Probabilistic risk analysis of flying the space shuttle with and without fuel turbine discharge temperature redline protection

摘要

An exact mathematical model is presented of the Space Shuttle Main Engine computer voting logic in the presence of High Pressure Fuel Turbine (HPFT) overtemperature events and fuel turbine temperature sensor failures. The model provides estimates of the probability of erroneous engine shutdown and the probability of not detecting a HPFT overtemperature event. Because it is believed that the likelihood of sensor failures and overtemperature events in the HPFT greatly overshadows those in the High Pressure Oxygen Turbine (HPOT), this modeling effort focused on the HPFT. However, because the redline protection logic is the same for both turbines, estimation of the model parameters using relevant HPOT data would provide estimates of the risk of erroneous engine shutdown and an undetected overtemperature event in the HPOT. Because of the complexity of the model, it was necessary to program the solution which thus makes it feasible to accommodate a changing data base. This is considered to be of great interest because of the subjective nature in determining the relevancy of certain failures and the fact that the data base is constantly changing as a result of the frequent engine tests.