2026-09-21T23:29:04Zhttps://dspace.mit.edu/server/oai/requestoai:dspace.mit.edu:1721.1/1328302025-10-30T17:51:24Zcom_1721.1_7582com_1721.1_7581col_1721.1_131023
Nancy G. Leveson.
Kharsansky, Alan.
Massachusetts Institute of Technology. Engineering and Management Program.
System Design and Management Program.
Massachusetts Institute of Technology. Engineering and Management Program
2021-10-08T16:48:52Z
2021-10-08T16:48:52Z
2020
2020
https://hdl.handle.net/1721.1/132830
1262993361
Thesis: S.M. in Engineering and Management, Massachusetts Institute of Technology, System Design and Management Program, September, 2020
Cataloged from the official version of thesis.
Includes bibliographical references (pages 109-113).
Constellations of hundreds to thousands of satellites are becoming a reality. Nevertheless, the unprecedented scale of these systems is creating new sorts of challenges and risks for the designers and operators, mainly due to the high level of automation required. This study demonstrates how architectural decisions like the constellation topology, type of connectivity, and the level of automation affect the scalability, reliability, and safety of these constellations. A survey of past, current, and planned constellations was conducted to identify key architectural decisions and create representative architectures to analyze using a novel process called Conceptual Architecture Development. These high-level conceptual architectures were refined and analyzed using Systems Theoretic Process Analysis (STPA), and a qualitative assessment and a comparison of the emergent properties were performed. The results suggest that increased automation improves the scalability of the system, mostly when human controllers' responsibilities are shifted from individual satellite management to constellation management. However, increased automation also creates new responsibilities for human controllers and does not necessarily improve the safety and reliability of the system. Human-related causal factors found in lower levels of automation are mostly translated into software-related causal factors in higher levels of automation instead of being eliminated, and new types of hazards arise from the introduction of human-automation interfaces. Moreover, other architectural decisions, such as ground connectivity type, can negatively impact the safety and reliability of the constellation, mostly for slightly automated systems. This study shows that architectural decisions can significantly affect the resulting emergent properties of a system and that there is a tradeoff between automation, safety, and reliability that should not be overlooked. Designers and operators should analyze this tradeoff and the development and operational costs in order to select the best-suited architecture for their constellations based on their expertise, technology strategy, and constellation size.
by Alan Kharsansky.
S.M. in Engineering and Management
S.M.inEngineeringandManagement Massachusetts Institute of Technology, System Design and Management Program
204 pages
eng
Massachusetts Institute of Technology
MIT theses may be protected by copyright. Please reuse MIT thesis content according to the MIT Libraries Permissions Policy, which is available through the URL provided.
http://dspace.mit.edu/handle/1721.1/7582
Engineering and Management Program.
System Design and Management Program.
A systemic approach toward scalable, reliable and safe satellite constellations
Thesis
application/pdf
2021-10-08T16:48:52Z
Publication
Master
SysDes
unknown
unknown
<Publication xmlns="https://www.openaire.eu/cerif-profile/1.1/" id="7673fb51-b9ee-4251-8538-fe8225a0eee3">
<Type xmlns="https://www.openaire.eu/cerif-profile/vocab/COAR_Publication_Types">http://purl.org/coar/resource_type/c_1843</Type>
<Language>eng</Language>
<Title>A systemic approach toward scalable, reliable and safe satellite constellations</Title>
<PublishedIn>
<Publication>
</Publication>
</PublishedIn>
<PublicationDate>2020</PublicationDate>
<Authors>
<Author>
<DisplayName>Kharsansky, Alan.</DisplayName>
<Affiliation>
<OrgUnit>
</OrgUnit>
</Affiliation>
</Author>
</Authors>
<Editors>
</Editors>
<Publishers>
<Publisher>
<DisplayName>Massachusetts Institute of Technology</DisplayName>
<OrgUnit />
</Publisher>
</Publishers>
<License>http://dspace.mit.edu/handle/1721.1/7582</License>
<Keyword>Engineering and Management Program.</Keyword>
<Keyword>System Design and Management Program.</Keyword>
<Abstract>Constellations of hundreds to thousands of satellites are becoming a reality. Nevertheless, the unprecedented scale of these systems is creating new sorts of challenges and risks for the designers and operators, mainly due to the high level of automation required. This study demonstrates how architectural decisions like the constellation topology, type of connectivity, and the level of automation affect the scalability, reliability, and safety of these constellations. A survey of past, current, and planned constellations was conducted to identify key architectural decisions and create representative architectures to analyze using a novel process called Conceptual Architecture Development. These high-level conceptual architectures were refined and analyzed using Systems Theoretic Process Analysis (STPA), and a qualitative assessment and a comparison of the emergent properties were performed. The results suggest that increased automation improves the scalability of the system, mostly when human controllers' responsibilities are shifted from individual satellite management to constellation management. However, increased automation also creates new responsibilities for human controllers and does not necessarily improve the safety and reliability of the system. Human-related causal factors found in lower levels of automation are mostly translated into software-related causal factors in higher levels of automation instead of being eliminated, and new types of hazards arise from the introduction of human-automation interfaces. Moreover, other architectural decisions, such as ground connectivity type, can negatively impact the safety and reliability of the constellation, mostly for slightly automated systems. This study shows that architectural decisions can significantly affect the resulting emergent properties of a system and that there is a tradeoff between automation, safety, and reliability that should not be overlooked. Designers and operators should analyze this tradeoff and the development and operational costs in order to select the best-suited architecture for their constellations based on their expertise, technology strategy, and constellation size.</Abstract>
<Access xmlns="http://purl.org/coar/access_right"
>
</Access>
</Publication>