Software intensive systems safety analysis

Two important elements in the avionics suite of modern aircraft are: the flight control system (FCS) and the flight management system (FMS). The FCS provides the capability to stabilize and control the aircraft, while the FMS is responsible for flight planning and navigation. A clear trend in the aerospace industry is to place greater reliance on software systems, and many FCS and FMS subsystems are implemented primarily in software. For example, within the FCS is the flight guidance system (FGS) that generates roll and pitch guidance commands. Similarly, within the FMS is the vertical navigation (VNAV) function that acts like a third crew member in the cockpit, ordering mode change requests and resetting target altitude values to enable the aircraft to track the vertical flight plan. We have developed formal, executable models of the requirements for the mode logic of a FGS and for portions of the VNAV functionality. We have also conducted a comprehensive software safety analysis on the FGS mode logic model, and are completing the analysis of the VNAV model. This analysis uses as its starting point several "traditional" safety analysis techniques such as a functional hazard assessment (FHA), a fault tree analysis (FTA), and a failure mode effects analysis (FMEA). However, we are also using formal methods techniques known as model checking and theorem proving to verify the presence of safety properties in the model. This paper summarizes the (now completed) safety analysis that was performed on the FGS model, and highlights the similarities and differences with the (still on-going) safety analysis of the FMS model. In particular, we summarize progress made to date in the use of formal methods to verify the presence of the required safety properties in the models themselves.     

Effect of track structure and radioprotectors on the induction of oncogenic transformation in murine fibroblasts by heavy ions

The oncogenic potential of high-energy ⁵⁶Fe particles (1 GeV/nucleon) accelerated with the Alternating Gradient Synchrotron at the Brookhaven National Laboratory was examined utilizing the mouse C3H 10T1/2 cell model. The dose-averaged LET for high-energy ⁵⁶Fe is estimated to be 143 keV/μm with the exposure conditions used in this study. For ⁵⁶Fe ions, the maximum relative biological effectiveness (RBE_max) values for cell survival and oncogenic transformation were 7.71 and 16.5 respectively. Compared to 150 keV/μm ⁴He nuclei, high-energy ⁵⁶Fe nuclei were significantly less effective in cell killing and oncogenic induction. The prostaglandin E₁ analog misoprostol, an effective oncoprotector of C3H 10T1/2 cells exposed to X rays, was evaluated for its potential as a radioprotector of oncogenic transformation with high-energy ⁵⁶Fe. Exposure of cells to misoprostol did not alter ⁵⁶Fe cytotoxicity or the rate of ⁵⁶Fe-induced oncogenic transformation.     

Tissue responses to low protracted doses of high LET radiations or photons: early and late damage relevant to radio-protective countermeasures.

Early and late murine tissue responses to single or fractionated low doses of heavy charged particles, fission-spectrum neutrons or gamma rays are considered. Damage to the hematopoietic system is emphasized, but results on acute lethality, host response to challenge with transplanted leukemia cells and life-shortening are presented. Low dose rates per fraction were used in some neutron experiments. Split-dose lethality studies (LD 50/30) with fission neutrons indicated greater accumulation of injury during a 9 fraction course (over 17 days) than was the case for gamma-radiation. When total doses of 96 or 247 cGy of neutrons or gamma rays were given as a single dose or in 9 fractions, a significant sparing effect on femur CFU-S depression was observed for both radiation qualities during the first 11 days, but there was not an earlier return to normal with dose fractionation. During the 9 fraction sequence, a significant sparing effect of low dose rate on CFU-S depression was observed in both neutron and gamma-irradiated mice. CFU-S content at the end of the fractionation sequence did not correlate with measured LD 50/30. Sustained depression of femur and spleen CFU-S and a significant thrombocytopenia were observed when a total neutron dose of 240 cGy was given in 72 fractions over 24 weeks at low dose rates. The temporal aspects of CFU-S repopulation were different after a single versus fractionated neutron doses. The sustained reduction in the size of the CFU-S population was accompanied by an increase in the fraction in DNA synthesis. The proliferation characteristics and effects of age were different for radial CFU-S population closely associated with bone, compared with the axial population that can be readily aspirated from the femur. In aged irradiated animals, the CFU-S proliferation/redistribution response to typhoid vaccine showed both an age and radiation effect. After high single doses of neutrons or gamma rays, a significant age- and radiation-related deficiency in host defense mechanisms was detected by a shorter mean survival time following challenge with transplantable leukemia cells. Comparison of dose-response curves for life shortening after irradiation with fission-spectrum neutrons or high energy silicon particles indicated high initial slopes for both radiation qualities at low doses, but for higher doses of silicon, the effect per Gy decreased to a value similar to that for gamma rays. The two component life-shortening curve for silicon particles has implications for the potential efficacy of radioprotectants. Recent studies on protection against early and late effects by aminothiols, prostaglandins, and other compounds are discussed.     

Propagation and interaction of interplanetary transient disturbances. Numerical simulations

We study the heliocentric evolution of ICME-like disturbances and their associated transient forward shocks (TFSs) propagating in the interplanetary (IP) medium comparing the solutions of a hydrodynamic (HD) and magnetohydrodynamic (MHD) models using the ZEUS-3D code [Stone, J.M., Norman, M.L., 1992. Zeus-2d: a radiation magnetohydrodynamics code for astrophysical flows in two space dimensions. i – the hydrodynamic algorithms and tests. Astrophysical Journal Supplement Series 80, 753–790]. The simulations show that when a fast ICME and its associated IP shock propagate in the inner heliosphere they have an initial phase of about quasi-constant propagation speed (small deceleration) followed, after a critical distance (deflection point), by an exponential deceleration. By combining white light coronograph and interplanetary scintillation (IPS) measurements of ICMEs propagating within 1 AU [Manoharan, P.K., 2005. Evolution of coronal mass ejections in the inner heliosphere: a study using white-light and scintillation images. Solar Physics 235 (1–2), 345–368], such a critical distance and deceleration has already been inferred observationally. In addition, we also address the interaction between two ICME-like disturbances: a fast ICME 2 overtaking a previously launched slower ICME 1. After interaction, the leading ICME 1 accelerates and the tracking ICME 2 decelerates and both ICMEs tend to arrive at 1 AU having similar speeds. The 2-D HD and MHD models show similar qualitative results for the evolution and interaction of these disturbances in the IP medium.     

Identification Techniques for SARSAT Signals

A process for the identification of emergency locator transmitter (ELT) signals related to search and rescue satellite-aided tracking (SARSAT) is presented. The ELT identification process is particularly important in order to increase the probability of detection and eliminate sources of interference from the data set. A set of ELT signal parameters is introduced and methods for estimating these parameters are developed. A theoretical analysis and performance evaluation of these methods is provided.     

Instrumentation for investigation of the depth-dose distribution by the Liulin-5 instrument of a human phantom on the Russian segment of ISS for estimation of the radiation risk during long term space flights.

Described is the Liulin-5 experiment and instrumentation, developed for investigation of the space radiation doses depth distribution in a human phantom on the Russian Segment of the International Space Station (ISS). Liulin-5 experiment is a part of the international project MATROSHKA-R on ISS. The experiment MATROSHKA-R is aimed to study the depth dose distribution at the sites of critical organs of the human body, using models of human body-anthropomorphic and spherical tissue-equivalent phantoms. The aim of Liulin-5 experiment is long term (4-5 years) investigation of the radiation environment dynamics inside the spherical tissue-equivalent phantom, mounted in different places of the Russian Segment of ISS. Energy deposition spectra, linear energy transfer spectra, flux and dose rates for protons and the biologically-relevant heavy ion components of the galactic cosmic radiation will be measured simultaneously with near real time resolution at different depths of the phantom by a telescope of silicon detectors. Data obtained together with data from other active and passive dosimeters will be used to estimate the radiation risk to the crewmembers, verify the models of radiation environment in low Earth orbit, validate body transport model and correlate organ level dose to skin dose. Presented are the test results of the prototype unit. The spherical phantom will be flown on the ISS in 2004 year and Liulin-5 experiment is planned for 2005 year.     

Utilization of white potatoes in CELSS.

Potatoes (Solanum tuberosum) have a strong potential as a useful crop species in a functioning CELSS. The cultivar Denali has produced 37.5 g m-2 d-1 when grown for 132 days with the first 40 days under a 12-h photoperiod and a light:dark temperature cycle of 20 degrees C:16 degrees C, and then 92 days under continuous irradiance and a temperature of 16 degrees C. Irradiance was at 725 micromoles m-2 s-1 PPF and carbon dioxide at 1000 micromoles mol-1. The dried tubers had 82% carbohydrates, 9% protein and 0.6% fat. Other studies have shown that carbon dioxide supplementation (1000 micromoles mol-1) is of significant benefit under 12-h irradiance but less benefit under 24 h irradiance. Irradiance cycles of 60 minutes light and 30 minutes dark caused a reduction of more than 50% in tuber weight compared to cycles of 16 h light and 8 h dark. A diurnal temperature change of 22 degrees C for the 12-h light period to 14 degrees C during the 12-h dark period gave increased yields of 30% and 10% for two separate cultivars, compared with plants grown under a constant 18 degrees C temperature. Cultivar screening under continuous irradiance and elevated temperatures (28 degrees C) for 8 weeks of growth indicated that the cvs Haig, Denali, Atlantic, Desiree and Rutt had the best potential for tolerance to these conditions. Harvesting of tubers from plants at weekly intervals, beginning at 8 weeks after planting, did not increase yield over a single final harvest. Spacing of plants on 0.055 centers produced greater yield per m2 than spacing at 0.11 or 0.22 m2. Plants maintained 0.33 meters apart (0.111 m2 per plant) in beds produced the same yields when separated by dividers in the root matrix as when no separation was made.     

Direct Energy Transfer for High Efficiency Photovoltaic Energy Systems Part I: Concepts and Hypothesis

This two-part paper presents a comprehensive comparative study on parallel power processing (PPP) and standard schemes in dc/dc converters for photovoltaic (PV) energy systems. It is demonstrated how PPP can improve direct energy transfer (DET), which results in PV systems operating at higher voltage and efficiency. Discussions of the concepts, hypotheses and computer simulations are presented in Part I. Part II provides the experimental results, which confirm the validity of the analysis and simulations.     

Integrated Planning and Execution for Autonomous Spacecraft

An autonomous spacecraft must balance long-term and short-term considerations. It must perform purposeful activities that ensure long-term science and engineering goals are achieved and ensure that it maintains positive resource margins. This requires planning in advance to avoid a series of shortsighted decisions that can lead to failure. However, it must also respond in a timely fashion to a somewhat dynamic and unpredictable environment. Thus, in terms of high-level, goal-oriented activity, spacecraft plans must often be modified due to fortuitous events such as early completion of observations and setbacks such as failure to acquire a guidestar for a science observation. This describes an integrated planning and execution architecture that supports continuous modification and updating of a current working plan in light of a changing operating context.     

Improved Accuracy Metallic Resonator CVG

Metallic resonator Q-factor is very sensitive to the resonator's material, its thermal and chemical treatment, design, and environment; i.e., pressure and temperature. In order to obtain higher accuracy for CVG it is necessary to use resonator evacuation. Resonator mass plays a very important role in sensitivity to angle rate, in stability of vibration, in response to environmental condition changes, and also to external vibration and shock resistance. tnnalabs Holding Inc. uses a cylindrical resonator with increased rim thickness of up to 2 mmn and more. This concerns resonator material and design parameters selection, material thermal treatment to increase resonator Q-factor, and improved control algorithms in order to increase metallic CVG accuracy. As a result, CVG bias instability of 0.025 degth and random walk of 0.008 degvh for the resonator diameter 43 mmn, and 0.2 deg/h for the resonator diameter 25 mm were obtained. Future opportunities for Innalabs CVG is also discussed herein. Test results are presented for CVG43 and CVG25. Three-axis CVG unit under control of one DSP "Sharc" and IMU parameters are forecasted.