance. The design space is limited to four sets of symmetric body mounts for a vehicle. The stiffness and damping characteristics of the mounts are the control factors in the virtual experiment. Variation of these design parameters from the nominal settings, as well as axle size, tire and wheel combinations, tire pressure, shock damping, and vehicle speed constitute the noise factors. This approach proves to be an excellent predictor of the vehicle behavior, by which much insight as to influence of each parameter on vehicle performance is gained. Ultimately, specific recommendations for the control factor settings are provided. Subsequent hardware builds show excellent agreement with the analytical model and suggested tuning.

A study was conducted by General Motors at its crash test facility located at the Milford Proving Ground. The intent of this study was to expand upon the currently available research regarding the safety belt buckle environment during full scale planar crash tests. Buckle accelerations and webbing tensions were measured and recorded to characterize, in part, buckle responses in a crash environment. Previous studies have focused primarily on the component level testing of safety belt buckles. The crash tests included a variety of vehicles, impact types, seating positions, Anthropomorphic Test Devices (ATDs), impact speeds, and impact angles. Also included were various safety belt restraint systems and pretensioner designs. This study reports on data recorded from 100 full scale crash tests with 180 instrumented end release safety belt buckles. Acceleration measurements were obtained with tri-axial accelerometers mounted onto the buckles.

In response to the TREAD act of 2002, ASTM F09.30 Aged Tire Durability Task Group was formed with the objective of developing a scientifically valid, short duration aged durability test which correlates to field behavior. The target end-of-test condition was belt edge separation (or related damage). One strategy, driven by that objective, has been a steady state design of experiment investigating aging temperature and duration as well as roadwheel speed, pressure and deflection. The rationale behind investigating a steady state test and selecting these parameters and methodology for setting their initial values is reviewed.

In response to the TREAD act of 2002, ASTM F09.30 Aged Tire Durability Task Group was formed with the objective of developing a scientifically valid, short duration, laboratory aged tire durability test which correlates to field behavior. The target end-of-test condition was belt edge separation (or related damage). Two strategies have been investigated, aged stepped-up load and steady state DOE. Results of the two strategies are compared and contrasted and a test condition from the steady state DOE has been identified as the preferred direction for further validation.

In the work leading to the TREAD Act, some members of Congress expressed the need for some type of aging test on light vehicle tires. Since no industry-wide recommended practice existed, the ASTM F09.30 Aged Tire Durability task group was established in 2002 to develop a scientifically valid, short duration, laboratory aged tire durability test which correlates to in-service aging. The target end-of-test condition was belt edge separation (or related tire conditions). One strategy, driven by that objective, has been a Steady State DOE investigating aging temperature and duration, as well as, roadwheel speed, pressure and deflection. Testing was performed on three tire types, including two where relevant field aging data was publicly available from NHTSA studies. A region of interest, within the design space, was identified where target end-of-test conditions were possible and undesirable (non-target or non-representative of those seen in consumer use) were avoided.

This paper describes the results of an ongoing project in the GM Motorsports Safety Technology Research Program to investigate Indianapolis-type (Indy car) race car crashes using an on-board impact recorder as the primary data collection tool. The paper discusses the development of specifications for the impact-recording device, the selection of the specific recorder and its implementation on a routine basis in Indy car racing. The results from incidents that produced significant data (crashes with peak decelerations above 20 G) during the racing seasons from 1993 through the first half of 1998 are summarized. The focus on Indy car crashes has proven to provide an almost laboratory-like setting due to the similarity of the cars and to the relative simplicity of the crashes (predominantly planar crashes involving single car impacts against well-defined impact surfaces).

The aim of this study was to explore if fingernail delamination injury following EMU glove use may be caused by compression-induced blood flow occlusion in the finger. During compression tests, finger blood flow decreased more than 60%, however this occurred more rapidly for finger pad compression (4 N) than for fingertips (10 N). A pressure bulb compression test resulted in 50% and 45% decreased blood flow at 100 mmHg and 200 mmHg, respectively. These results indicate that the finger pad pressure required to articulate stiff gloves is more likely to contribute to injury than the fingertip pressure associated with tight fitting gloves.

Thin sandwich sheets hold a promise for widespread use in automotive industry due to their good crash and formability properties. In this paper, thin stainless steel sandwich sheets with low-density core materials are investigated with regard to their performance in crashworthiness applications. The total thickness of the sandwich materials is about 1.2mm: 0.2mm thick facings and a 0.8mm thick sandwich core. Throughout the crushing of prismatic sandwich profiles, the sandwich facings are bent and stretched while the sandwich core is crushed under shear loading. Thus, a high shear crushing strength of the sandwich core material is beneficial for the overall energy absorption of the sandwich profile. It is shown theoretically that the weight specific shear crushing strength of hexagonal metallic honeycombs is higher than the one of fiber cores - irrespective of their relative density or microstructural geometry.

NASA has long recognized the advantages of providing improved information interfaces to EVA astronauts and has pursued this goal through a number of development programs over the past decade. None of these activities or parallel efforts in industry and academia has so far resulted in the development of an operational system to replace or augment the current extravehicular mobility unit (EMU) Display and Controls Module (DCM) display and cuff checklist. Recent advances in display, communications, and information processing technologies offer exciting new opportunities for EVA information interfaces that can better serve the needs of a variety of NASA missions. Hamilton Sundstrand Space Systems International (HSSSI) has been collaborating with Simon Fraser University and others on the NASA Haughton Mars Project and with researchers at the Massachusetts Institute of Technology (MIT), Boeing, and Symbol Technologies in investigating these possibilities.

Robust optimization usually requires numerous functional evaluations, which is not feasible when the functional evaluation is time-consuming. Examples in automobile industry include crash worthiness/safety and fatigue life simulations. In practice, a response surface model (RSM) is often used as a surrogate to the CAE model, so that robust optimization can be carried out. However, if the error in the RSM is significant, the solution based on the RSM can be invalid. This paper proposes a method of finding multiple candidate solutions, all of which have similar predicted performances. This approach is effective in finding the close-to-optimum solutions when the model has error, and providing design alternatives. Examples are provided to illustrate the method.

We investigate and analyze the concept of “shared redundancy” and its application to the design of architectures that integrate multiple safety/mission critical functions or subsystems. The analysis is based on considering different design alternatives with varying levels of physical redundancy of the components constituting the functions or subsystems. Under a set of assumptions, we show that the overall system reliability and availability in a shared redundancy based architecture can be improved without increasing the levels of physical redundancy for the components employed at the subsystem level. However, such an improvement will be limited by the component(s) with the minimal level of redundancy.

By design, frontal New Car Assessment Program (NCAP) tests focus on a narrow portion of the spectrum of field crash events. A simple, high level parsing of towaway crashes from NHTSA's National Automotive Sampling System - Crashworthiness Data System (NASS-CDS) files shows that only a small fraction of occupants (but a somewhat larger portion of their harm as measured by ISS) find themselves in crash circumstances remotely similar to NCAP crash conditions. Looking only at seat location, area of damage, direction of force, distribution of damage, and estimated delta-V filters significantly restricts the relevance of NCAP even before critical factors like belt use and vehicle crash partner are considered. Given the limited scope of frontal NCAP it should not be surprising that it has limited usefulness in discriminating among various vehicles' overall performance in the field.

Airbag systems have been part of passenger car and truck programs since the mid-1980's. However, systems designed for medium and heavy duty truck applications are relatively new. The release of airbag systems for medium duty truck has provided some unique challenges, especially for the airbag sensing systems. Because of the many commercial applications within the medium duty market, the diversity of the sensing environments must be considered when designing and calibrating the airbag sensing system. The 2003 Chevrolet Kodiak and GMC TopKick airbag sensing development included significant work, not only on the development of airbag deployment events but also non-deployment events – events which do not require the airbag to deploy. This paper describes the process used to develop the airbag sensing system deployment events and non-deployment event used in the airbag sensing system calibration.

General Motors Powertrain Division has developed a new V-8 engine for Cadillac vehicles in the 1990s. The Northstar engine incorporates the use of aluminum for both the cylinder block and head and other lightweight materials throughout. The valve train incorporates direct acting hydraulic lifters actuating the four valves per cylinder through dual overhead camshafts. The primary focus of the project has been to produce an engine of unquestioned reliability and exceptional value which is pleasing to the customer throughout the range of loads and speeds. The engine was designed with a light weight valve train, low valve overlap and moderate lift, resulting in a very pleasing combination of smooth idle and a broad range of power. The use of analytical methods early in the design stage enabled systems to be engineered to optimize reliability, pleaseability and value by reducing frictional losses, noise, and potential leak paths, while increasing efficiency and ease of manufacture.

The objective of this work was to develop an experimental system to support development and validation of a model for the lubrication of two-piece Twin-Land-Oil-Control-Rings (hereafter mentioned as TLOCR). To do so, a floating liner engine was modified by opening the head and crankcase. Additionally, only TLOCR was installed together with a piston that has 100 micron cold clearance to minimize the contribution of the skirt to total friction. Friction traces, FMEP trend, and repeatability have been examined to guarantee the reliability of the experiment results. Then, engine speed, liner temperature, ring tension, and land widths were changed in a wide range to ensure all three lubrication regimes were covered in the experiments.

Typically, “Reliability and Maintainability (R&M)” is perceived as a tool for products alone. Putting emphasis on reliability only at the cost of maintainability is another archetype. Inclusion of both reliability and maintainability (R&M) in all the phases of the machinery and equipment (M&E) life cycle is required in order to be world competitive in manufacturing. R&M is mainly a design function and it should be a part of any design review. Inclusion of the R&M concept early in the life cycle of M&E is key to cost effective and competitive manufacturing. Neither responsive manufacturing nor preventive maintenance can raise it above the level of inherent R&M.