Jump to content

Considerations for Using Autonomous Flight Termination Softwarein Crewed Launch Vehicles


Recommended Posts

  • Publishers
Posted

This article is from the 2024 Technical Update

Autonomous flight termination systems (AFTS) are being progressively employed onboard launch vehicles to replace ground personnel and infrastructure needed to terminate flight or destruct the vehicle should an anomaly occur. This automation uses on-board real-time data and encoded logic to determine if the flight should be self-terminated. For uncrewed launch vehicles, FTS systems are required to protect the public and governed by the United States Space Force (USSF). For crewed missions, NASA must augment range AFTS requirements for crew safety and certify each flight according to human rating standards, thus adding unique requirements for reuse of software originally intended for uncrewed missions. This bulletin summarizes new information relating to AFTS to raise awareness of key distinctions, summarize considerations and outline best practices for incorporating AFTS into human-rated systems.

Key Distinctions – Crewed v. Uncrewed
There are inherent behavioral differences between uncrewed and crewed AFTS related to design philosophy and fault tolerance. Uncrewed AFTS generally favor fault tolerance against failure-to-destruct over failing silent
in the presence of faults. This tenet permeates the design, even downto the software unit level. Uncrewed AFTS become zero-fault-to-destruct tolerant to many unrecoverable AFTS errors, whereas general single fault
tolerance against vehicle destruct is required for crewed missions. Additionally, unique needs to delay destruction for crew escape, provide abort options and special rules, and assess human-in-the-loop insight, command, and/or override throughout a launch sequence must be considered and introduces additional requirements and integration complexities.

AFTS Software Architecture Components and Best-Practice Use Guidelines
A detailed study of the sole AFTS currently approved by USSF and utilized/planned for several launch vehicles was conducted to understand its characteristics, and any unique risk and mitigation techniques for effective human-rating reuse. While alternate software systems may be designed in the future, this summary focuses on an architecture employing the Core Autonomous Safety Software (CASS). Considerations herein are intended for extrapolation to future systems. Components of the AFTS software architecture are shown, consisting of the CASS, “Wrapper”, and Mission Data Load (MDL) along with key characteristics and use guidelines. A more comprehensive description of each and recommendations for developmental use is found in Ref. 1.

Mission Data Load (MDL) along with key characteristics and use guidelines
TB 24-02 AFTS Software Architecture Components

Best Practices Certifying AFTS Software
Below are non-exhaustive guidelines to help achieve a human-rating
certification for an AFTS.

non-exhaustive guidelines to help achieve a human-rating certification for an AFTS.

References

  1. NASA/TP-20240009981: Best Practices and Considerations for Using
    Autonomous Flight Termination Software In Crewed Launch Vehicles
    https://ntrs.nasa.gov/citations/20240009981
  2. “Launch Safety,” 14 C.F.R., § 417 (2024).
  3. NPR 8705.2C, Human-Rating Requirements for Space Systems, Jul 2017,
    nodis3.gsfc.nasa.gov/
  4. NASA Software Engineering Requirements, NPR 7150.2D, Mar 2022,
    nodis3.gsfc.nasa.gov/
  5. RCC 319-19 Flight Termination Systems Commonality Standard, White
    Sands, NM, June 2019.
  6. “Considerations for Software Fault Prevention and Tolerance”, NESC
    Technical Bulletin No. 23-06 https://ntrs.nasa.gov/citations/20230013383
  7. “Safety Considerations when Repurposing Commercially Available Flight
    Termination Systems from Uncrewed to Crewed Launch Vehicles”, NESC
    Technical Bulletin No. 23-02 https://ntrs.nasa.gov/citations/20230001890

View the full article

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Similar Topics

    • By NASA
      NASA’s Ames Research Center in Silicon Valley invites media to learn more about Distributed Spacecraft Autonomy (DSA), a technology that allows individual spacecraft to make independent decisions while collaborating with each other to achieve common goals – without human input. The DSA team achieved multiple firsts during tests of such swarm technology as part of the agency’s project. 
      DSA develops software tools critical for future autonomous, distributed, and intelligent spacecraft that will need to interact with each other to achieve complex mission objectives. Testing onboard the agency’s Starling mission resulted in accomplishments including the first fully distributed autonomous operation of multiple spacecraft, the first use of space-to-space communications to autonomously share status information between multiple spacecraft, and more. 
      DSA’s accomplishments mark a significant milestone in advancing autonomous systems that will make new types of science and exploration possible. 
      Caleb Adams, DSA project manager, is available for interview on Wednesday, Feb. 5 and Thursday, Feb. 6. To request an interview, media can contact the Ames Office of Communications by email at arc-dl-newsroom@nasa.gov or by phone at 650-604-4789.  
      Learn more about NASA Ames’ world-class research and development in aeronautics, science, and exploration technology at: 
      https://www.nasa.gov/ames
      -end- 
      Tiffany Blake
      Ames Research Center, Silicon Valley 
      650-604-4789 
      tiffany.n.blake@nasa.gov  

      To receive local NASA Ames news, email local-reporters-request@lists.arc.nasa.gov with “subscribe” in the subject line. To unsubscribe, email the same address with “unsubscribe” in the subject line.  

      View the full article
    • By Space Force
      A US space domain awareness payload hosted on Japan's Quasi-Zenith Satellite 6 successfully launched on a Japanese H-3 launch vehicle from the Yoshinobu Launch Complex at the Japan Aerospace Exploration Agency’s Tanegashima Space Center in Japan on February 2.

      View the full article
    • By NASA
      NASA has awarded Dynamic Aviation Group Inc. of Bridgewater, Virginia, the Commercial Aviation Services contract to support the agency’s Airborne Science Program. The program provides aircraft and technology to further science and advance the use of Earth observing satellite data, making NASA data about our home planet and innovations accessible to all.
      This is an indefinite-delivery/indefinite-quantity firm-fixed-price contract with a maximum potential value of $13.5 million. The period of performance began Friday, Jan. 31, and continues through Jan. 30, 2030. 
      Under this contract, the company will provide ground and flight crews and services using modified commercial aircraft, including a Beechcraft King Air B200 and Beechcraft King Air A90. Work will include mechanical and electrical engineering services for instrument integration and de-integration, flight planning and real-time tracking, project execution, as well as technical feasibility assessments and cost estimation. Aircraft modifications may include instrumented nosecones, viewing ports, inlets, computing systems, and satellite communications capabilities. 
      This work is essential for NASA to conduct airborne science missions, develop and validate earth system models, and support satellite payload calibration. NASA’s Ames Research Center in California’s Silicon Valley will administer the agency-wide contract on behalf of the Airborne Science Program in the Earth Science Division at NASA Headquarters in Washington.
      To learn more about NASA and agency programs, visit:
      https://www.nasa.gov
      -end-
      Rachel Hoover
      Ames Research Center, Silicon Valley, Calif.
      650-604-4789
      rachel.hoover@nasa.gov

      View the full article
    • By NASA
      As part of NASA’s CLPS (Commercial Lunar Payload Services) initiative and Artemis campaign, Intuitive Machines’ second delivery to the Moon will carry NASA technology demonstrations and science investigations on their Nova-C class lunar lander. Credit: Intuitive Machines NASA will host a media teleconference at 1 p.m. EST Friday, Feb. 7, to discuss the agency’s science and technology flying aboard Intuitive Machines’ second flight to the Moon. The mission is part of NASA’s CLPS (Commercial Lunar Payload Services) initiative and Artemis campaign to establish a long-term lunar presence. 

      Audio of the call will stream on the agency’s website at:
      https://www.nasa.gov/live
      Briefing participants include:
      Nicky Fox, associate administrator, Science Mission Directorate, NASA Headquarters Niki Werkheiser, director, technology maturation, Space Technology Mission Directorate, NASA Headquarters Trent Martin, senior vice president, space systems, Intuitive Machines To participate by telephone, media must RSVP no later than two hours before the briefing to: ksc-newsroom@mail.nasa.gov. NASA’s media accreditation policy is available online.

      Intuitive Machines’ lunar lander, Athena, will launch on a SpaceX Falcon 9 rocket from Launch Complex 39A at NASA’s Kennedy Space Center in Florida. The four-day launch window opens no earlier than Wednesday, Feb. 26.

      Among the items on Intuitive Machines’ lander, the IM-2 mission will be one of the first on site, or in-situ, demonstrations of resource utilization on the Moon. A drill and mass spectrometer will measure the potential presence of volatiles or gases from lunar soil in Mons Mouton, a lunar plateau near the Moon’s South Pole. In addition, a passive Laser Retroreflector Array on the top deck of the lander will bounce laser light back at any orbiting or incoming spacecraft to give future spacecraft a permanent reference point on the lunar surface. Other technology instruments on this delivery will demonstrate a robust surface communications system and deploy a propulsive drone that can hop across the lunar surface.

      Launching as a rideshare with the IM-2 delivery, NASA’s Lunar Trailblazer spacecraft also will begin its journey to lunar orbit, where it will map the distribution of the different forms of water on the Moon.

      Under the CLPS model, NASA is investing in commercial delivery services to the Moon to enable industry growth and support long-term lunar exploration. As a primary customer for CLPS deliveries, NASA is one of many customers for these flights.

      For updates, follow on:
      https://blogs.nasa.gov/artemis
      -end-
      Alise Fisher / Jasmine Hopkins
      Headquarters, Washington
      202-358-2546
      alise.m.fisher@nasa.gov / jasmine.s.hopkins@nasa.gov

      Natalia Riusech / Nilufar Ramji
      Johnson Space Center, Houston
      281-483-5111
      nataila.s.riusech@nasa.gov / nilufar.ramji@nasa.gov

      Antonia Jaramillo
      Kennedy Space Center, Florida
      321-867-2468
      antonia.jaramillobotero@nasa.gov
      Share
      Details
      Last Updated Jan 31, 2025 LocationNASA Headquarters Related Terms
      Commercial Lunar Payload Services (CLPS) Artemis Missions Science Mission Directorate Space Technology Mission Directorate View the full article
    • By NASA
      An FVR90 unmanned aerial vehicle (UAV) lifts off from the Monterey Bay Academy Airport near Watsonville, California, during the Advanced Capabilities for Emergency Response Operations (ACERO) Shakedown Test in November 2024.NASA/Don Richey NASA is collaborating with the wildfire community to provide tools for some of the most challenging aspects of firefighting – particularly aerial nighttime operations.  
      In the future, agencies could more efficiently use drones, both remotely piloted and fully autonomous, to help fight wildfires. NASA recently tested technologies with teams across the country that will enable aircraft – including small drones and helicopters outfitted with autonomous technology for remote piloting – to monitor and fight wildfires 24 hours a day, even during low-visibility conditions. 
      Current aerial firefighting operations are limited to times when aircraft have clear visibility – otherwise, pilots run the risk of flying into terrain or colliding with other aircraft. NASA-developed airspace management technology will enable drones and remotely piloted aircraft to operate at night, expanding the window of time responders have to aerially suppress fires.
      “We’re aiming to provide new tools – including airspace management technologies – for 24-hour drone operations for wildfire response,” said Min Xue, project manager of the Advanced Capabilities for Emergency Response Operations (ACERO) project within NASA’s Aeronautics Research Mission Directorate. “This testing will provide valuable data to inform how we mature this technology for eventual use in the field.” 
      Over the past year, ACERO researchers developed a portable airspace management system (PAMS) drone pilots can use to safely send aircraft into wildfire response operations when operating drones from remote control systems or ground control stations.  
      Each PAMS, roughly the size of a carry-on suitcase, is outfitted with a computer for airspace management, a radio for sharing information among PAMS units, and an Automatic Dependent Surveillance-Broadcast receiver for picking up nearby air traffic – all encased in a durable and portable container. 
      NASA software on the PAMS allows drone pilots to avoid airborne collisions while remotely operating aircraft by monitoring and sharing flight plans with other aircraft in the network. The system also provides basic fire location and weather information. A drone equipped with a communication device acts as an airborne communication relay for the ground-based PAMS units, enabling them to communicate with each other without relying on the internet.  
      Engineers fly a drone at NASA’s Langley Research Center in Hampton, Virginia, to test aerial coordination capabilities.NASA/Mark Knopp To test the PAMS units’ ability to share and display vital information, NASA researchers placed three units in different locations outside each other’s line of sight at a hangar at NASA’s Ames Research Center in California’s Silicon Valley. Researchers stationed at each unit entered a flight plan into their system and observed that each unit successfully shared flight plans with the others through a mesh radio network. 
      Next, researchers worked with team members in Virginia to test an aerial communications radio relay capability. 
      Researchers outfitted a long-range vertical takeoff and landing aircraft with a camera, computer, a mesh radio, and an Automatic Dependent Surveillance-Broadcast receiver for air traffic information. The team flew the aircraft and two smaller drones at NASA’s Langley Research Center in Hampton, Virginia, purposely operating them outside each other’s line of sight.  
      The mesh radio network aboard the larger drone successfully connected with the small drones and multiple radio units on the ground. 
      Yasmin Arbab front-right frame, Alexey Munishkin, Shawn Wolfe, with Sarah Mitchell, standing behind, works with the Advanced Capabilities for Emergency Response Operations (ACERO) Portable Airspace Management System (PAMS) case at the Monterey Bay Academy Airport near Watsonville, California.NASA/Don Richey NASA researchers then tested the PAMS units’ ability to coordinate through an aerial communications relay to simulate what it could be like in the field.  
      At Monterey Bay Academy Airport in Watsonville, California, engineers flew a winged drone with vertical takeoff and landing capability by Overwatch Aero, establishing a communications relay to three different PAMS units. Next, the team flew two smaller drones nearby.  
      Researchers tested the PAMS units’ ability to receive communications from the Overwatch aircraft and share information with other PAMS units. Pilots purposely submitted flight plans that would conflict with each other and intentionally flew the drones outside preapproved flight plans. 
      The PAMS units successfully alerted pilots to conflicting flight plans and operations outside preapproved zones. They also shared aircraft location with each other and displayed weather updates and simulated fire location data. 
      The test demonstrated the potential for using PAM units in wildfire operations.  
      “This testing is a significant step towards improving aerial coordination during a wildfire,” Xue said. “These technologies will improve wildfire operations, reduce the impacts of large wildfires, and save more lives,” Xue said.  
      This year, the team will perform a flight evaluation to further mature these wildfire technologies. Ultimately, the project aims to transfer this technology to the firefighting community community. 
      This work is led by the ACERO project under NASA’s Aeronautics Research Mission Directorate and supports the agency’s Advanced Air Mobility mission.  
      View the full article
  • Check out these Videos

×
×
  • Create New...