Software intensive systems safety analysis

Two important elements in the avionics suite of modern aircraft are: the flight control system (FCS) and the flight management system (FMS). The FCS provides the capability to stabilize and control the aircraft, while the FMS is responsible for flight planning and navigation. A clear trend in the aerospace industry is to place greater reliance on software systems, and many FCS and FMS subsystems are implemented primarily in software. For example, within the FCS is the flight guidance system (FGS) that generates roll and pitch guidance commands. Similarly, within the FMS is the vertical navigation (VNAV) function that acts like a third crew member in the cockpit, ordering mode change requests and resetting target altitude values to enable the aircraft to track the vertical flight plan. We have developed formal, executable models of the requirements for the mode logic of a FGS and for portions of the VNAV functionality. We have also conducted a comprehensive software safety analysis on the FGS mode logic model, and are completing the analysis of the VNAV model. This analysis uses as its starting point several "traditional" safety analysis techniques such as a functional hazard assessment (FHA), a fault tree analysis (FTA), and a failure mode effects analysis (FMEA). However, we are also using formal methods techniques known as model checking and theorem proving to verify the presence of safety properties in the model. This paper summarizes the (now completed) safety analysis that was performed on the FGS model, and highlights the similarities and differences with the (still on-going) safety analysis of the FMS model. In particular, we summarize progress made to date in the use of formal methods to verify the presence of the required safety properties in the models themselves.     

The applicability of catalytic wet-oxidation to CELSS.

The wet-oxidation catalysis of Au, Pd, Pt, Rh or Ru on a ceramic honeycomb carrier was traced in detail by 16 to 20 repetitive batch tests each. As a result, Pt or Pd on a honeycomb carrier was shown to catalyze complete nitrogen gasification as N2. Though the catalysts which realize both complete nitrogen gasification and complete oxidation could not be found, the Ru+Rh catalyst was found to be most promising. Ru honeycomb catalyzed both nitrification and nitrogen gasification.     

Some psychophysiological and behavioral aspects of adaptation to simulated autonomous Mission to Mars

“Mars-105” experiment was executed in March–July 2009 in Moscow, at the Institute for Bio-Medical Problems (IBMP) with participation of European Space Agency (ESA) to simulate some specific conditions of future piloted Mars mission. In the last 35 days of isolation, in order to simulate autonomous flight conditions, some serious restrictions were established for the crew resupply and communication with Mission Control (MC). The objective of the study was to investigate psychophysiological and behavioral aspects (communication) of adaptation during this period of “high autonomy”. We used computerized analysis of the crew written daily reports to calculate the frequencies of utilization of certain semantic units, expressing different psychological functions. To estimate the level of psycho-physiological stress, we measured the concentration of urinal cortisol once in two weeks. To investigate psycho-emotional state, we used the questionnaire SAN, estimating Mood, Activity and Health once in two weeks.During the simulation of autonomous flight, we found out the different tendencies of communicative behavior. One group of subjects demonstrated the tendency to “activation and self-government” under “high autonomy” conditions. The other subjects continued to use communicative strategy that we called “closing the communication channel”. “Active” communication strategy was accompanied by increasing in subjective scores of mood and activity. The subjects, whose communication strategy was attributed as “closing”, demonstrated the considerably lower subjective scores of mood and activity. Period of high autonomy causes specific changes in communication strategies of the isolated crew.     

Electrodynamic stabilization of earth-orbiting satellites in equatorial orbits

A satellite with electrodynamic stabilization system is considered. Based on the method of Lyapunov functions, sufficient conditions of the asymptotic stability of direct equilibrium position of this satellite in the orbital coordinate system under perturbing action of a gravitational moment are obtained. These conditions allow one to ensure a rational choice of parametric control coefficients depending on parameters of the satellite and its orbit.     

Variations of ionospheric fluctuations of phase delay depending on solar activity: Data of the COSMIC experiment

We present the results of processing and analysis of more than 4500 events of radio occultation sounding of the Earth’s atmosphere observed in the course of the COSMIC experiment on the limb path ‘satellite-ionosphere-satellite’. Events observed in December 2011 (when a number of solar flares occurred) and in January 2012 (when a strong solar proton event took place) were analyzed. It is shown that small-scale variations of electron density increase in polar latitudes, equatorial region, and midlatitudes of the southern hemisphere in January 2012. In the same period, an increase of large-scale variations of electron density is observed during daylight hours in the equatorial region and in the southern hemisphere. No noticeable distinctions in comparison with days of quiet Sun were observed in December 2011.     

Earth–Moon libration point orbit stationkeeping: Theory,modeling, and operations

Collinear Earth–Moon libration points have emerged as locations with immediate applications. These libration point orbits are inherently unstable and must be maintained regularly which constrains operations and maneuver locations. Stationkeeping is challenging due to relatively short time scales for divergence, effects of large orbital eccentricity of the secondary body, and third-body perturbations. Using the Acceleration Reconnection and Turbulence and Electrodynamics of the Moon's Interaction with the Sun (ARTEMIS) mission orbit as a platform, the fundamental behavior of the trajectories is explored using Poincaré maps in the circular restricted three-body problem. Operational stationkeeping results obtained using the Optimal Continuation Strategy are presented and compared to orbit stability information generated from mode analysis based in dynamical systems theory.     

Repair of DNA double-strand breaks and cell killing by charged particles.

It has been suggested that it is not simple double-strand breaks (dsb) but the non-reparable breaks which correlate well with the high biological effectiveness of high LET radiations for cell killing (Kelland et al., 1988; Radford, 1986). We have compared the effects of charged particles on cell death in 3 pairs of cell lines which are normal or defective in the repair of DNA dsbs. For the cell lines SL3-147, M10, and SX10 which are deficient in DNA dsb repair, RBE values were close to unity for cell killing induced by charged particles with linear energy transfer (LET) up to 200 keV/micrometer and were even smaller than unity for the LET region greater than 300 keV/micrometer. The inactivation cross section (ICS) increased with LET for all 3 pairs. The ICS of dsb repair deficient mutants was always larger than that of their parents for all the LET ranges, but with increasing LET the difference in ICS between the mutant and its parent became smaller. Since a small difference in ICS remained at LET of about 300 keV/micrometer, dsb repair may still take place at this high LET, even if its role is apparently small. These results suggest that the DNA repair system does not play a major role in protection against the attack of high LET radiations and that a main muse of cell death is non-reparable dsb which are produced at a higher yield compared with low LET radiations. No correlation was observed between DNA content or nuclear area and ICS.     

Numerical prediction and wind tunnel experiment for a pitching unmanned combat air vehicle

The low-speed flowfield for a generic unmanned combat air vehicle (UCAV) is investigated both experimentally and numerically. A wind tunnel experiment was conducted with the Boeing 1301 UCAV at a variety of angles of attack up to 70 degrees, both statically and with various frequencies of pitch oscillation (0.5, 1.0, and 2.0 Hz). In addition, pitching was performed about three longitudinal locations on the configuration (the nose, 35% MAC, and the tail). Solutions to the unsteady, laminar, compressible Navier–Stokes equations were obtained on an unstructured mesh to match results from the static and dynamic experiments. The computational results are compared with experimental results for both static and pitching cases. Details about the flowfield, including vortex formation and interaction, are shown and discussed, including the non-linear aerodynamic characteristics of the vehicle.     

Empirical modeling of the total electron content in the ionosphere

A method of modeling the total electron content (TEC) based on the semi-empirical ionospheric model developed in Irkutsk State University is suggested. Comparison with the Klobuchar model has shown that the proposed method provides a more accurate presentation of TEC. A conclusion is drawn that the use of this method for compensation of the ionospheric error in single-frequency navigation receivers would lead to a substantial increase in the accuracy of their positioning.