From left to right, John Elbon, Steven W. Lindsey, Elon Musk, Charlie Preourt and George Sowers.

On October 26, the Committee on Science, Space, and Technology held a hearing to provide aerospace companies and NASA an opportunity to testify about progress being made toward the goal of establishing a commercial capability to fly humans to and from low Earth orbit and the long-term non-Government commercial market for private launch services.

John Elbon, Boeing CCDev spokesman, presenting the Atlas V-CST-100 combination, presented Boeing’s vision on crew safety: “Our spacecraft includes a robust abort system that can carry the crew to safety in the unlikely event there is a problem with the launch vehicle during all phases of ascent,” he said, “The capsule re-enters using an ablative heat shield and parachutes to a landing on a lake bed, cushioned by airbags. These features, in combination, lead to a very reliable system with a minimum of components that need to function properly for crew survivability.”

Also noteworthy Elbon remarks about the sustainability of the program: “There are two significant challenges that remain from Boeing’s perspective and they are programmatic in nature. The first is stable funding. If we are to achieve an operational capability by 201 5, adequate funding levels must be provided over the next 4 years. The second is addressing liability risk associated with the potential for accidents that result damage to property or in death or injury to a crew member or passenger. Although the likelihood of these occurrences is extremely low, the losses would be tragic and the potential monetary consequences could be very high.”

Steven W. Lindsey, Colonel, USAF (ret.) Director, Flight Operations, Sierra Nevada, presented some safety features of the Dream Chaser mini-shuttle spacecraft:

“The Dream Chaser spacecraft has the capability for launch pad abort and intact ascent aborts from any point on its trajectory to hard surface runways. The Dream Chaser spacecraft’s > 1,100 nautical mile cross-range capability is significantly better than the typical capsule cross range. Every-orbit deorbit to runway landing capability exists for emergencies and there is sufficient cross range to accommodate multiple daily Continental U.S. runway landing opportunities. Low 1.5 g entry loads are considerably less than those experienced by capsules during reentry which allows Dream Chaser to have large down-mass capability for g-sensitive science experiments and touchdown shock is far lower than capsule loads which can be as high as 15 g’s for water landing (e.g., Apollo 12 and 15). These reduced loads lessen the possibility that a vehicle will require post-mission repair for re-flight. Runway landings avoid expensive ship-based recovery and salt water exposure.”

The Dream Chaser will also utilize an Atlas V for launch: “We selected the reliable Atlas V launch vehicle specifically for its heritage, demonstrated reliability, ability to human rate, and compatibility with the DC spacecraft. This Nation has launched multi-billion dollar national assets on the Atlas due to its reliability. The Atlas has demonstrated 98 consecutive successes since 1993,” he said.

Elon Musk, SpaceX founder and CEO, was keen to present the success story of the Falcon rocket: “[the ability to innovate] fostered SpaceX’s ability to focus on safe, simple, proven designs that are cost- effective,” he said, “As a result, SpaceX developed the Falcon 9 rocket for a fraction of the cost NASA would have paid under a traditional acquisition model.”

NASA’s internal studies using the NASA-Air Force Cost Model (NAFCOM) concluded that it would have cost NASA $1.7B to $4B to develop the Falcon 9 rocket. By contrast, in partnership with NASA’s COTS program, SpaceX developed the Falcon 9 for approximately $300M.2 It bears noting that the Falcon 9’s development included designing, building and testing SpaceX’s Merlin engine, the first new all- American hydrocarbon engine for an orbital booster in forty years.

The Russian space agency Roscosmos has expressed concern over the safety of a rendezvous and docking of the Dragon capsule with the ISS. “Dragon’s proximity sensors are critical for the ISS approach,” he said in this regards, “[they] have been put through extensive performance testing in open loop and closed loop simulation using flight hardware and software.”

Musk addressed also the Dragon innovative launch escape system: “SpaceX’s crew Dragon includes an integrated LAS, which we believe will yield numerous safety and performance benefits,” he said, “The Dragon’s LAS is carried through orbit and reentry, with the abort systems available for use throughout the time the Dragon is boosted into space.”

The Dragon LAS is a vehicle-integrated, side-mounted engine system selected for its safety, reliability and performance after a system-level analysis conducted by SpaceX. Eight abort engines (known as SuperDracos because they are modified versions of Dragon’s existing Draco thrusters) are located around the periphery of the Dragon service section and fed by hypergolic propellant stored in the spacecraft propellant tanks. SuperDracos will carry the spacecraft away from the booster and are capable of separating the Dragon crew spacecraft from a failing booster while on the pad all the way through nominal on-orbit separation of Dragon from the second stage.

The LAS will be enabled after crew ingress and securing on the pad and will be disabled on orbit after Dragon separation from the second stage. The launch vehicle malfunction detection system for automatic abort will monitor the Falcon 9 and Dragon for engine failures, flight control failure, failure of the booster propellant tank and failure of the booster’s primary structure, among other signatures.

Abort responses will be determined by failure(s) detected and the phase of flight, in order to maximize survivability. For example, a significantly off-nominal change in tank pressure while the vehicle is on the pad may result in an instantaneous high-acceleration abort, while a performance-related failure of the second-stage engine during ascent may result in a delayed abort until ideal entry conditions are met, a pre-abort shutdown of the second-stage engine and a low-acceleration abort profile.

As a final note, Musk presented a comparison between the Falcon 9 and the venerable Russian Soyuz, currently the only vehicle capable to deliver a crew to the ISS:

One of the largest safety distinctions between the Falcon 9 and Dragon system over the Soyuz transport system is the reduction in separation events – failure of separation events is one of the most common events leading to mission failures of space systems. The Soyuz launcher and spacecraft must release four side-mounted booster modules, the second stage, the third stage, the launch escape tower, fairing, propulsion module and habitation module prior to the point where the crew can enter safely in the Soyuz descent module. For the Dragon and Falcon 9, there are only four separation events which must occur prior to the Dragon’s entry: separation of the first stage, second stage, external cargo module or trunk and for a nominal mission separation of the nose fairing.

Charlie Precourt, ATK, presented the Liberty launch system:

Liberty is a simple, inherently safe, two-stage launch vehicle. Its first stage is the five- segment solid rocket booster derived from the Space Shuttle and Constellation programs. The upper stage is the core liquid engine stage used in ESA’s Ariane 5 program. Having both stages based on existing, flying systems dramatically lowers the remaining development costs as there are only minimal changes necessary to integrate the stages to form Liberty. Both stages were designed from inception to NASA’s human-rating requirements (Shuttle, Ares I and the Herrnes Space Plane that was originally envisioned for launch of ESA’s astronauts). This heritage enables unmatched crew safety.

According to Precourt, the design can be completed and result in a full CDR-equivalent launch vehicle in less than one year, provided that two milestones are reached, namely “the validation of design modifications that provide structural attachment of the two stages, and modifications enabling in-flight start of the upper stage” (in the Ariane 5 configuration the Vulcain engine is ground-ignited).

About the launch safety, Precourt said:

“Liberty draws its high safety from a simple design with an absolute minimum number of “moving parts,” which provides the lowest potential loss of crew. The resulting design is more than 10 times safer than shuttle and even safer than the Ares I vehicle projections, due to the use of established stages (Valador Study, April 201 1).The use of the solid rocket first stage also provides a trajectory that enables survivable aborts throughout ascent to orbit, alleviating the black-out zones that are prevalent with full liquid launch vehicles.

Precourt made an interesting remark about how the current NASA acquisition strategy is preventing the creation of interoperable solutions:

The NASA acquisition strategy of soliciting a full end-to-end service for commercial crew tends to stovepipe the design solutions offered, and does not facilitate interoperability. Interoperability is one of the major enablers for commercial success in the launch vehicle business. That is, a launcher should, through use of common interfaces, be able to fly multiple cargos with low recurring integration expense. Similarly, to enable a robust sustainment of the ISS, interoperability between launchers and spacecraft should be encouraged. Common interfaces will be difficult to achieve with an acquisition strategy that seeks offerings of an end- to-end service. As an alternative, NASA could leverage some acquisition aspects of their existing NASA Launch Services (NLS) program, which has the ability to consider more than one launcher for a given payload. This kind of robustness would largely mitigate the potential risk of abandoning ISS as recently was confronted with the Soyuz failure.

Also critical a statement on NASA decision to fund only spacecraft and not launchers for crew transportation (NASA signed an unfunded Space Act Agreement with ATK):

By choosing to fund only spacecraft forthe CCDev-2 portion of the development program, NASA has placed a higher obstacle before the launch vehicle providers. From a human rating and flight safety standpoint, the launcher development is significantly more challenging technically than the spacecraft. This is because the preponderance of risks to the crew during launch, which must be mitigated, emanate from the launch vehicle. The U.S. has not certified a human spaceflight launch vehicle other than the space shuttle in three decades. This is not only an issue for our company, but for all of those involved with commercial crew. Whether one is developing a launch vehicle or a capsule, the entire system must be successful for any one element to succeed. 

George Sowers, United Launch Alliance, noticed how Sierra- Nevada, Blue Origin and Boeing chose the Atlas V as a carrier rocket: ” We and our customers believe the Atlas V is the right launch vehicle to help establish commercial human spaceflight,” he said, “The Atlas program has a record of 98 consecutive successes, best in the world. Today’s Atlas V is the culmination of decades of improvements and lessons learned.”

“A key element of this is the rigorous process of human system certification,” said Sowers about the human rating process of the Atlas V, ” Under a Space Act Agreement with NASA, we are conducting a comprehensive assessment of the Atlas design against NASA’s stringent human certification requirements. This entails a part-by-part, system-by-system review of the design, analysis and test pedigree of the Atlas. We are also performing a detailed analysis of the hazards faced by the crew and their mitigation as well as a Probabilistic Risk Assessment for the launch of crew.”

We are also making excellent progress on the relatively few modifications to the Atlas required to accommodate human launch. These include the development of the emergency detection system (EDS), a health monitoring system that will provide a signal to the spacecraft to abort if a launch vehicle failure is imminent. A prototype of this system was demonstrated last year in our high fidelity systems integration lab, correctly detecting a wide range of potential failures and sending the abort signal in time to ensure a safe abort. We are progressing on the design of the modifications required at the launch pad to accommodate getting crew into and out of the spacecraft. And we’re working with several spacecraft providers on the details to integrate their systems to the Atlas.


The commercial crew program represents a shift in near Earth operations to the private sector, freeing NASA (and NASA’s limited resources) to pursue other human space flight goals, including utilizing the Space Station and setting out on missions of exploration.

Within this new paradigm, NASA will maintain its stringent safety requirements and standards. We have always used contractors to build our space systems. In these programs, we are planning to use an acquisition approach that will allow the contractors more freedom to pursue cost-effectiveness, but still allow NASA the appropriate level of insight and oversight to ensure that the systems will be safe. Developing crew transportation systems to achieve LEO does not require any significant technological breakthroughs which is a key factor in using a unique insight/oversight approach. We will maintain crew safety by way of a crew transportation system certification, and no system will receive this certification until NASA has confidence that our personnel will be safe.

William Gerstenmaier, NASA, made some interesting concluding remarks about how NASA is approaching the new era of commercial crew transportation: “We have always used contractors to build our space systems,” he said, “In these programs, we are planning to use an acquisition approach that will allow the contractors more freedom to pursue cost-effectiveness, but still allow NASA the appropriate level of insight and oversight to ensure that the systems will be safe.”

To implement the lessons learned from Apollo, Challenger, and Columbia relative to the independent oversight of design, test and certification, CCP will map program processes to the Agency’s programmatic guidelines for all NASA spaceflight programs (NASA Procedural Requirements 7120.5, NASA Space Flight Program and Project Management Requirements) while working to minimize bureaucratic hurdles. These processes will include independent review of the commercial providers’ performance of key milestones and major technical risks to crew safety. NASA CTS certification will evaluate and assure that the commercial provider’s CTS design and implementation can safely conduct the required crew transportation mission. NASA CTS certification includes evaluation of design features and capabilities that accommodate human interaction with the CTS to enhance overall safety and mission success. NASA, through our CTS certification process, is fully accountable for the safety of the NASA crew on CCP missions.

Gerstenmaier made also some remarks about coordination with the Federal Aviation Administration (FAA):

The nature of the FAA involvement in NASA’s commercial crew activities will vary through the development and operation of each potential flight system. NASA will establish initial certification and operations requirements for the services it wishes to acquire from commercial providers. NASA will partner with the FAA for the purposes of determining common standards and uniform processes to ensure both public safety and protection of crews and spaceflight participants for the NASA-sponsored missions. NASA and the FAA will work towards minimizing the duplication of requirements, developing a streamlined process and addressing indemnification issues.

Gerstenmaier acknowledged that the companies involved in commercial crew transportation are addressing a number of technical challenges while trying at the same time to keep the program financially sustainable: “in order to mitigate the risk associated with technical challenges, NASA plans to support multiple commercial providers, thereby insulating the Agency in the event a commercial provider cannot complete its development effort.”

You can watch an archived webcast of the hearing in Windows Media Video. 


About the author

Andrea Gini

Facebook Email Website

Andrea Gini is a content strategy consultant specialized in companies of the space sector. He is founder of Space Safety Magazine, where he held the position of Editor-in-Chief until March 2015. Between 2011 and 2013 he worked in the European Space Agency in the Independent Safety Office, which overviews the utilization of the International Space Station. He previously worked as Software Developer, IT Consultant, and trainer of Java-related technologies. Andrea holds a BSc and an MSc in computer science from the University of Milano, a Master in Communication of Science from the International School for Advanced Studies of Trieste and a MSc in Space Studies from the International Space University.