ALBERT

Description: The specification and mechanical verification of the Software Implemented Fault Tolerance (SIFT) flight control system is described. The methodology employed in the verification effort is discussed, and a description of the hierarchical models of the SIFT system is given. To meet the objective of NASA for the reliability of safety critical flight control systems, the SIFT computer must achieve a reliability well beyond the levels at which reliability can be actually measured. The methodology employed to demonstrate rigorously that the SIFT computer meets as reliability requirements is described. The hierarchy of design specifications from very abstract descriptions of system function down to the actual implementation is explained. The most abstract design specifications can be used to verify that the system functions correctly and with the desired reliability since almost all details of the realization were abstracted out. A succession of lower level models refine these specifications to the level of the actual implementation, and can be used to demonstrate that the implementation has the properties claimed of the abstract design specifications.

Description: The paper describes the methodology being employed to demonstrate rigorously that the SIFT (software-implemented fault-tolerant) computer meets its requirements. The methodology uses a hierarchy of design specifications, expressed in the mathematical domain of multisorted first-order predicate calculus. The most abstract of these, from which almost all details of mechanization have been removed, represents the requirements on the system for reliability and intended functionality. Successive specifications in the hierarchy add design and implementation detail until the PASCAL programs implementing the SIFT executive are reached. A formal proof that a SIFT system in a 'safe' state operates correctly despite the presence of arbitrary faults has been completed all the way from the most abstract specifications to the PASCAL program.

Description: Reentry models for use in hypersonic wind tunnel tests were fabricated using a stereolithography apparatus. These models were produced in one day or less, which is a significant time savings compared to the manufacture of ceramic or metal models. The models were tested in the NASA Langley Research Center 31-Inch Mach 10 Air Tunnel. Most of the models did not survive repeated tests in the tunnel, and several failure modes of the models were identified. Planar laser-induced fluorescence (PLIF) of nitric oxide (NO) was used to visualize the flowfields in the wakes of these models. Pure NO was either seeded through tubes plumbed into the model or via a tube attached to the strut holding the model, which provided localized addition of NO into the model s wake through a porous metal cylinder attached to the end of the tube. Models included several 2-inch diameter Inflatable Reentry Vehicle Experiment (IRVE) models and 5-inch diameter Crew Exploration Vehicle (CEV) models. Various configurations were studied including different sting placements relative to the models, different model orientations and attachment angles, and different NO seeding methods. The angle of attack of the models was also varied and the location of the laser sheet was scanned to provide three-dimensional flowfield information. Virtual Diagnostics Interface technology, developed at NASA Langley, was used to visualize the data sets in post processing. The use of calibration "dotcards" was investigated to correct for camera perspective and lens distortions in the PLIF images. Lessons learned and recommendations for future experiments are discussed.