Free Republic
Browse · Search
News/Activism
Topics · Post Article

Skip to comments.

NASA seeks clues to onboard computer actions
Computerworld | FEBRUARY 05, 2003 | DAN VERTON

Posted on 02/06/2003 9:45:33 AM PST by Zavien Doombringer

NASA investigators want to know if adjustments made to the position of the space shuttle Columbia during its last minutes by the vehicle's onboard control computers could have played a role in its breakup during re-entry Feb. 1. In a revised timeline of events released Feb. 3, Ron Dittemore, NASA's space shuttle program manager, said that at 8:59 a.m. EST, Columbia's five onboard computer systems began to detect a significant increase in drag on the vehicle's left wing and ordered two of the shuttle's four yaw jets to fire for 1.5 seconds to compensate for the change.

Investigators aren't sure yet whether the adjustments ordered by the computer played a role in the shuttle's breakup. "It was well within the flight control system's capability to handle the [maneuver]," said Dittemore. "But what is becoming interesting to us now is the rate of change."

While Dittemore acknowledged that NASA may never be able to determine the exact root cause of the crash, he said investigators are now studying all of the data from the launch process as well as the shuttle's flight control systems.

The focus on Columbia's flight control systems could be significant. On Feb. 3, Computerworld reported that Columbia and other space shuttles have a history of computer glitches that have been linked to control systems, including left-wing steering controls (see story).

Although officials said it's too early in the investigation to pin the blame for the crash on the control computers, William Readdy, deputy administrator of NASA, said officials are actively searching for any of the shuttle's five onboard computer systems. Although it's unlikely they survived the crash, he said, the computers have "memory resident in them" that could shed light on the status of the shuttle after communications were lost with ground control.

Each computer's memory stores "telemetry of thousands of parameters that affect the flight of the shuttle," Readdy said.

Columbia and other space shuttles have experienced a series of control computer failures during the past two decades, including one that had a direct link to the spacecraft's left-wing control systems. During a March 1996 return flight, NASA officials discovered a computer circuit problem that controlled steering hardware on Columbia's left wing. The computer circuit was responsible for controlling the spacecraft's left rudder, flaps and other critical landing functions.

Speaking at a news conference prior to Columbia's landing in March 1996, NASA spokesman Rob Navius downplayed the seriousness of the computer problem.

"There are three additional paths of data that are up and running in perfect shape, and there's multiple redundancy that would permit a safe landing," he said. Although Columbia landed without incident that time, NASA officials said the failure was significant enough that had it happened earlier in the flight, the agency would likely have ordered the shuttle home early.

The General Accounting Office, the investigative arm of Congress, has also criticized NASA in the past for relying on the same commercial contractors to develop, test and validate the space shuttle software (see story).

However, Donna Shirley, the former manager of NASA's Mars Exploration Program and the team that built the Sojourner Microrover, said there is no evidence yet that flaws in NASA's software-validation program had anything to do with the disaster.


TOPICS: Breaking News; News/Current Events
KEYWORDS:
Navigation: use the links below to view more comments.
first previous 1-20 ... 81-100101-120121-140141-144 next last
To: Dan Day
Greetings Dan Day, FReepers, et al:

Very well said. I'm a programmer, and we've had applications out in the field which suddenly turned up nasty bugs after over a DECADE of proper operation, due to what we jokingly call "the moon is full and it's a tuesday on a leap year" bugs.

This theory interleaves quite logically with some other Shuttle thread comments. Specifically where atmospheric density conditions pushed the edge of Shuttle design parameter limits.

101 posted on 02/06/2003 2:00:08 PM PST by OneLoyalAmerican (It's time to liberate the Iraqi people.)
[ Post Reply | Private Reply | To 92 | View Replies]

To: SauronOfMordor
Unfortunately in the real world, there's sometimes a disasterous difference between "should not" and "does not"

More often in the real world of catastrophic events, computer logic is meaningless when the devices it controls have been destroyed. On a system like the Shuttle, especially after 20+ years of operation, the software is much harder than the devices it acts on. Software doesn't age. It doesn't get brittle or develop stress cracks. Software only gets better with age.

Mach 18 plays hell with mechanics while the software isn't even phased.

Your conjecture that some "low probability" event triggered an over-correction of the controls seems very, very unlikely. The astronauts spend the vast majority of their many years of training time in high-fidelity simulators with a team of engineers throwing every 'low probability' event conceivable at them. If a fatal software glitch were there, it would have been caught years ago.

I'd look first for some fatal mechanical failure as the root cause. It could be from an external event, human error or simply an age or stress related failure.

102 posted on 02/06/2003 2:06:50 PM PST by Ditto
[ Post Reply | Private Reply | To 97 | View Replies]

To: Dan Day; Ditto; SauronOfMordor; wirestripper
Your discussion of software glitches brings to mind an often-overlooked feature of software-implemented PID controllers that occasionally is overlooked in testing. Those familiar with control theory will understand the phenomenon of integrator wind-up. Basically a very large error signal is generated and that causes the integral of E to be even larger. It is absolutely essential that there be some hard-coded feature to limit error correction under these conditions, preferably with backups, like redundant code segments and/or hardware limits. So certainly some desk-checking of the code would be a first step.

People will say, but, gee, those systems had to be checked out, both in simulations and actual tests. Well, sure, as best we can set up test conditions. But say something happened on this re-entry that triggered a portion of the controller that had heretofore gone untested. It could be any minor thing, misalignment on re-entry, a few degrees of trim and yaw not fully corrected, whatever. If those PID limits failed or were never implemented, it doesn't take much to drive the system into saturation and instability.

103 posted on 02/06/2003 2:10:49 PM PST by chimera
[ Post Reply | Private Reply | To 92 | View Replies]

To: chimera
it doesn't take much to drive the system into saturation and instability

Yup, I have seen it many times. It usually resulted in a 99 code and total failure as well as loss of data and program lock up.

104 posted on 02/06/2003 2:15:16 PM PST by Cold Heat
[ Post Reply | Private Reply | To 103 | View Replies]

To: chimera
If that 90 degree yaw occurred at that velocity and altitude, the shuttle would have been immediately torn apart.
105 posted on 02/06/2003 2:33:10 PM PST by Thud
[ Post Reply | Private Reply | To 89 | View Replies]

To: betty boop
Greetings betty boop, FReepers, et al:

(2) the foam hit the structure that mates the shuttle to

Awesome point, given explosives involved with separation of external devices. Judging by the comments of some thread participants, chances are someone intimately understands the explosive bolt wiring harness route.

Ordinarily I would have guessed such a wiring harness is adequately shielded from such an event. However, I recall an anti-lock brake failure on my car, due to road debris striking a wiring harness.

106 posted on 02/06/2003 2:34:33 PM PST by OneLoyalAmerican (It's time to liberate the Iraqi people.)
[ Post Reply | Private Reply | To 100 | View Replies]

To: Thud
If that 90 degree yaw occurred at that velocity and altitude, the shuttle would have been immediately torn apart.

Well, isn't that what happened? At 207,000 feet, the air is still pretty thin. The combination of speed and air density make frictional heating approach maximum load at those altitudes, but aerodynamic buffeting is not as bad as at lower altitudes, where thickening air makes mechanical shock a concern. My guess is that airframe heating combined with kinetic forces (deceleration) caused the initial large-scale breakup (although smaller sections or pieces could have peeled off earlier), with some contribution by whatever aerodynamic stresses were present at that point.

107 posted on 02/06/2003 2:44:46 PM PST by chimera
[ Post Reply | Private Reply | To 105 | View Replies]

To: chimera
But say something happened on this re-entry that triggered a portion of the controller that had heretofore gone untested.

Theoretically possible I'd guess, but I would be looking elsewhere before I'd go there. I too have seen software problems appear that no one had considered before. Never a 'fatal flaw' but stuff that should not have happened. But these are on systems that haven't been exposed to the intensive V&V that NASA uses. Few if any companies have the money, manpower or luxury of time to devote to the intense simulation regime that NASA uses. That software has been through the wringer for 20 years and it just seems that if a fatal flaw were there, it would have been spotted long ago. Mechanical devices on the other hand can test perfectly today and go bad tomorrow.

108 posted on 02/06/2003 3:00:21 PM PST by Ditto
[ Post Reply | Private Reply | To 103 | View Replies]

To: chimera
It's a function of speed and air pressure. The shuttle's broadside is as big as a barn. G forces from deacceleration in a 90 degree yaw at that point would have immediately ripped the wings off, whereupon "air" blast would then have entered the fuselage and torn it apart before any of the newly exposed surfaces had a chance to heat up more than a little.

It is clear that loss of control pre-dated significant burn-through. The big question is what caused the loss of control. Telemetry data to date indicates escalating port drag, which to me says there was some mighty disturbed airflow on that side relative to the other. Some even speculate that the port gear cover came off over California.

109 posted on 02/06/2003 3:03:02 PM PST by Thud
[ Post Reply | Private Reply | To 107 | View Replies]

To: wirestripper
The shuttle was going too fast and was executing, (or trying to execute) the roll program in order to slow down.

This is standard, and designed into the entry trajectory months prior to launch. What you're referring to is "energy management," which is a technique used to match up the trip from the runway to entry interface (400 kft), and the trip from deorbit burn to entry interface.

(They start with a known spot -- the runway -- and work backwards from there.)

110 posted on 02/06/2003 3:06:04 PM PST by r9etb
[ Post Reply | Private Reply | To 10 | View Replies]

To: Thud
Some even speculate that the port gear cover came off over California.

That would be THIS.

111 posted on 02/06/2003 3:18:50 PM PST by Ditto
[ Post Reply | Private Reply | To 109 | View Replies]

To: glock rocks
Although it's unlikely they survived the crash, he said, the computers have "memory resident in them" that could shed light on the status of the shuttle after communications were lost with ground control.

Sounds bogus. Any buffer memory would be RAM, and unreadable by now.

Were shuttle comms in the clear? Were any hams monitoring?

112 posted on 02/06/2003 3:39:07 PM PST by eno_
[ Post Reply | Private Reply | To 35 | View Replies]

To: OneLoyalAmerican
Awesome point, given explosives involved with separation of external devices. Judging by the comments of some thread participants, chances are someone intimately understands the explosive bolt wiring harness route.

LOL, OneLoyalAmerican! I'll be sure to tell my hubby that you endorse his theory of the case!

We'll have to wait for the conclusion of the investigation, and its report. I feel confident that NASA is conducting regression analyses of a variety of different scenarios, as we speak. At the end of the day, I believe we will have the truth of the matter.

Meanwhile, newbie, we're just going to have to be patient, while we wait for the jury to weigh in.

Thanks so much for writing!

113 posted on 02/06/2003 3:52:11 PM PST by betty boop
[ Post Reply | Private Reply | To 106 | View Replies]

To: betty boop
I'll bite on your China theory. I've had similar thoughts. I've wondered whether on not they took it out with a kinetic kill weapon from earth orbit. I believe they have stated that they want to have a military presence in space and may already have a crude device that can run into satelites and damge them or knock them out of orbit. They would see it as payback for Clinton bombing their embassy in Serbia and Wong Wei's crash and burn.
114 posted on 02/06/2003 4:17:01 PM PST by Pres Raygun
[ Post Reply | Private Reply | To 100 | View Replies]

To: eno_
Any buffer memory would be RAM, and unreadable by now.

That would depend on whether the capacitor was still intact on the board. Memory can be maintained for many days.

115 posted on 02/06/2003 4:27:34 PM PST by Cold Heat
[ Post Reply | Private Reply | To 112 | View Replies]

To: r9etb
This is standard,

Yes, I am familiar with it. If the speed were to slow, for example, it would assume a more nose down attitude.

116 posted on 02/06/2003 4:34:04 PM PST by Cold Heat
[ Post Reply | Private Reply | To 110 | View Replies]

To: betty boop
Greetings betty boop, FReepers, et al:

Actually, this Freeper hasn't settled on any one specific theory at this point. While some theories are easily discounted as hopelessly irrelevant; others, like your hubby's strut mount/wheel cover theory, could play a role. Every theory is possible until rationally eliminated.

In January 1986, this newbie was already a former MortonThiokol non-aerospace engineering employee. But more importantly, as a MTI investor, the Challenger incident was close to my heart. Back then interested parties sat around the lunch table, or upon barstools after work, as we brainstormed the Challenger accident. Today, FreeRepublic is an awesome public domain brainstorming forum, bringing untold knowledge and outside the box thinking into the intellectual pool.

The Challenger incident, like most accidents; was not just one specific causation in fact. As we know, the SRB "O-ring" seal failed. However, many seemingly benign events, combined with bad assumptions, and poor risk assessment decisions predisposed the seal failure.

More likely than not, we’ll find the Columbia incident also results from a series of likely, and some perhaps very unlikely events. Each single event on its own merit might not have doomed the mission. However, as combined, compounded and concurrent events, all become key ingredients in a recipe for disaster.

117 posted on 02/06/2003 6:18:11 PM PST by OneLoyalAmerican (This UN charade has gone on long enough. It's time to liberate the Iraqi people.)
[ Post Reply | Private Reply | To 113 | View Replies]

To: betty boop
Well, how’s that for a nutsy scenario! Somebody please – give me a “reality check!!!”

Well betty, now that the loose-foam theory has been denied,
maybe somebody would like to speculate that something went
awfully awry with the Native American piss-paint experiment:

Shuttle Astronauts Experiment with Wee Bit of Art

118 posted on 02/06/2003 6:24:09 PM PST by Willie Green (Go Pat Go!!!)
[ Post Reply | Private Reply | To 100 | View Replies]

To: Ditto
Mechanical devices on the other hand can test perfectly today and go bad tomorrow.

Well, I'm speculating like everyone else. That's probably useless but sometimes it helps to talk things out. Sometimes I like to focus on technical details, otherwise the grief becomes hard to manage.

Anyway, yes, simple hardware failure should be looked at. Given their altitude, it would seem thrusters would be the mode of attitude control. If thruster control was lost or became anomalous for some reason, at those speeds, recovery would be problematic. Armstrong was able to cope with thruster failure in both Gemini 8 and the LLRV but for different reasons. The LLRV accident happened at low altitude and speed, and he had time to react. In Gemini 8 he was in a stable orbit but lost attitude control. Quite dangerous, as others have noted, but he wasn't in the re-entry phase, where being out of control in roll would have had more quickly fatal consequences. I'm wondering how a PID controller would react to a failed-open thruster. My guess is an increasing control signal, which either resulted in integrator wind-up, or failure to damp out the uncommanded movement. In either case, at that point in the flight, it would have been a near-impossible problem to work, most likely.

119 posted on 02/06/2003 6:24:52 PM PST by chimera
[ Post Reply | Private Reply | To 108 | View Replies]

To: Willie Green
Well I guess it's clear what your take is on my humble little scenario. Thanks for cluing me in.
120 posted on 02/06/2003 6:33:40 PM PST by betty boop
[ Post Reply | Private Reply | To 118 | View Replies]


Navigation: use the links below to view more comments.
first previous 1-20 ... 81-100101-120121-140141-144 next last

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
News/Activism
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson