sábado, 27 de maio de 2017

Case Study: Schiaparelli (EXOMARS lander) failure

EXOMARS is a success (the orbiter is up and running, since 2016) but the experimental lander, failed spectacularly (and the crater where it landed was already located at Mars)... Why was that?
Because of hardware, and also of software:

"The following main weaknesses in the overall process led to the failure of the landing of Schiaparelli:
• Lack of specification and focus on a mission critical parameter from Prime to Supplier. The
persistence of the saturation flag in the application software, became the ultimate cause of the
Schiaparelli landing mishap.
• Lack of rigorous verification approach (including testing of failure/anomaly cases and
recording of closure of requirements).
• Lack of PA/QA rigorousness for acceptance of the unit"

"The following root causes for the mishap have been identified:

- Insufficient uncertainty and configuration management in the modelling of the parachute
dynamics which led to expect much lower dynamics than observed in flight;
- Inadequate persistence time of the IMU saturation flag and inadequate handling of IMU
saturation by the GNC;
- Insufficient approach to Failure Detection, Isolation and Recovery and design robustness;
- Mishap in management of subcontractors and acceptance of hardware."

Source: EXOMARS 2016 - SCHIAPARELLI ANOMALY INQUIRY
More info:
http://exploration.esa.int/mars/59176-exomars-2016-schiaparelli-anomaly-inquiry/
http://www.bbc.com/news/science-environment-40029180


PS. Kudos to A. Santos for pointing this out.