Minimizing human-machine interface failures in high risk systems

Technology now permits the building of very complex man-machine systems with centralized controls, with the result that many processes can be run by relatively few individual workers. Studies of failures within these complex systems indicate that they are usually the consequence of a series of highly complex coincidences. There is an institutional neglect or misunderstanding of the implications of low-probability, high-consequence events for the design of complex man-machine systems. We must stop designing systems in which we virtually guarantee that operator errors will occur with catastrophic consequences. The greatest payback in reducing high risk system accidents is to reduce catastrophes induced or exacerbated by human error. This paper discusses some task breakdowns between the human element and software/hardware. These task allocations allow the complex man-machine system to be designed more robustly and prevent human error so as to reduce possible catastrophic consequences     

A root moisture sensor for plants in microgravity.

Development of components for bioregenerative life-support systems is a vital step toward long-term space exploration. The culturing of plants in a microgravity environment may be optimized by the use of appropriate sensors and controllers. This paper describes a sensor developed for determining the amount of fluid (nutrient solution) available on the surface of a porous ceramic nutrient delivery substrate to the roots of conventional crop plants. The sensor is based on the change in thermal capacitance and thermal conductance near the surface as the moisture content changes. The sensor could be employed as a data acquisition and control sensor to support the automated monitoring of plants grown in a microgravity environment.     

Measurements of electrical breakdown in the vicinity of a sounding rocket differentially charged to 10 kV

During the initial period of high voltage biasing of the SPEAR-3 sounding rocket payload, it was observed that electrical breakdown occurred in the gas surrounding the rocket. The breakdown occurred almost all the way to apogee of 289 km on the upleg, but did not recur on the downleg until the payload reached an altitude of 100 km. It is suggested that this behavior can be attributed to payload outgassing on the upleg leading to abnormally high gas pressure near the payload skin. Consideration of a modified Paschen discharge process with varying pressure along the discharge path was found to be consistent with the results.     

Monitoring power supply current and using a neural network routineto diagnose circuit faults

As a circuit is tested, the current drawn from a power supply can vary as different functions are invoked by the test. The current draw can be plotted against time, showing a characteristic trace for the test performed. Sensors in the ATS power supply can be used to monitor the current flow during test execution. Defective components can be classified using a Neural Network according to the pattern of variation from the “trace” of a good card. This can be performed as a background function, with the network gaining in accuracy over time. This paper discusses the Neural Network Routine for diagnosing circuit faults using monitored power supply current     

Weapons System Open Architecture - a bridge between "embedded" and "off-board"

A demonstration program is described: Weapons System Open Architecture (WSOA) - funded jointly by the Air Force Research Laboratory (AFRL), DARPA, and the Open Systems Joint Task Force (OSJTF). WSOA provides an open systems "bridge" between legacy embedded mission systems and off-board C3I sources and systems. This "bridge" is used to support Internet-like connectivity between command and attack nodes. The foundation of this bridge is the creation of a Common Object Request Broker Architecture (CORBA) layer over Link 16. In addition, application of quality of service techniques and resource management technologies will ensure the timely exchange and processing of mission critical information by both attack and command nodes in even the most time-sensitive situations.     

Enhanced space integrated GPS/INS (SIGI)

Safe, reliable, and low cost space-based navigation is being provided with embedded INS/GPS systems such as the space integrated GPS/INS (SIGI). The SIGI is being used for various space vehicle applications such as launch vehicles, orbital vehicles, and re-entry vehicles. This paper describes current space vehicle navigation capabilities. The SIGI is being enhanced to provide additions to these existing capabilities with such items as higher processing and a commercial-off-the-shelf operating system. This will allow hosting of various software applications such as advanced navigation functions, flight control, guidance and vehicle management algorithms. The SIGI can host redundancy management functions by incorporating a cross channel data link card (CCDL) using a high speed firewire bus. The SIGI can then be used as a redundancy management platform which has application to current space vehicle avionics topologies incorporating distributed processing architectures     

Using open networking standards over MIL-STD-1553 networks

Over the past several decades, the MIL-STD-1553 networking technology has found use in a number of military and aerospace platforms, including applications on aircraft, ships, tanks, missiles, satellites, and even the International Space Station. In developing software applications for these platforms, the use of modern, open networking standards such as TCP/IP is often preferable. The Internet Protocol (IP) provides communications routing, and the Transmission Control Protocol (TCP) provides reliable delivery to the application level. Furthermore, higher-level protocols such as the HyperText Transfer Protocol (HTTP), the File Transfer Protocol (FTP), etc. can be utilized in a TCP/IP environment. Though these open communications standards are preferable for many situations, the MIL-STD-1553B standard does not immediately lend itself to TCP/IP communications. One of the reasons for this is the fundamental difference between the MIL-STD-1553B networking standard, which relies on a bus controller to control communications and other data link layer networking protocols such as IEEE 8023 (Ethernet) which are Carrier Sense Multiple Access (CSMA) networks, and are thus decentralized. Despite differences in MIL-STD-1553B networking and more traditional data link layer networking protocols, there is nothing fundamentally preventing IP communication over a 1553 network. We have implemented a method of encapsulating IP datagrams within MDL-STD-1553B data messages that allows for transparent use of Internet Protocol (IP) APIs at the application level. Our system allows traditional 1553 messages to also be transported over the network, and even allows traditional messages to take a higher transmission priority over IP traffic. We analyze the advantages of such a system and the performance level we achieved with our implementation of this concept.     

Radiation measurements aboard NASA ER-2 high altitude aircraft with the Liulin-4J portable spectrometer.

The risks to aircrew health posed by prolonged exposure to low levels of ionizing radiation at aircraft altitudes have recently received renewed attention. Civil and military aircraft currently on the drawing board are expected to operate at higher altitudes (>12 km) and fly longer ranges than do existing aircraft, thereby exposing their crews to higher levels of ionizing radiation, for longer periods of time. We are currently carrying out dosimetric measurements of the ionizing radiation environment at approximately 20 km altitude using portable Si detectors aboard NASA's two ER-2 high altitude research aircraft. The instruments, Liulin-4J, have been extensively calibrated at several particle accelerators. With these instruments, we can measure not only absorbed dose, but also variation of the absorbed dose as a function of time. We report radiation dose measurements as function of time, altitude, and latitude for several ER-2 missions.     

Aviation data networks: security issues and network architecture

The information technology (IT) revolution, combined with people's need to access information quickly, has resulted in the explosive growth of the Internet in the past decade. Ubiquitous access to the Internet has become an essential component of a mobile workforce, and multiple mechanisms are being devised to ensure seamless connectivity to corporate resources. An integrated security framework requires careful consideration of the security features of the network within an airplane. Potentially, the aircraft could consist of three kinds of networks, namely: passenger network, crew network, and control network. The security protocol implemented must ensure a proper separation of these networks and also watch for any security protocol violations. In this paper, the authors review existing aircraft data network standards, security provisioning, and security threats associated with the aircraft data networks. In addition, the authors also analyze the security threats associated with different network architectures.