Efficiency of the Columbus Failure Management System

The following paper has the intention to investigate how efficient failures in the Environment Control/Life Support Subsystem as well as for the Thermal Control System were autonomously managed by the vehicle. The evaluation is based on Columbus flight data gained in the last two years of Columbus operation und is performed under three aspects. The first aspect is a classification of all occurred failures (false alarm/confirmed alarm / missed alarm; transient failure / design failure / equipment failures / operator error) to establish a failure data base. This failure categorization allows an assessment of the assumptions made in the design phase versus real time occurrences. The second aspect is related to the efficiency of the implemented monitoring methods. Based on flight data it can be shown how accurate failures were detected. It can be also shown when false alarms were raised or where failures were not detected. The third aspect covers the experience from the space craft operation point of view. The capabilities of the Failure Management System are compared to the operational needs. It will cover the aspects, which have not been considered sufficiently in the C/D design phases.