Architecture and Information Requirements to Assess and Predict Flight Safety Risks During Highly Autonomous Urban Flight Operations

As aviation adopts new and increasingly complex operational paradigms, vehicle types, and technologies to broaden airspace capability and efficiency, maintaining a safe system will require recognition and timely mitigation of new safety issues as they emerge and before significant consequences occur. A shift toward a more predictive risk mitigation capability becomes critical to meet this challenge. In-time safety assurance comprises monitoring, assessment, and mitigation functions that proactively reduce risk in complex operational environments where the interplay of hazards may not be known (and therefore not accounted for) during design. These functions can also help to understand and predict emergent effects caused by the increased use of automation or autonomous functions that may exhibit unexpected non-deterministic behaviors. The envisioned monitoring and assessment functions can look for precursors, anomalies, and trends (PATs) by applying model-based and data-driven methods. Outputs would then drive downstream mitigation(s) if needed to reduce risk. These mitigations may be accomplished using traditional design revision processes or via operational (and sometimes automated) mechanisms. The latter refers to the in-time aspect of the system concept. This report comprises architecture and information requirements and considerations toward enabling such a capability within the domain of low altitude highly autonomous urban flight operations. This domain may span, for example, public-use surveillance missions flown by small unmanned aircraft (e.g., infrastructure inspection, facility management, emergency response, law enforcement, and/or security) to transportation missions flown by larger aircraft that may carry passengers or deliver products. Caveat: Any stated requirements in this report should be considered initial requirements that are intended to drive research and development (R&D). These initial requirements are likely to evolve based on R&D findings, refinement of operational concepts, industry advances, and new industry or regulatory policies or standards related to safety assurance

From Formal Requirements to Highly Assured Software for Unmanned Aircraft Systems

Operational requirements of safety-critical systems are often written in restricted specification logics. These restricted logics are amenable to automated analysis techniques such as model-checking, but are not rich enough to express complex requirements of unmanned systems. This short paper advocates for the use of expressive logics, such as higher-order logic, to specify the complex operational requirements and safety properties of unmanned systems. These rich logics are less amenable to automation and, hence, require the use of interactive theorem proving techniques. However, these logics support the formal verification of complex requirements such as those involving the physical environment. Moreover, these logics enable validation techniques that increase con dence in the correctness of numerically intensive software. These features result in highly-assured software that may be easier to certify. The feasibility of this approach is illustrated with examples drawn for NASA's unmanned aircraft systems

Towards Autonomous Aviation Operations: What Can We Learn from Other Areas of Automation?

Rapid advances in automation has disrupted and transformed several industries in the past 25 years. Automation has evolved from regulation and control of simple systems like controlling the temperature in a room to the autonomous control of complex systems involving network of systems. The reason for automation varies from industry to industry depending on the complexity and benefits resulting from increased levels of automation. Automation may be needed to either reduce costs or deal with hazardous environment or make real-time decisions without the availability of humans. Space autonomy, Internet, robotic vehicles, intelligent systems, wireless networks and power systems provide successful examples of various levels of automation. NASA is conducting research in autonomy and developing plans to increase the levels of automation in aviation operations. This paper provides a brief review of levels of automation, previous efforts to increase levels of automation in aviation operations and current level of automation in the various tasks involved in aviation operations. It develops a methodology to assess the research and development in modeling, sensing and actuation needed to advance the level of automation and the benefits associated with higher levels of automation. Section II describes provides an overview of automation and previous attempts at automation in aviation. Section III provides the role of automation and lessons learned in Space Autonomy. Section IV describes the success of automation in Intelligent Transportation Systems. Section V provides a comparison between the development of automation in other areas and the needs of aviation. Section VI provides an approach to achieve increased automation in aviation operations based on the progress in other areas. The final paper will provide a detailed analysis of the benefits of increased automation for the Traffic Flow Management (TFM) function in aviation operations

Sense and Avoid Characterization of the Independent Configurable Architecture for Reliable Operations of Unmanned Systems

AbstractIndependent Configurable Architecture for Reliable Operations of Unmanned Systems (ICAROUS) is a distributed software architecture developed by NASA Langley Research Center to enable safe autonomous UAS operations. ICAROUS consists of a collection formally verified core algorithms for path planning, traffic avoidance, geofence handling, and decision making that interface with an autopilot system through a publisher-subscriber middleware. The ICAROUS Sense and Avoid Characterization (ISAAC) test was designed to evaluate the performance of the onboard Sense and Avoid (SAA) capability to detect potential conflicts with other aircraft and autonomously maneuver to avoid collisions, while remaining within the airspace boundaries of the mission. The ISAAC tests evaluated the impact of separation distances and alerting times on SAA performance. A preliminary analysis of the effects of each parameter on key measures of performance is conducted, informing the choice of appropriate parameter values for different small Unmanned Aircraft Systems (sUAS) applications. Furthermore, low-power Automatic Dependent Surveillance Broadcast (ADS-B) is evaluated for potential use to enable autonomous sUAS to sUAS deconflictions as well as to provide usable warnings for manned aircraft without saturating the frequency spectrum

A Learning-Based Guidance Selection Mechanism for a Formally Verified Sense and Avoid Algorithm

This paper describes a learning-based strategy for selecting conflict avoidance maneuvers for autonomous unmanned aircraft systems. The selected maneuvers are provided by a formally verified algorithm and they are guaranteed to solve any impending conflict under general assumptions about aircraft dynamics. The decision-making logic that selects the appropriate maneuvers is encoded in a stochastic policy encapsulated as a neural network. The networks parameters are optimized to maximize a reward function. The reward function penalizes loss of separation with other aircraft while rewarding resolutions that result in minimum excursions from the nominal flight plan. This paper provides a description of the technique and presents preliminary simulation results

High resolution spatial variability in spring snowmelt for an Arctic shrub-tundra watershed

Arctic tundra environments are characterized by spatially heterogeneous end-of-winter snow cover because of high winds that erode, transport and deposit snow over the winter. This spatially variable end-of-winter snow cover subsequently influences the spatial and temporal variability of snowmelt and results in a patchy snowcover over the melt period. Documenting changes in both snow cover area (SCA) and snow water equivalent (SWE) during the spring melt is essential for understanding hydrological systems, but the lack of high-resolution SCA and SWE datasets that accurately capture micro-scale changes are not commonly available, and do not exist for the Canadian Arctic. This study applies high-resolution remote sensing measurements of SCA and SWE using a fixed-wing Unmanned Aerial System (UAS) to document snowcover changes over the snowmelt period for an Arctic tundra headwater catchment. Repeat measurements of SWE and SCA were obtained for four dominant land cover types (tundra, short shrub, tall shrub, and topographic drift) to provide observations of spatially distributed snowmelt patterns and basin-wide declines in SWE. High-resolution analysis of snowcover conditions over the melt reveal a strong relationship between land cover type, snow distribution, and snow ablation rates whereby shallow snowpacks found in tundra and short shrub regions feature rapid declines in SWE and SCA and became snow-free approximately 10 days earlier than deeper snowpacks. In contrast, tall shrub patches and topographic drift regions were characterized by large initial SWE values and featured a slow decline in SCA. Analysis of basin-wide declines in SCA and SWE reveal three distinct melt phases characterized by 1) low melt rates across a large area resulting in a minor change in SCA, but a very large decline in SWE with, 2) high melt rates resulting in drastic declines in both SCA and SWE, and 3) low melt rates over a small portion of the basin, resulting in little change to either SCA or SWE. The ability to capture high-resolution spatio-temporal changes to tundra snow cover furthers our understanding of the relative importance of various land cover types on the snowmelt timing and amount of runoff available to the hydrological system during the spring freshet

Unmanned Aerial Systems Research, Development, Education and Training at Embry-Riddle Aeronautical University

With technological breakthroughs in miniaturized aircraft-related components, including but not limited to communications, computer systems and sensors and, state-of-the-art unmanned aerial systems (UAS) have become a reality. This fast growing industry is anticipating and responding to a myriad of societal applications that will provide either new or more cost effective solutions that previous technologies could not, or will replace activities that involved humans in flight with associated risks. Embry-Riddle Aeronautical University has a long history of aviation related research and education, and is heavily engaged in UAS activities. This document provides a summary of these activities. The document is divided into two parts. The first part provides a brief summary of each of the various activities while the second part lists the faculty associated with those activities. Within the first part of this document we have separated the UAS activities into two broad areas: Engineering and Applications. Each of these broad areas is then further broken down into six sub-areas, which are listed in the Table of Contents. The second part lists the faculty, sorted by campus (Daytona Beach---D, Prescott---P and Worldwide--W) associated with the UAS activities. The UAS activities and the corresponding faculty are cross-referenced. We have chosen to provide very short summaries of the UAS activities rather than lengthy descriptions. Should more information be desired, please contact me directly or alternatively visit our research web pages (http://research.erau.edu) and contact the appropriate faculty member directly

The Fire and Smoke Model Evaluation Experiment—A Plan for Integrated, Large Fire–Atmosphere Field Campaigns

The Fire and Smoke Model Evaluation Experiment (FASMEE) is designed to collect integrated observations from large wildland fires and provide evaluation datasets for new models and operational systems. Wildland fire, smoke dispersion, and atmospheric chemistry models have become more sophisticated, and next-generation operational models will require evaluation datasets that are coordinated and comprehensive for their evaluation and advancement. Integrated measurements are required, including ground-based observations of fuels and fire behavior, estimates of fire-emitted heat and emissions fluxes, and observations of near-source micrometeorology, plume properties, smoke dispersion, and atmospheric chemistry. To address these requirements the FASMEE campaign design includes a study plan to guide the suite of required measurements in forested sites representative of many prescribed burning programs in the southeastern United States and increasingly common high-intensity fires in the western United States. Here we provide an overview of the proposed experiment and recommendations for key measurements. The FASMEE study provides a template for additional large-scale experimental campaigns to advance fire science and operational fire and smoke models

Software system safety

Software itself is not hazardous, but since software and hardware share common interfaces there is an opportunity for software to create hazards. Further, these software systems are complex, and proven methods for the design, analysis, and measurement of software safety are not yet available. Some past software failures, future NASA software trends, software engineering methods, and tools and techniques for various software safety analyses are reviewed. Recommendations to NASA are made based on this review

Decision-making for unmanned aerial vehicle operation in icing conditions

With the increased use of unmanned aerial systems (UAS) for civil and commercial applications, there is a strong demand for new regulations and technology that will eventually permit for the integration of UAS in unsegregated airspace. This requires new technology to ensure sufficient safety and a smooth integration process. The absence of a pilot on board a vehicle introduces new problems that do not arise in manned flight. One challenging and safety-critical issue is flight in known icing conditions. Whereas in manned flight, dealing with icing is left to the pilot and his appraisal of the situation at hand; in unmanned flight, this is no longer an option and new solutions are required. To address this, an icing-related decision-making system (IRDMS) is proposed. The system quantifies in-flight icing based on changes in aircraft performance and measurements of environmental properties, and evaluates what the effects on the aircraft are. Based on this, it determines whether the aircraft can proceed, and whether and which available icing protection systems should be activated. In this way, advice on an appropriate response is given to the operator on the ground, to ensure safe continuation of the flight and avoid possible accidents