The U.S. Air Force says the demonstration of an automated safety system on last week’s Falcon 9 rocket launch will slash and costs and hasten turnarounds between missions from military-operated ranges in Florida and California.
The on-board safety system, relying on Global Positioning System satellite navigation data, replaces decades-old radars and tracking equipment that required military officers to manually send commands to destroy errant boosters, and their human and robot passengers, before they could threaten people and property.
The switch will save millions of dollars in infrastructure costs and allow for more launches from Air Force-run ranges at Cape Canaveral and Vandenberg Air Force Base, officials said.
The Autonomous Flight Safety System, which previously flew in a “shadow” backup mode for several launches, was the prime destruct mechanism for the first time on the Feb. 19 launch of SpaceX’s Falcon 9 rocket from pad 39A at NASA’s Kennedy Space Center.
“Implementing AFSS on future launch operations allows us to increase our flexibility, adaptability and efficiency while providing more launch opportunities and greater public safety without having to add additional people,” said Brig. Gen. Wayne Monteith, commander of the Air Force’s 45th Space Wing, which manages the Eastern Range at Cape Canaveral. “These changes will not only simplify ground support requirements thereby increasing launch on-time probability, but substantially reduce launch costs.”
Like the manual flight termination system used since the dawn of the Space Age, the on-board safety computer tracks the trajectory of the rocket, ensuring it remains within a predefined corridor and meets other parameters.
With the previous safety system, a Mission Flight Control Officer on the ground in Florida or California would issue the command activate pyrotechnic charges on the rocket if it strayed off course. In the case of the automated safety system, the command comes from a computer aboard the rocket.
Gwynne Shotwell, SpaceX’s president and chief operating officer, said Feb. 18 that the on-board destruct trigger “makes our operations here on the range much more streamlined.”
The military is still responsible for other support functions for launches from Florida and California, such as weather monitoring, maritime and airspace patrols, and base security. At launch pad 39A, which lies on Kennedy Space Center property, NASA also supports SpaceX missions.
Other launch facilities operated by SpaceX and United Launch Alliance, which flies Atlas and Delta rockets, are on Air Force property at Cape Canaveral Air Force Station and Vandenberg Air Force Base.
Commercial launches from both coasts are licensed by the Federal Aviation Administration, which regulates the public safety aspects of rocket flights.
“We still need the Air Force, NASA and the FAA to fly, but it does tighten timelines, for sure,” Shotwell said. “I think the turnover to go from a ULA launch to a SpaceX launch, it should be much faster. It will be enormously helpful to getting things done.”
The Autonomous Flight Safety System should also reduce the risk that ground equipment malfunctions will delay launches. ULA and SpaceX launches already rely on GPS satellites instead of ground-based C-band radars for tracking, even for the older manual flight termination system.
“Our role to ensure public safety during launches using this system is unchanged,” said Howard Schindzielorz, the 45th Space Wing’s chief engineer, in an Air Force statement. “Our Flight Termination System requirements still apply for design, test, operational performance and reliability. We still develop the mission rules to provide public safety, but the system works with mission rule data files loaded into the on-board AFSS units. This essentially shifts the workload to the front-end of the launch process.”
Other benefits of the automated safety system include faster response times and improved monitoring as rockets fly downrange, providing over-the-horizon tracking capabilities not limited by line-of-sight tracking from instrumentation at the launch base, the Air Force said in a statement.
The Air Force currently requires several days to reconfigure its ranges between Atlas, Delta and Falcon missions. That turnaround time should be reduced with the introduction of auto-destruct mechanisms, according to Hans Koenigsmann, vice president of flight reliability at SpaceX.
“We have this problem right now where we negotiate dates back and forth, but I think it’s actually going to get better,” Koenigsmann said Feb. 8 at the FAA-sponsored Commercial Space Transportation Conference in Washington. “The reason it’s going to get better is the Autonomous Flight Safety System. It does not need a lot of resources from the range, so the time it takes to reconfigure the resources from a ULA vehicle to a Falcon 9 or some other vehicle, that factor will basically go away.”
While the range is still involved in launch operations, “there is not an antenna pointing at the vehicle, so that in itself, I think, will make our lives easier,” Koenigsmann said. “I could easily imagine that we’ll have two launches on the same day because of that.”
Same-day launches may be years away, but the Air Force said the Eastern Range at Cape Canaveral is aiming to be ready to accommodate as many as 48 launches a year by 2020. That’s around three times the number of annual launches the spaceport has hosted, on average, in recent years.
Cape Canaveral hosted two launches in one day during the Gemini program of the 1960s, but instrumentation constraints have restricted launch rates over the last few decades.
The auto-destruct system should also simplify range safety procedures for rockets returning to land at Cape Canaveral.
SpaceX intends to land two strap-on boosters launched on the company’s huge triple-core Falcon Heavy rocket back in Florida simultaneously. A manual flight termination system could be overwhelmed in such a scenario.
“This changes the expectation for legacy and new entrant companies of the space launch industry to implement AFSS at the earliest possible date,” the Air Force said in a statement.
The Autonomous Flight Safety System could be on crewed flights as soon as next year as commercial companies begin launching astronauts to the International Space Station.
The commercial crew missions will be launched under contract to NASA, which will certify the on-board termination computer for piloted flights if engineers are comfortable the system will not issue an inadvertent destruct command.
“This is the future,” said Bob Cabana, director of NASA’s Kennedy Space Center and a former astronaut. “This is where the range is going. It makes sense to me.”
Cabana, who piloted and commanded four space shuttle missions in the 1990s, joked about the relationship between astronauts and safety officers tasked with ordering the destruction of a failing rocket. The space shuttle had no launch escape rocket, and a termination command would have likely doomed the crew.
“Prior to shuttle launches, we used to go visit the guys that sat on console that would push the button, and show them pictures of our kids and get to know them,” Cabana said.
“But the truth is, with a human in the loop, if you’ve got an envelope that rocket is to remain within as it goes out over the ocean, (as) it is approaching the edge of that envelope, a human may terminate it when the system is actually correcting to get toward the center,” Cabana said. “An automated system, done correctly, it can iterate fast enough that the system sees that the guidance system is taking it back before it’s going to exceed that limit.
“So, in my opinion, if done correctly, an automated system is actually safer (and) more reliable than having a human in the loop,” Cabana said. “We’ve still got some work to do before commercial crew is going to certify that this is the way to go, but this is the future.”
Email the author.
Follow Stephen Clark on Twitter: @StephenClark1.