{"id":{"repo_id":"mit","oai_identifier":"oai:dspace.mit.edu:1721.1/132830"},"canonical_url":"https://search.dev.ndltd.org/etd/mit/oai:dspace.mit.edu:1721.1/132830","repository":{"repo_id":"mit","name":"MIT","base_url":"https://dspace.mit.edu/oai/request"},"display":{"title":"A systemic approach toward scalable, reliable and safe satellite constellations","abstract":"Constellations of hundreds to thousands of satellites are becoming a reality. Nevertheless, the unprecedented scale of these systems is creating new sorts of challenges and risks for the designers and operators, mainly due to the high level of automation required. This study demonstrates how architectural decisions like the constellation topology, type of connectivity, and the level of automation affect the scalability, reliability, and safety of these constellations. A survey of past, current, and planned constellations was conducted to identify key architectural decisions and create representative architectures to analyze using a novel process called Conceptual Architecture Development. These high-level conceptual architectures were refined and analyzed using Systems Theoretic Process Analysis (STPA), and a qualitative assessment and a comparison of the emergent properties were performed. The results suggest that increased automation improves the scalability of the system, mostly when human controllers' responsibilities are shifted from individual satellite management to constellation management. However, increased automation also creates new responsibilities for human controllers and does not necessarily improve the safety and reliability of the system. Human-related causal factors found in lower levels of automation are mostly translated into software-related causal factors in higher levels of automation instead of being eliminated, and new types of hazards arise from the introduction of human-automation interfaces. Moreover, other architectural decisions, such as ground connectivity type, can negatively impact the safety and reliability of the constellation, mostly for slightly automated systems. This study shows that architectural decisions can significantly affect the resulting emergent properties of a system and that there is a tradeoff between automation, safety, and reliability that should not be overlooked. Designers and operators should analyze this tradeoff and the development and operational costs in order to select the best-suited architecture for their constellations based on their expertise, technology strategy, and constellation size.","abstract_html":"Constellations of hundreds to thousands of satellites are becoming a reality. Nevertheless, the unprecedented scale of these systems is creating new sorts of challenges and risks for the designers and operators, mainly due to the high level of automation required. This study demonstrates how architectural decisions like the constellation topology, type of connectivity, and the level of automation affect the scalability, reliability, and safety of these constellations. A survey of past, current, and planned constellations was conducted to identify key architectural decisions and create representative architectures to analyze using a novel process called Conceptual Architecture Development. These high-level conceptual architectures were refined and analyzed using Systems Theoretic Process Analysis (STPA), and a qualitative assessment and a comparison of the emergent properties were performed. The results suggest that increased automation improves the scalability of the system, mostly when human controllers' responsibilities are shifted from individual satellite management to constellation management. However, increased automation also creates new responsibilities for human controllers and does not necessarily improve the safety and reliability of the system. Human-related causal factors found in lower levels of automation are mostly translated into software-related causal factors in higher levels of automation instead of being eliminated, and new types of hazards arise from the introduction of human-automation interfaces. Moreover, other architectural decisions, such as ground connectivity type, can negatively impact the safety and reliability of the constellation, mostly for slightly automated systems. This study shows that architectural decisions can significantly affect the resulting emergent properties of a system and that there is a tradeoff between automation, safety, and reliability that should not be overlooked. Designers and operators should analyze this tradeoff and the development and operational costs in order to select the best-suited architecture for their constellations based on their expertise, technology strategy, and constellation size.","abstract_has_math":false,"creators":["Kharsansky, Alan."],"institution":"Massachusetts Institute of Technology","degree_name":"Master","degree_level":null,"degree_discipline":null,"degree_department":"Massachusetts Institute of Technology. Engineering and Management Program","school":null,"contributors":[],"advisors":["Nancy G. Leveson."],"committee_chairs":[],"committee_members":[],"year":2020,"date_issued":"2020","date_published":"2020","updated_at":"2026-07-22T22:21:34Z","subjects":["Engineering and Management Program.","System Design and Management Program."],"languages":["eng"],"rights":["MIT theses may be protected by copyright. Please reuse MIT thesis content according to the MIT Libraries Permissions Policy, which is available through the URL provided."],"rights_urls":["http://dspace.mit.edu/handle/1721.1/7582"],"identifier_entries":[]},"links":{"outbound_url":"https://hdl.handle.net/1721.1/132830","outbound_label":"Handle","outbound_source":"dc:identifier.uri"},"metadata_groups":[{"id":"people","label":"People","entries":[{"key":"dc:contributor.advisor","label":"Advisor","values":["Nancy G. Leveson."]},{"key":"dc:contributor.department","label":"Department","values":["Massachusetts Institute of Technology. Engineering and Management Program","SysDes"]},{"key":"dc:contributor.other","label":"Dc Contributor Other","values":["Massachusetts Institute of Technology. Engineering and Management Program.","System Design and Management Program."]},{"key":"dc:creator","label":"Author","values":["Kharsansky, Alan."]}]},{"id":"academic_context","label":"Academic Context","entries":[{"key":"dc:date.accessioned","label":"Dc Date Accessioned","values":["2021-10-08T16:48:52Z"]},{"key":"dc:date.available","label":"Dc Date Available","values":["2021-10-08T16:48:52Z"]},{"key":"dc:date.issued","label":"Date","values":["2020"]},{"key":"dc:publisher","label":"Institution","values":["Massachusetts Institute of Technology"]},{"key":"dc:type","label":"Dc Type","values":["Thesis"]},{"key":"thesis:degree_name","label":"Degree Name","values":["Master"]}]},{"id":"subjects_keywords","label":"Subjects and Keywords","entries":[{"key":"dc:subject","label":"Dc Subject","values":["Engineering and Management Program.","System Design and Management Program."]}]},{"id":"language_rights","label":"Language and Rights","entries":[{"key":"dc:language.iso","label":"Language (ISO)","values":["eng"]},{"key":"dc:rights","label":"Dc Rights","values":["MIT theses may be protected by copyright. Please reuse MIT thesis content according to the MIT Libraries Permissions Policy, which is available through the URL provided."]},{"key":"dc:rights.uri","label":"Rights URI","values":["http://dspace.mit.edu/handle/1721.1/7582"]}]},{"id":"identifiers","label":"Identifiers","entries":[{"key":"dc:identifier.uri","label":"Identifier URI","values":["https://hdl.handle.net/1721.1/132830"]}]},{"id":"additional","label":"Additional Metadata","entries":[{"key":"dc:description","label":"Description","values":["Thesis: S.M. in Engineering and Management, Massachusetts Institute of Technology, System Design and Management Program, September, 2020","Cataloged from the official version of thesis.","Includes bibliographical references (pages 109-113)."]},{"key":"dc:description.abstract","label":"Abstract","values":["Constellations of hundreds to thousands of satellites are becoming a reality. Nevertheless, the unprecedented scale of these systems is creating new sorts of challenges and risks for the designers and operators, mainly due to the high level of automation required. This study demonstrates how architectural decisions like the constellation topology, type of connectivity, and the level of automation affect the scalability, reliability, and safety of these constellations. A survey of past, current, and planned constellations was conducted to identify key architectural decisions and create representative architectures to analyze using a novel process called Conceptual Architecture Development. These high-level conceptual architectures were refined and analyzed using Systems Theoretic Process Analysis (STPA), and a qualitative assessment and a comparison of the emergent properties were performed. The results suggest that increased automation improves the scalability of the system, mostly when human controllers' responsibilities are shifted from individual satellite management to constellation management. However, increased automation also creates new responsibilities for human controllers and does not necessarily improve the safety and reliability of the system. Human-related causal factors found in lower levels of automation are mostly translated into software-related causal factors in higher levels of automation instead of being eliminated, and new types of hazards arise from the introduction of human-automation interfaces. Moreover, other architectural decisions, such as ground connectivity type, can negatively impact the safety and reliability of the constellation, mostly for slightly automated systems. This study shows that architectural decisions can significantly affect the resulting emergent properties of a system and that there is a tradeoff between automation, safety, and reliability that should not be overlooked. Designers and operators should analyze this tradeoff and the development and operational costs in order to select the best-suited architecture for their constellations based on their expertise, technology strategy, and constellation size."]},{"key":"dc:description.degree","label":"Dc Description Degree","values":["S.M. in Engineering and Management"]},{"key":"dc:title","label":"Title","values":["A systemic approach toward scalable, reliable and safe satellite constellations"]}]}],"canonical_facts":{"dc:contributor.advisor":["Nancy G. Leveson."],"dc:contributor.department":["Massachusetts Institute of Technology. Engineering and Management Program","SysDes"],"dc:contributor.other":["Massachusetts Institute of Technology. Engineering and Management Program.","System Design and Management Program."],"dc:creator":["Kharsansky, Alan."],"dc:date.accessioned":["2021-10-08T16:48:52Z"],"dc:date.available":["2021-10-08T16:48:52Z"],"dc:date.issued":["2020"],"dc:description":["Thesis: S.M. in Engineering and Management, Massachusetts Institute of Technology, System Design and Management Program, September, 2020","Cataloged from the official version of thesis.","Includes bibliographical references (pages 109-113)."],"dc:description.abstract":["Constellations of hundreds to thousands of satellites are becoming a reality. Nevertheless, the unprecedented scale of these systems is creating new sorts of challenges and risks for the designers and operators, mainly due to the high level of automation required. This study demonstrates how architectural decisions like the constellation topology, type of connectivity, and the level of automation affect the scalability, reliability, and safety of these constellations. A survey of past, current, and planned constellations was conducted to identify key architectural decisions and create representative architectures to analyze using a novel process called Conceptual Architecture Development. These high-level conceptual architectures were refined and analyzed using Systems Theoretic Process Analysis (STPA), and a qualitative assessment and a comparison of the emergent properties were performed. The results suggest that increased automation improves the scalability of the system, mostly when human controllers' responsibilities are shifted from individual satellite management to constellation management. However, increased automation also creates new responsibilities for human controllers and does not necessarily improve the safety and reliability of the system. Human-related causal factors found in lower levels of automation are mostly translated into software-related causal factors in higher levels of automation instead of being eliminated, and new types of hazards arise from the introduction of human-automation interfaces. Moreover, other architectural decisions, such as ground connectivity type, can negatively impact the safety and reliability of the constellation, mostly for slightly automated systems. This study shows that architectural decisions can significantly affect the resulting emergent properties of a system and that there is a tradeoff between automation, safety, and reliability that should not be overlooked. Designers and operators should analyze this tradeoff and the development and operational costs in order to select the best-suited architecture for their constellations based on their expertise, technology strategy, and constellation size."],"dc:description.degree":["S.M. in Engineering and Management"],"dc:identifier.uri":["https://hdl.handle.net/1721.1/132830"],"dc:language.iso":["eng"],"dc:publisher":["Massachusetts Institute of Technology"],"dc:rights":["MIT theses may be protected by copyright. Please reuse MIT thesis content according to the MIT Libraries Permissions Policy, which is available through the URL provided."],"dc:rights.uri":["http://dspace.mit.edu/handle/1721.1/7582"],"dc:subject":["Engineering and Management Program.","System Design and Management Program."],"dc:title":["A systemic approach toward scalable, reliable and safe satellite constellations"],"dc:type":["Thesis"],"thesis:degree_name":["Master"]},"updated_at":"2026-07-22T22:21:34Z"}