REG NASA-LLIS-0734--2000 Lessons Learned Instrumentation System Design and Installation for Launch Vehicles.pdf

1、Best Practices Entry: Best Practice Info:a71 Committee Approval Date: 2000-04-03a71 Center Point of Contact: MSFCa71 Submitted by: Wil HarkinsSubject: Instrumentation System Design and Installation for Launch Vehicles Practice: Instrumentation systems and related sensors (transducers), particularly

2、those designed for use in reusable and refurbishable launch systems and subsystems, are analyzed, designed, fabricated and tested with meticulous care in order to ensure system and subsystem reliability.Programs that Certify Usage: This practice has been used on Space Shuttle Main Engine (SSME), Spa

3、ce Shuttle Solid Rocket Booster (SRB), and selected space payloads and experiments.Center to Contact for Information: MSFCImplementation Method: This Lesson Learned is based on Reliability Practice No. PD-ED-1251; from NASA Technical Memorandum 4322A, NASA Reliability Preferred Practices for Design

4、and Test.Benefit:The benefits of implementing these reliability practices for instrumentation system and related sensors are: (1) consistent performance and measurement results, (2) minimum need for continuous or periodic calibration, (3) avoidance of and resistance to contamination, and (4) reduced

5、 necessity for repair or replacement in repeated usage.Provided by IHSNot for ResaleNo reproduction or networking permitted without license from IHS-,-,-Implementation Method:Introduction:Close attention to design details, precision craftsmanship, and an integrated approach to design, manufacturing,

6、 testing, installation, and operations are paramount to sustained accuracy and reliability of performance in launch vehicle and propulsion system instrumentation and related sensors for aerospace applications. Instrumentation systems and their related sensors have reached a high degree of maturity,

7、and preferred practices have evolved in recent years which will ensure high reliability if meticulously followed throughout the life cycle of the instrumentation system.Design Practices:During the preliminary design, critical design review, and initial development phases, the integrated design and c

8、oncurrent engineering processes have proven to be essential in producing instrumentation that will continue to perform reliably in repeated and long term usage. Instrumentation systems should be planned and designed in close connection with and parallel with the design and analysis of the principal

9、systems and subsystems they are intended to monitor, measure, and control. Sensor vendors and suppliers must be an integral part of the design team for effective coordination and communication. Error budget analyses and metrology considerations are considered up front in the design process. Designin

10、g the instrumentation system and its components for contamination-free manufacturability and ease of inspectability is vital. Calibration considerations and compensation methods are developed early in the design process to permit analysis of sensor shift and drift, and to provide a means of predicti

11、ng and adjusting for both anticipated and unanticipated variances from nominal sensor performance. Sensors, connectors, and wiring are designed to avoid the potential of contamination creation or entrapment, damage during removal and refurbishment, misidentification, leakage, solder wire fatigue fai

12、lure, electrical shorts, insulation breakdown, or vibration-induced deterioration.Testing and Verification Practices:Careful analysis of all instrumentation system design requirements and development of comprehensive test and verification plans help ensure that all instrumentation requirements are t

13、horoughly verified in testing. For manned missions, continued testing and retesting of sensors and other components on a sampling basis from each production lot is required to ensure that delivered parts are continuously meeting standards. Experience has shown that careful attention must be given to

14、 any rework processes, and that reworking of lead wire channels should be avoided. Source control drawings are established to ensure that manufactured items conform exactly to those of the qualified parts. Leak checks are performed on all sensor welds.Manufacturing and Assembly Practices:Provided by

15、 IHSNot for ResaleNo reproduction or networking permitted without license from IHS-,-,-Closely controlled manufacturing and routing procedures have proven to be essential in the manufacturing and assembly of sensors as well as the installation and testing of instrumentation systems. Inspection point

16、s are added during pre-assembly or partial assembly steps if inspection would be difficult at later steps in the process. Inspection steps are added prior to any cavity closeout, and prior to the use of coatings, sealants, or potting compounds that could mask contaminants. Potting compounds for conn

17、ector terminals, printed wiring boards, or connector boards are formulated, installed, and inspected to eliminate voids and potential resulting failure in a dynamic vibration environment. Inspection for contamination is conducted following secondary machining operations and prior to the assembly of

18、machined parts. Magnification is specified for all inspection operations during manufacturing and assembly. Handling containers, tooling, and support equipment that will come into close contact with the flight hardware is meticulously cleaned and closely controlled during manufacturing and assembly.

19、Alternate rework procedures are evaluated and acceptance or rejection criteria for these rework procedures are developed. Heat sinks are provided in tooling for electron-beam weld joints. High temperature solder is used to improve strength under elevated temperature environments.Changes to Instrumen

20、tation Systems and Sensors:Changes to instrumentation systems and sensors are subjected to certification through analysis, by similarity, through laboratory verification, and by hot fire testing on the selected launch vehicle, propulsion system, or component. A stress analysis accompanies any change

21、 in configuration to ensure that the resultant component or system is at least as strong, if not stronger, than the original.Resulting improvements in material properties, reduction in weight, and improvement in reliability are verified through analysis. A dynamic evaluation of modified configuratio

22、ns is conducted to identify changes in resonant frequency and load capability. Verification of changes by similarity is based on hot fire experience of sensors or other instrumentation system components with identical features. Laboratory testing to verify changes includes verification of diaphragm

23、burst pressures (pressure sensors, for example), case structure burst pressures, and leak tests. Hot fire verification includes the testing of one sensor in each vibration zone (as in the SSME) and multiple long duration tests in each planned sensor location.General Practices for Instrumentation Sen

24、sors (Transducers) in Long Lifetime, Refurbishable or Reusable Vehicles:Selected pressure and temperature transducers are capable of lifetimes in excess of 10 years. Flow meters have less life capability, but meters without moving parts and operating in an environment of low contamination and corros

25、ion are capable of long life. Humidity, oxygen, and carbon dioxide sensors are life limited, requiring periodic maintenance actions such as cleaning and replacement of cartridges.Provided by IHSNot for ResaleNo reproduction or networking permitted without license from IHS-,-,-A prime problem with tr

26、ansducers is the lack of long-term stability (freedom from drift). One solution to this problem lies in making the total transducer dimensionally stable over long periods of time. Accordingly, it is important to minimize the use of nonmetallic materials and to employ and control processes that yield

27、 parts in a stress free condition. Long term stability (and process control) must then be demonstrated through testing of the assembled transducer under appropriate environmental conditions such as temperature cycling. A second solution is to provide sensitive and pre-calibrated ground-based softwar

28、e that will detect unpredictable sensor drift and adjust the software to compensate for this drift where possible. However, this process can yield an increased uncertainty of the measurement because the instrument, has in effect, been recalibrated through a process that could have less accuracy than

29、 the original calibration standard. If the reference drifts, this uncertainty grows with time. There is more to be gained from correction of unpredictable drift if a cross check can be performed with a statistically significant number of instruments. Cross checks are of great value for determining w

30、hen an instrument has drifted outside the allowable tolerance band. When this occurs, the instrument can be replaced or calibrated as required by corrective maintenance.A well-constructed test program provides the best assurance that a transducer will perform satisfactorily in a long-life applicatio

31、n. Unfortunately, the lead time available from selection of a transducer to commitment of the transducer to service may be only a fraction of the time required for a comprehensive test program. Therefore, transducers should be chosen where such data has already been acquired.Long-life transducer app

32、lications fall into two broad classifications: open-loop and closed-loop. Open-loop applications only provide information regarding the performance of a system. Closed-loop applications involve a control function to regulate a system based upon transducer output. Transducer failures in open-loop app

33、lications result in uncertainty about the condition of the system, while similar failures in closed-loop applications of transducers are more critical from the standpoint of failure effects. They require greater attention to the factors influencing reliability and life.In general, redundancy techniq

34、ues do not provide solutions to transducer problems. Active redundancy cannot provide a solution if a known life limiting mechanism exists in the transducer. Multiple potentiometer wipers, for example, exposed to the same wear, may fail within the same time span. Standby redundancy is generally not

35、feasible.In standby redundancy a non-active transducer is protected from the failure producing condition until the first transducer has failed. Applications involving standby redundancy are severely restricted by size, weight, and the complexity of devices required to switch from the active to the s

36、tandby transducer.Technical Rationale:Each Space Shuttle Solid Rocket Booster (SRB) has 65 measurements during flight to monitor Provided by IHSNot for ResaleNo reproduction or networking permitted without license from IHS-,-,-parameters such as chamber pressure, actuator positions, temperature, and

37、 vibration. In addition to these measurements, there are 142 event measurements that are telemetered back to earth for each SRB. Therefore, for each Space Shuttle flight, the SRB contributes over 400 channels of telemetered data. Each Space Shuttle Main Engine (SSME) contributes 66 more channels of

38、telemetered data, making a total of 466 channels of telemetered data for the reusable propulsion system components of the Space Shuttle.In the Critical Design Review of the SSME pressure sensor, which is only one of the many sensors used in a Space Shuttle flight, fourteen design changes and a numbe

39、r of process changes were identified to reduce contamination and to improve the reliability of this sensor alone. These design and process changes implemented many of the practices described in this document, and a much higher reliability of the resulting modified sensor is expected. The changes inv

40、olved sensor body, wiring, potting materials, manufacturing methods, a slightly revised configuration, increased strength, and improved inspectability.References:1. Solid Rocket Booster Instrumentation Program and Components List, Report No. 16A00103, Marshall Space Flight Center, AL, March 15, 1983

41、.2. SSME Flight Measurement Location Document, Revision D, Rockwell International, Rocketdyne Division, Canoga Park, CA, May 1991.3. Critical Design Review of Eaton SSME Pressure Transducer, Rockwell Aerospace, January 31, 1995.4. Space Station Furnace Facility Metrology Plan, NASA/MSFC Astrionics L

42、aboratory, November 1994.5. “Long Life Assurance Study for Manned Spacecraft Long Life Hardware,“ Report # MCR-72-169, Martin Marietta Corporation, September 1972.Impact of Non-Practice: Failure to adhere to the practices suggested herein could result in contamination entry into sensors, excessive u

43、ncompensated sensor drift, incompatibility of the instrumentation system with other subsystems, failure to meet telemetry requirements, and possible loss of the mission through inadequate diagnostics and inappropriate control or vehicle destruction. At the minimum, expensive delays, replacement and

44、repair may be incurred to achieve successful flight objectives.Related Practices: N/AProvided by IHSNot for ResaleNo reproduction or networking permitted without license from IHS-,-,-Additional Info: Approval Info: a71 Approval Date: 2000-04-03a71 Approval Name: Eric Raynora71 Approval Organization: QSa71 Approval Phone Number: 202-358-4738Provided by IHSNot for ResaleNo reproduction or networking permitted without license from IHS-,-,-