Software intensive systems safety analysis

Two important elements in the avionics suite of modern aircraft are: the flight control system (FCS) and the flight management system (FMS). The FCS provides the capability to stabilize and control the aircraft, while the FMS is responsible for flight planning and navigation. A clear trend in the aerospace industry is to place greater reliance on software systems, and many FCS and FMS subsystems are implemented primarily in software. For example, within the FCS is the flight guidance system (FGS) that generates roll and pitch guidance commands. Similarly, within the FMS is the vertical navigation (VNAV) function that acts like a third crew member in the cockpit, ordering mode change requests and resetting target altitude values to enable the aircraft to track the vertical flight plan. We have developed formal, executable models of the requirements for the mode logic of a FGS and for portions of the VNAV functionality. We have also conducted a comprehensive software safety analysis on the FGS mode logic model, and are completing the analysis of the VNAV model. This analysis uses as its starting point several "traditional" safety analysis techniques such as a functional hazard assessment (FHA), a fault tree analysis (FTA), and a failure mode effects analysis (FMEA). However, we are also using formal methods techniques known as model checking and theorem proving to verify the presence of safety properties in the model. This paper summarizes the (now completed) safety analysis that was performed on the FGS model, and highlights the similarities and differences with the (still on-going) safety analysis of the FMS model. In particular, we summarize progress made to date in the use of formal methods to verify the presence of the required safety properties in the models themselves.     

Tissue responses to low protracted doses of high LET radiations or photons: early and late damage relevant to radio-protective countermeasures.

Early and late murine tissue responses to single or fractionated low doses of heavy charged particles, fission-spectrum neutrons or gamma rays are considered. Damage to the hematopoietic system is emphasized, but results on acute lethality, host response to challenge with transplanted leukemia cells and life-shortening are presented. Low dose rates per fraction were used in some neutron experiments. Split-dose lethality studies (LD 50/30) with fission neutrons indicated greater accumulation of injury during a 9 fraction course (over 17 days) than was the case for gamma-radiation. When total doses of 96 or 247 cGy of neutrons or gamma rays were given as a single dose or in 9 fractions, a significant sparing effect on femur CFU-S depression was observed for both radiation qualities during the first 11 days, but there was not an earlier return to normal with dose fractionation. During the 9 fraction sequence, a significant sparing effect of low dose rate on CFU-S depression was observed in both neutron and gamma-irradiated mice. CFU-S content at the end of the fractionation sequence did not correlate with measured LD 50/30. Sustained depression of femur and spleen CFU-S and a significant thrombocytopenia were observed when a total neutron dose of 240 cGy was given in 72 fractions over 24 weeks at low dose rates. The temporal aspects of CFU-S repopulation were different after a single versus fractionated neutron doses. The sustained reduction in the size of the CFU-S population was accompanied by an increase in the fraction in DNA synthesis. The proliferation characteristics and effects of age were different for radial CFU-S population closely associated with bone, compared with the axial population that can be readily aspirated from the femur. In aged irradiated animals, the CFU-S proliferation/redistribution response to typhoid vaccine showed both an age and radiation effect. After high single doses of neutrons or gamma rays, a significant age- and radiation-related deficiency in host defense mechanisms was detected by a shorter mean survival time following challenge with transplantable leukemia cells. Comparison of dose-response curves for life shortening after irradiation with fission-spectrum neutrons or high energy silicon particles indicated high initial slopes for both radiation qualities at low doses, but for higher doses of silicon, the effect per Gy decreased to a value similar to that for gamma rays. The two component life-shortening curve for silicon particles has implications for the potential efficacy of radioprotectants. Recent studies on protection against early and late effects by aminothiols, prostaglandins, and other compounds are discussed.     

Instrumentation for investigation of the depth-dose distribution by the Liulin-5 instrument of a human phantom on the Russian segment of ISS for estimation of the radiation risk during long term space flights.

Described is the Liulin-5 experiment and instrumentation, developed for investigation of the space radiation doses depth distribution in a human phantom on the Russian Segment of the International Space Station (ISS). Liulin-5 experiment is a part of the international project MATROSHKA-R on ISS. The experiment MATROSHKA-R is aimed to study the depth dose distribution at the sites of critical organs of the human body, using models of human body-anthropomorphic and spherical tissue-equivalent phantoms. The aim of Liulin-5 experiment is long term (4-5 years) investigation of the radiation environment dynamics inside the spherical tissue-equivalent phantom, mounted in different places of the Russian Segment of ISS. Energy deposition spectra, linear energy transfer spectra, flux and dose rates for protons and the biologically-relevant heavy ion components of the galactic cosmic radiation will be measured simultaneously with near real time resolution at different depths of the phantom by a telescope of silicon detectors. Data obtained together with data from other active and passive dosimeters will be used to estimate the radiation risk to the crewmembers, verify the models of radiation environment in low Earth orbit, validate body transport model and correlate organ level dose to skin dose. Presented are the test results of the prototype unit. The spherical phantom will be flown on the ISS in 2004 year and Liulin-5 experiment is planned for 2005 year.     

Utilization of white potatoes in CELSS.

Potatoes (Solanum tuberosum) have a strong potential as a useful crop species in a functioning CELSS. The cultivar Denali has produced 37.5 g m-2 d-1 when grown for 132 days with the first 40 days under a 12-h photoperiod and a light:dark temperature cycle of 20 degrees C:16 degrees C, and then 92 days under continuous irradiance and a temperature of 16 degrees C. Irradiance was at 725 micromoles m-2 s-1 PPF and carbon dioxide at 1000 micromoles mol-1. The dried tubers had 82% carbohydrates, 9% protein and 0.6% fat. Other studies have shown that carbon dioxide supplementation (1000 micromoles mol-1) is of significant benefit under 12-h irradiance but less benefit under 24 h irradiance. Irradiance cycles of 60 minutes light and 30 minutes dark caused a reduction of more than 50% in tuber weight compared to cycles of 16 h light and 8 h dark. A diurnal temperature change of 22 degrees C for the 12-h light period to 14 degrees C during the 12-h dark period gave increased yields of 30% and 10% for two separate cultivars, compared with plants grown under a constant 18 degrees C temperature. Cultivar screening under continuous irradiance and elevated temperatures (28 degrees C) for 8 weeks of growth indicated that the cvs Haig, Denali, Atlantic, Desiree and Rutt had the best potential for tolerance to these conditions. Harvesting of tubers from plants at weekly intervals, beginning at 8 weeks after planting, did not increase yield over a single final harvest. Spacing of plants on 0.055 centers produced greater yield per m2 than spacing at 0.11 or 0.22 m2. Plants maintained 0.33 meters apart (0.111 m2 per plant) in beds produced the same yields when separated by dividers in the root matrix as when no separation was made.     

The effect of cannibalism intensity on net primary production and dynamics of trophic links in aquatic ecosystems.

A mathematical model was used to investigate the effect of cannibalism intensity on the net primary production and the dynamics of trophic links in an aquatic ecosystem characterized by cannibalism at the upper trophic level. A mathematical model of an aquatic ecosystem has been constructed, with the following principal trophic links: limiting nutrient concentration, producers (phytoplankton), nonpredatory and predatory zooplankton. The model takes into account the age structure of the predator and includes two age groups (the young and adults). The adult predators are cannibals feeding on both nonpredatory zooplankton and their own young, which consume phytoplankton. It has been found that when cannibalism intensity increases above a certain level, the concentrations of both adults and the young of the predators decrease. At the same time, the concentrations of the nonpredatory zooplankton and of nutrients increase, while the biomass of producers decreases. When the cannibalism intensity is low, the net primary production of the system increases to a certain level correlated with the increase in cannibalism intensity and drops sharply when the level of consumption of young is high. There is an optimal intensity of cannibalism, at which the productivity in the photosynthesis link is maximal.     

Volatile metabolites of higher plant crops as a photosynthesizing life support system component under temperature stress at different light intensities.

The effect of elevated temperatures of 35 and 45 degrees C (at the intensities of photosynthetically active radiation 322, 690 and 1104 micromoles m-2 s-1) on the photosynthesis, respiration, and qualitative and quantitative composition of the volatiles emitted by wheat (Triticum aestuvi L., cultivar 232) crops was investigated in growth chambers. Identification and quantification of more than 20 volatile compounds (terpenoids--alpha-pinene, delta 3 carene, limonene, benzene, alpha- and trans-caryophyllene, alpha- and gamma-terpinene, their derivatives, aromatic hydrocarbons, etc.) were conducted by gas chromatograph/mass spectrometry. Under light intensity of 1104 micromoles m-2 s-1 heat resistance of photosynthesis and respiration increased at 35 degrees C and decreased at 45 degrees C. The action of elevated temperatures brought about variations in the rate and direction of the synthesis of volatile metabolites. The emission of volatile compounds was the greatest under a reduced irradiation of 322 micromoles m-2 s-1 and the smallest under 1104 micromoles m-2 s-1 at 35 degrees C. During the repair period, the contents and proportions of volatile compounds were different from their initial values, too. The degree of disruption and the following recovery of the functional state depended on the light intensity during the exposure to elevated temperatures. The investigation of the atmosphere of the growth chamber without plants has revealed the substances that were definitely technogenic in origin: tetramethylurea, dimethylsulfide, dibutylsulfide, dibutylphthalate, and a number of components of furan and silane nature.     

High-speed streams of the solar wind near the earths’s orbit and their sources on the sun according to stereoscopic observations in the minimum of the 23rd cycle

Based on the results of plasma and magnetic measurements at three different points of the heliosphere and telescopic observations of the Sun from these points we study simultaneously high-speed streams (HSS) of the solar wind (SW) near the Earths’s orbit and coronal holes (CH) that have generated them. The data from spacecraft STEREO-A, STEREO-B, ACE, and SOHO are used together with ground-based observations from March 2007 to May 2008. In this period there existed HSS whose sources represented CH of various polarity, geometry, and location relative to the heliographic and heliomagnetic equators. Dependence of SW parameters on mutual positions of spacecraft with respect to CH and heliospheric current sheet, and also on heliolatitude and geometry of the CH is revealed. A difference of more than 5° in locations of spacecraft with respect to the heliospheric current sheet in November 2007 allowed us to discover a heliolatitude velocity gradient of the SW streams between the STEREO-A and STEREO-B spacecraft. On the average this gradient at that time was equal to 20 km/s per degree. Substantial variations in SW streams associated with variations of the HSS SW sources during a few hours or days were also observed. This variability makes it difficult to use the data of spacecraft STEREO-B for sufficiently accurate prediction of SW properties in the near-Earth space by the method of simple advanced ti me shift due to heliolongitude difference between a spacecraft and the Earth even in solar activity minimum.     

Fiber-optic gyros and quartz accelerometers for motion control

In article the opportunity of use strapdown inertial navigation system (SINS) on the base of fiber-optic gyroscopes and quartz accelerometers corrected from star sensors and satellite navigation equipment (SNE) for perspective interplanetary spacecrafts motion control on phases of interplanetary trajectory insertion, trajectory correction, and braking during transition to Mars orbit is investigated. Results of onboard control complex accuracy characteristics estimation are presented at the given dynamic spacecraft scheme which is taking into account the liquid oscillations in tanks and structure elements elasticity. At modelling the errors of measuring devices installation, errors of SINS initial alignment and instrumental errors of SINS sensitive elements, variation of control engines parameters were taken into account. The structure of the developed complex of imitation modelling of interplanetary spacecraft controlled motion is resulted. Estimations of active flight legs realization accuracy were received by a method of statistical modelling of spacecraft controlled motion     

Coordinated Continual Planning Methods for Cooperating Rovers

Eight evaluation metrics are used to compare and contrast three coordination schemes for a system that continuously plans to control collections of rovers (or spacecraft) using collective mission goals instead of goals or command sequences for each spacecraft. These schemes use a central coordinator to either: 1) micromanage rovers one activity at a time; 2) assign mission goals to rovers; or 3) arbitrate mission goal auctions among rovers. A self-commanding collection of rovers would autonomously coordinate itself to satisfy high-level science and engineering goals in a changing partially understood environment - making the operation of tens or even a hundred spacecraft feasible