This SAE EDGE™ Research Report builds a comprehensive picture of the current state-of-the-art of human-robot applications, identifying key issues to unlock the technology’s potential. It brings together views of recognized thought leaders to understand and deconstruct the myths and realities of human- robot collaboration, and how it could eventually have the impact envisaged by many.Current thinking suggests that the emerging technology of human-robot collaboration provides an ideal solution, combining the flexibility and skill of human operators with the precision, repeatability, and reliability of robots. Yet, the topic tends to generate intense reactions ranging from a “brave new future” for aircraft manufacturing and assembly, to workers living in fear of a robot invasion and lost jobs.It is widely acknowledged that the application of robotics and automation in aerospace manufacturing is significantly lower than might be expected. Reasons include product variability, size, design

Webb, Philip, Fletcher, Sarah

Selecting Electrical Safety Relay Modules for Optimal Performance

TBMG-3744308/01/2020

Designers of industrial automated machinery and equipment must follow regulations and standards to ensure they are delivering safe electrical designs; however, there have been cases where uncertainty about the standards has led to overly cautious and costly designs. Or in the worst cases, safety design has been compromised by concerns regarding excessive complexity and cost.

Standard for Refrigerant Risk Analysis for Mobile Air Conditioning Systems

J2773_202005 (Current)

05/15/2020

This SAE Standard describes methods to understand the risks associated with vehicle mobile air conditioning (MAC) systems in all aspects of a vehicle’s lifecycle including design, production, assembly, operation, and end of life. Information for input to the risk assessment is provided in the appendices of this document. This information should not be considered to be complete, but only a reference of some of the data needed for a complete analysis of the risk associated with the use of refrigerants in MAC systems.

Interior Climate Control Vehicle OEM Committee

Unsettled Topics in Unmanned Aerial Vehicle Icing

EPR2020008

04/27/2020

Unmanned aerial vehicles (UAVs) are an emerging technology with a large variety of commercial and military applications. In-flight icing occurs during flight in supercooled clouds or freezing precipitation and is a potential hazard to all aircraft. In-flight icing on UAVs imposes a major limitation on the operational envelope. This report describes the unsettled topics related to UAV icing. First, typical UAV applications and the general hazards of icing are described. Second, an overview of the special technical characteristics of icing on autonomous and unmanned aircraft is given. Third, the operational challenges for flight in icing conditions are discussed. Fourth, technologies for ice protection that mitigate the icing hazard are introduced. Fifth, the tools and methods required to understand UAV icing and to develop aircraft with cold-weather capabilities are presented. Finally, an assessment of the current and future regulations regarding icing on UAVs is provided.Icing is a key

Hann, Richard, Johansen, Tor A.

Human Health Risk Assessment of Space Radiation

2020-01-002003/10/2020

Mars has been the topic of colonization and discovery for the last few decades but there have been hindrances in implementing the mission. This focus on Mars colonization has only deepened after the discovery of water on its surface. The discovery of water on Mars has led researchers to believe that its sustainability of life is higher than any other uncolonized planet. Although, life can survive on Mars, it is highly unethical to send communities to Mars without acknowledging the risks, especially those concerning the well being of humans. The risks of living on Mars are slowly unraveling through extensive research, but it is evident that certain health care measures must be taken in order to prevent potentially fatal conditions. One of the biggest problems is health concerns that astronauts face after returning from Mars. Health problems in space have been increasingly difficult to deal with because of the lasting circumstances that astronauts suffer upon returning back to Earth. As

Rajkumar, Ashmita

How to Protect Patients from Potential Electrical Failure

TBMG-3577701/01/2020

People and power don’t mix well, and this is particularly true when people are medical patients. Aside from the more usual environment of a medical facility, patients are also increasingly using medical devices at home. Medical equipment is therefore heavily regulated by standards-based requirements and subsequent product testing to ensure the safety of patients and healthcare professionals alike.

Safety Assessment of General Aviation Airplanes and Rotorcraft in Commercial Service

ARP5151A (Current)08/20/2019

This document describes a process that may be used to perform the ongoing safety assessment for (1) GAR aircraft and components (hereafter, aircraft), and (2) commercial operators of GAR aircraft. The process described herein is intended to support an overall safety management program. It is to help a company establish and meet its own internal standards. The process described herein identifies a systematic means, but not the only means, to assess continuing airworthiness. Ongoing safety management is an activity dedicated to assuring that risk is identified and properly eliminated or controlled. The safety management process includes both safety assessment and economic decision-making. While economic decision-making (factors related to scheduling, parts, and cost) is an integral part of the safety management process, this document addresses only the ongoing safety assessment process. This ongoing safety assessment process includes safety problem identification and corrective action

S-18C ARP5150A and ARP5151A Working Group

Guarding of Starter System Energization

J1493_201908 (Current)08/08/2019

This SAE Standard describes guarding to help prevent hazardous machine movement caused by activation of the starter motor by bypassing the starter control system. This document is applicable to off-road, self-propelled work machines, as identified in SAE J1116, and agricultural tractors, as defined in ANSI/ASAE S390, which have the potential for hazardous machine movement as a result of bypassing the starter control system and powering of the starter motor.

OPTC1, Personnel Protection (General)

NASA crash landing is a complete success

SAE-MA-0354906/24/2019

The test was conducted to better understand the dynamic forces on an aircraft and its passengers during a crash landing. Findings form the event will support a new FAA performance-based rule that will simplify aircraft certification by eliminating or minimizing the use of special conditions.

Kucinski, William

A Fault Tolerant Time Interval Process for Functional Safety Development

2019-01-011004/02/2019

During development of complex automotive technologies, a significant engineering effort is often dedicated to ensuring the safe performance of these systems. An important aspect to consider when assessing the viability of different safety designs or strategies is the time period from the occurrence of a fault to the violation of a Safety Goal (SG). This time period is commonly referred to as the Fault Tolerant Time Interval (FTTI). In Automotive Safety, ISO 26262 [1] calls for the identification and appropriate partitioning of the FTTI, however very little guidance is provided on how to do this. This paper presents a process, covering the entire safety development lifecycle, for the identification of timing constraints and the development of associated requirements necessary to prevent Safety Goal violations.

Denomme, Daniel, Hooson, Sam, Winkelman, James

Determination of Validation Testing Scenarios for an ADAS Functionality: Case Study

2019-01-013704/02/2019

As the engineering community continues working on automated driving (AD) functionalities, the topic of safety validation still provides fuel for discussions. Despite the vehicles equipped with higher level AD functionalities ready to enter service on public roads, there is still no state-of-the-art process created for safety validation procedures. In this situation, vehicles with similar functionalities may end up coming through fundamentally different validation procedure, and the public may be exposed to additional risks. This paper fist formulates requirements which safety validation process needs to fulfill. The requirements are based on ISO 26262, PAS 21448 (SOTIF), and the state of the art requirements typical for safety applications. Then, the process of implementation of those requirements is sketched.

Kirovskii, Oleg

Risk Analysis of Blockchain Application for Aerospace Records Management

2019-01-134403/19/2019

Blockchain as a technology has been successfully deployed in the financial industry. As the technology continues to mature, there are opportunities to use this to solve operational challenges in Aerospace. One of the common use cases is replacing paper records as a proof of compliance with a blockchain enabled distributed ledger. Commonly available open source blockchain frameworks have security ingrained in the components. However, replacing paper records with a blockchain based distributed ledger will require investigation of potential risks involved in the end to end usage of this technology for records management. The objective of this paper is to elucidate potential risks in an aviation record management workflow environment enabled by blockchain and suggest requirements to mitigate the risks. In addition requirements for Blockchain based systems will be proposed, which will guarantee minimum functional requirements like Protection of confidential information Integrity of the

Kar, Satyanarayan, Kasimsetty, Vinay, Barlow, Susan, Rao, Sujay

Got Your Game Plan? The OEM Playbook to Navigating Preclinical Device Testing Under MDR and ISO 10993-1

TBMG-3373502/01/2019

When the Medical Device Regulation (MDR) replaces the Medical Device Directive (MDD) in 2020, requirements for medical devices in Europe will present greater regulatory hurdles. In addition, ISO 10993-1, created by the International Organization for Standardization (ISO) Committee and mandated by both the FDA and MDR also introduce new requirements for pre-clinical safety device testing. Medical device manufacturers are feverishly working to navigate the changes and develop their preclinical device testing strategies to overcome what's not just a regulatory hurdle, but a business challenge.

Standard Best Practices for System Safety Program Development and Execution

GEIASTD0010A (Current)10/18/2018

This document outlines a standard practice for conducting system safety. In some cases, these principles may be captured in other standards that apply to specific commodities such as commercial aircraft and automobiles. For example, those manufacturers that produce commercial aircraft should use SAE ARP4754 or SAE ARP4761 (see Section 2 below) to meet FAA or other regulatory agency system safety-related requirements. The system safety practice as defined herein provides a consistent means of evaluating identified risks. Mishap risk should be identified, evaluated, and mitigated to a level as low as reasonably practicable. The mishap risk should be accepted by the appropriate authority and comply with federal (and state, where applicable) laws and regulations, executive orders, treaties, and agreements. Program trade studies associated with mitigating mishap risk should consider total life cycle cost in any decision. This document is intended for use as one of the elements of project

G-48 System Safety

Driver Risk Perception Model under Critical Cut-In Scenarios

2018-01-162608/07/2018

In China Cut-in scenarios are quite common on both highway and urban road with heavy traffic. They have a potential risk of rear-end collision. When facing a cutting in vehicle, driver tends to brake in most case to reduce collision risk. The timing and dynamic characteristics of brake maneuver are indicators of driver subjective risk perception. Time to collision (TTC) and Time Headway (THW) demonstrate objective risk. This paper aims at building a model quantitatively revealing the relationship between drivers’ subjective risk perception and objective risk. A total of 66 valid critical Cut-in cases was extracted from China-FOT, which has a travel distance of about 130 thousand miles. It is found that under Cut-in scenarios, driver tended to brake when the cutting in vehicle right crossing line. This time point was defined as initial brake time. Brake strength and brake speed were taken to describe brake maneuver. Average brake pressure (ABP) and acceleration at initial brake time

Ma, Xuehan, Feng, Zhiwei, Zhu, Xichan, Ma, Zhixiong

Automated Flight System Software

TBMG-2890205/01/2018

Kittyhawk San Francisco, CA +1 415-598-7757

EMC Requirements: Pending Changes for the Fourth Edition of IEC 60601-1-2

TBMG-2748309/01/2017

A Suitable Platform for Storm Penetration, Risk Analysis for the SPA-10 Aircraft Modification

2016-01-204309/20/2016

The SPA-10 project, sponsored by U.S. National Science Foundation, is to acquire and qualify a replacement for the retired T-28 “storm penetration” aircraft previously used to acquire meteorological data to enable understanding and modelling of mid-continent thunderstorms. The National Science Foundation selected the Fairchild A-10 (bailed from the U.S. Air Force) as the platform to be adapted to perform the storm penetration mission to altitudes of eleven kilometers, and funded Naval Postgraduate School’s Center for Interdisciplinary Remotely-Piloted Aircraft Studies (CIRPAS) as prime contractor. An expert panel conducted a review of the SPA-10 project in 2014 and recommended a risk analysis addressing hazards to the aircraft and pilots, such as icing, hail, turbulence and lightning. This paper presents the results of the risk analysis performed in response to this need, including recommended mitigations. In general the A-10 aircraft systems and structure were shown to be robust and

Millar, Richard C., Mazzuchi, Thomas, Jonsson, Haflidi

BUMPER-CEV Micrometeoroid and Orbital Debris Risk Assessment Code Rev. A

TBMG-2389502/01/2016

BUMPER-CEV Version 1.71 is used to perform micrometeoroid/orbital debris (MMOD) risk assessments for the Orion Multi-Purpose Crew Vehicle (MPCV) spacecraft. BUMPER is the primary risk analysis program used by NASA to provide for reliable and safe operations of spacecraft exposed to MMOD impacts. When provided with the physical shape and orbital parameters of a spacecraft, and a clear definition of failure, BUMPER calculates the risk of failure from MMOD impacts for all surfaces on a vehicle. Thousands of hypervelocity impact tests have been performed on representative samples of dozens of spacecraft shields and subsystems, thermal protection system (TPS) materials, and other spacecraft components to determine MMOD impact parameters at the failure limits of the various subsystems. The resulting verified ballistic limit equations and damage formulas are coded in BUMPER. Different versions of BUMPER have been created for ISS (International Space Station), Shuttle, and other spacecraft

Furuno Radar/SureTrak Interface Software

TBMG-23258

11/01/2015

The Wallops Flight Facility Launch Range has a need to interface data from ship surveillance Furuno radar to an existing surveillance display system (SureTrak). SureTrak is a multi-sensor waterway and air surveillance system. The display of Furuno radar data by the SureTrak system will be used for risk analysis purposes prior to rocket launches. The capability did not exist within the SureTrak system to ingest data from the Furuno radar. This software application was developed to provide the needed data interface capability within the SureTrak system. In addition to providing a data interface to SureTrak, the software application will also provide a data interface to another software application that performs probability of impact calculations on the ships reported by the Furuno radar.

Using Model-Based Security Engineering in the Development of Complex Aircraft Cabin Systems

2015-01-244509/15/2015

The increasing functionality associated with the rising complexity of aircraft cabin systems which are used by cabin crew, passengers, maintenance staff and other stakeholders, requires a reconsideration of the methods for the development of aircraft cabin systems. This paper deals with a model-based security engineering approach based on the so called Three-V-Model as an appropriate process model, which represents the governing system engineering process (SEP) associated with the safety engineering process (SafEP) and the security engineering process (SecEP). All three processes are pursued concurrently and are interacting reciprocally by working within the same system model on each development level. We describe in detail the involved model-based security engineering activities of the SecEP and the integration of the CORAS risk analysis method in a consistent System Modeling Language (SysML) approach. Finally we demonstrate how the interactions between the SEP and the SecEP with the

Hintze, Hartmut, God, Ralf

MC-based Risk Analysis on the Capacity of Distribution Grids to Charge PEVs on 3-ph 0.4-kV Distribution Grids Considering Time and Location Uncertainties

2015-01-030504/14/2015

The increasing number of Plug-in Electric Vehicles (PEVs) impacts the power grid due to their high demand in power and energy, and uncertainties in the charging behavior. Typical PEVs are charged single-phase up to 32 A (7.2-kVA) or tri-phase up to 32 A (22.0- kVA). Both charging technologies have to be discussed in order to determine their impact on planning and operating of low-voltage distribution grids to assure a reliable and stable PEV charging. Traditional grid planning and analysis methods, which average and evenly distribute PEV loads on the distribution grid, fail in providing a realistic answer about the grid capacity to charge PEVs. The question; How many PEVs can be charged simultaneously on a distribution grid remains unanswered. Therefore, this paper describes a novel methodology to realistically evaluate the grid capacity for PEV charging on 3-phase 0.4-kV distribution grids. The proposed methodology is a modified Monte Carlo (MC) simulation technique, which analyzes

Bohn, Sven, Feustel, Robert, Agsten, Michael

TÜV Urges OEMs to Consider New EMC Requirements

TBMG-2147902/01/2015

The International Electrotechnical Commission, Geneva, Switzerland, introduced the fourth edition of IEC 60601-1-2:2014, the standard specifying electromagnetic compatibility (EMC) requirements and tests for medical equipment and systems. TÜV Rheinland, a leading global certification organization, strongly encourages medical device makers to determine how they will transition to the newest revision, which introduces significant technical changes, including new immunity and risk analysis requirements.

Best-in-Class Technologies for High Performance, Compliant Mobile Medical Devices

TBMG-2132901/01/2015

Portable and wearable healthcare devices represent growing, high volume markets for the medtech industry. Patient monitors are evolving from stationary equipment designed for a hospital bedside to small, lightweight, integrated devices designed to give patients the mobility to remain in their homes and communities while under a physician’s care. Advanced technologies are driving innovations in mobile healthcare delivery—exciting diagnostic and monitoring telehealth and eHealth devices that allow physicians to reach more people more efficiently, even in remote regions of the world. Optimal patient comfort and mobility depends on packaging more features into thinner, smaller devices. Developing reliable devices that perform seamlessly in non-traditional healthcare environments beyond the confines of clinical settings presents unique challenges for medical device designers.

Determining Risks of Nickel in the Heart

TBMG-1915704/01/2014

Materials scientists at the Friedrich Schiller University of Jena, Germany, have examined implants made of nickel-titanium alloy in a long-term study and have determined that the release of nickel from wires made of nickel-titanium alloys is very low. They found that the metal was also safe over longer periods of time.

Tips for Medical Device Tubing Selection

TBMG-19236

03/01/2014

Determining what tubing to use in a medical device involves considerable research. Designers must investigate ingredients, performance, documentation requirements, sterility, and other qualifying aspects that cannot be disregarded.