by Roger Wiens
Somehow I felt like I had been here before. In fact, I had—on Genesis. In that case, the rocket had launched with a fatally flawed spacecraft, and we never knew it until the crash in the Utah desert. How did we know that Curiosity wasn’t going all the way to Mars with some fatal flaw? Given the complexity of its landing sequence, a failure was much more likely for Curiosity than it had been for the simple Genesis capsule. And on Mars, there would be no one to pick up the pieces. We might never find out what went wrong.
I realized that my only landing experience—Genesis—had prejudiced me. I was a victim of my own uniquely disastrous experience. It is a strange quirk of our brains. They want to defy logic and rely only on our own experiences, especially if those experiences are painful. It’s irrational. Now I started to understand my skepticism about landing safely on Mars.
In my dreams, everything that could go wrong played itself out at least once. Starting from the top of the list, the capsule could miss the planet. Or it could come in too hard, like the Mars Climate Orbiter had in 1998. Then, too, this would be the first guided entry at the Red Planet. In all the previous Mars landings, the capsule had been set spinning like a top, which produced a more stable configuration as it went through the turbulence of entry. Curiosity would be despun and was to fly through the atmosphere with small jets at the top to help steer it. What if the searing gases dug a small pocket in the shield? That pocket would grow deeper, possibly breaching the shield and then burning away at the thin underbelly of the rover. It was a scenario not unlike that of the Columbia disaster, in which the damage had started from a banged-up thermal tile under the wing.
Next on my list: the parachute could shred. NASA had to use bigger and bigger chutes for the Mars missions, and this was the biggest ever. It would open at supersonic speeds, which is mechanically challenging. I had seen a video of a Curiosity parachute being shredded in a test. Would the improvements made after that test be sufficient? Next, after the parachute was open, the capsule would have to open up and jettison the rover. If it didn’t, the whole contraption would hit the ground almost at the same speed as Genesis. Then there was the retro-rocket package—the “Sky Crane”: What if it became unstable, turned over, and powered itself into the ground? Even more risky was the point at which the Sky Crane was supposed to hover. What if the radar didn’t detect the ground properly, and both rover and Sky Crane whacked the surface together? The rover would never be able to move with that huge beast on its back. The mast would never be raised, and ChemCam would never be usable.
Mostly, my imagination went wild with the cables that were to winch the rover down to the ground. This was supposed to happen when the vehicle was about 60 feet in the air. I could imagine Curiosity swinging wildly back and forth, and the whole thing crashing to the surface. Then there were the wheels. They wouldn’t actually deploy until the rover was being winched down the last few feet. If they didn’t snap all the way into position, we would have a stupid-looking six-wheeled lander that would never go anywhere. Lastly, what if the cables lowering the rover were not successfully cut once Curiosity was on the ground? It would get dragged, probably ending upside down. Even if the rover was right-side up, it would have the Sky Crane fettering it like a ball and chain! And the worst of it was, there were probably a thousand other details that I didn’t even know about that could thwart the mission.
The idea that the whole series of events would come off perfectly seemed rather improbable. In all, seventy-six pyrotechnic devices, mostly bolt or cable cutters, would have to do their job flawlessly. I tried not to think about it much. Life would go on, one way or another.
The operations rehearsals were cathartic for me. These operational readiness tests, or ORTs, were held at JPL beginning three months after launch. They gave the Curiosity team an opportunity to learn everything from how to get the data from the instruments to how to drive the rover and plan each day’s activities. They also covered the landing itself, the commissioning phase for the instruments, use of the rover arm, and other rover activities.
Curiosity was an incredibly complicated machine, and we would have to program all of its activities for a full eight hours of operation every day. Optimizing a robot to do everything on its own, from driving to zapping rocks, was a huge feat. JPL had built a single program called Mars Science Laboratory InterfaCE (MSLICE, pronounced “M-slice”) to plan all of the rover’s activities. For our ChemCam instrument, for example, MSLICE would figure out when we would have to turn on the unit’s heaters and coolers before conducting an analysis. Once a rock was selected, it would determine its position and distance, giving us coordinates so we could shoot at it with the laser. We would also tell it the downlink priority for getting the data back to Earth, and whether to process the data on board or send us raw data. The same MSLICE program would be used to plan the rover drives, the use of all the other instruments, and the motions of the arm.
Operating Curiosity day to day would be a complicated procedure. It would consist of many people working both independently and together to determine what the rover would do each day. Individuals would program their own parts of the day’s activities, then meet with others to formulate a plan that would bring all of these fragments together into a single, coherent master sequence for the day. Lots of juggling would be necessary so that everyone would be able to gather the data they needed. Dozens of people would be involved in the whole process.
The day would start with analyzing the previous day’s data. In particular, each of the people responsible for analyzing the downlinked data would need to ensure that all of the processes had gone well the previous sol and that no anomalies had occurred. Then, in a science assessment meeting, each subsystem downlink lead would report on the health of his or her instrument or system and discuss any interesting new results. Then the long-term planner and the operations lead would assign several groups to build skeleton tasks for the instruments, the mobility system, or the arm for the next sol.
Depending on the specific activity, the groups would select rocks to image or analyze, choose a location to deploy the arm to, or decide where to drive. They would spend a couple of hours working on these plans. Around the middle of the shift, they would deliver the plan fragments, and then a meeting would be held to discuss these and see whether all of the planned activities fit within the power, time, and data-volume constraints. If all of the activities combined took more time than the rover had in the day, or if they took too much power, something would be scrubbed from the plan. Data volume is only critical if confirmation of certain details must be obtained prior to the next sol’s plan, or if the data buffer on the rover ends up too full. Once the plan met the time, power, and data requirements, the fragments would be handed over to a new group of people who would turn the plans into rover command sequences. The sequences would be reviewed in yet another meeting at the end of the long day, this time by people on the second shift, and then the commands would finally be radiated up to Mars.
Each instrument team had downlink leads (people who knew how to retrieve and interpret the new data), uplink leads (those in charge of getting the activities and sequences up to the rover), instrument experts, and scientists. Often, the scientists shadowed the engineers to make sure the science goals were being met. They might, for example, check to make sure the particular rock they wanted to analyze was prioritized.
ChemCam’s whole team now consisted of roughly fifty people, counting scientists and engineers, and all of them needed to be trained. The ORTs were going to be a big deal. There were so many people to be trained that different groups would be scheduled for different ORTs.
The first ORT came in late February 2012. It was preceded by a week of “flight school,” pretraining sessions held over the phone and on computer screens, with the purpose of explaining the daily schedule, the meeting rooms, and the protocol. The February ORT covered the landing and the first several days of the instrument commissioning phase and took place over nine days.
Arriving at JPL at 6:30 A.M. on the morning of the first ORT, I could see the excitement on everyone’s faces. I had not expected this—it was only a practice. The whole team pulled together to give it their very best shot. We imagined that the rover had landed and we were getting the very first stream of data from the Red Planet. The team was mesmerized. Sylvestre and I found that we had to coax people to leave when their shift was over. Many individuals were getting tired as the week wore on, and yet they didn’t want to miss a single minute of the event. I started to realize that human excitement and curiosity were going to be powerful factors in the team dynamic when Curiosity really got to Mars. I had better start planning to work with it.
By day seven, we had tried out the ChemCam laser “on Mars.” Not everything had worked perfectly, but we got useful data. It was a satisfying feeling. Near the end of the nine days, as people started to trickle back to their home institutions, we handed out certificates and took a group picture. Everyone had had their first experience operating Curiosity.
Most of the Los Alamos team members had attended the first ORT, but not being able to use everyone on this first training session, we had left one person, Sam Clegg, behind, assuring him he would be a priority on the next ORT. True to our word, we gave Sam the role of downlink lead on the next ORT, and he took on his role with gusto. He had attended every minute of flight school, read the procedures backward and forward, and made sure the software worked on his laptop before he arrived at JPL. The first day that he had the lead role, he came in looking intense. The data arrived in the repository and he was off to the race, working on transferring the data to his computer and going through the processing steps—subtract the background from the spectrum, filter out the noise, and complete a wavelength calibration.
Partway through the activity, I went over to see how he was doing. He looked dead serious, apparently not noticing my presence. His brow was furrowed and he was working his jaw slightly. His mouth was a straight line. I was worried that he was upset about something. Part of my job as instrument leader was to make sure that morale was high, and seeing Sam in this condition made me slightly worried. Then he noticed I was watching him. He looked at me and every muscle on his face loosened into a big smile. “I’m really having fun doing this, Roger,” he beamed. After that, I didn’t worry about Sam. He was just being intense. Sam, as expected, became our best downlink lead.
The third ORT was completely different from the rest. A team of JPL gremlins was supposed to inject as many faults as they could during the landing sequence to see how the team would react and to test our judgment and skill at off-nominal cases. We were told that we might not get to do much with the instruments, as the focus would be on making sure the spacecraft survived. So we didn’t attend this test in person.
Three days before the ORT was to begin I received an e-mail marked urgent stating that there was a problem with the spacecraft. The message startled me at first, but then I realized that the ORT had begun and this was the first message of the exercise. According to the message, the spacecraft appeared to be accelerating slightly, and the reason was unknown. With the landing supposedly scheduled in about three days, this was very serious. The engineers calculated that the acceleration, equivalent in force to the weight of a tissue on one’s hand, would, over the course of the three days, push the spacecraft 9 kilometers off target, right at the edge of its ability to correct and make it into the landing ellipse.
Over the next few hours, the navigation team determined that the likely cause was a small meteorite hit to a propellant line. The hit had resulted in a pinhole stream of propellant being released, which caused the spacecraft to accelerate ever so slightly. A short time later, we received another message: contact with the spacecraft had been lost briefly, and when it was restored, Curiosity had switched to its backup computer. Things were very wrong—my worst fears were being realized, at least in rehearsal!
We braced ourselves for the landing. Deep down we knew that the craft had to land at least somewhat successfully, because we had the rest of the rehearsal to do. The night of the landing came. Curiosity came wobbling into the Red Planet. The Doppler tone, a continuous radio signal telling us that the craft was alive and giving its speed, was heard all the way down—indicating success. Because Earth would be below the horizon when the real Curiosity landed, the first data would be relayed by a Mars satellite, Odyssey, passing overhead. But when Odyssey was supposed to deliver data to Earth, there was nothing! The second pass, just a couple of hours later, did return some data, but it was only about half of what we were supposed to get. Finally, eight hours later, another satellite pass retrieved our first images, but one of the cameras didn’t seem to be working. The other camera showed much more of the sky than it should have—which meant the rover was resting at a steep angle.
There was another way to see where the rover had supposedly landed. The Mars Reconnaissance Orbiter had a camera of spy-satellite caliber. This camera had actually snapped a picture of the Phoenix lander parachuting to the surface of Mars in 2008. It was going to do the same for Curiosity. However, the image that was supposedly downloaded from the HiRISE, High Resolution Imaging Science Experiment, camera showed the rover parachuting toward a deep crater. The preliminary indication was that the rover was well below the flat plains of Mars. The satellites couldn’t communicate with it except if they were almost directly overhead, where they still had a line of sight to the dug-in rover.
A few other anomalies occurred over the next couple of days, but overall, the team started to get things back to normal. The slope was not so steep so as to imperil the rover, and the instruments were brought to life one by one.
The rehearsal reminded us that we should not expect the operations to be routine. We had a sequence of activities all planned for the first few days after the landing, and we had all the right people scheduled for those days. We now realized that our most important assets might be flexibility and readiness for any challenge.
The ORT also reminded me that there were many other things that could go wrong that I had not even imagined, many of which could end the whole mission. But I would have to battle my fears. We were now about ten weeks away from confronting any real-life problems Curiosity would encounter once it reached Mars and began its dramatic descent.
chapter
twenty-three
LANDING ON MARS
WHEN CURIOSITY WAS SENT ON ITS WAY TO MARS IN November 2011, it used a familiar route known as the Hohmann transfer. The Atlas V second-stage burn directed the spacecraft out of Earth orbit into an elliptical orbit around the Sun. At the inner point of the ellipse, it left Earth orbit. At the outer point, straight across the solar system, it intersected with Mars’ orbit. To figure out when a launch must occur for a spacecraft going to Mars, one must determine when Earth, at the time of launch, will be straight across the solar system from where Mars will be at the time of landing. The two planets fit this half-ellipse configuration for a launch at the end of November 2011 and a landing in early August 2012.
The exact details at the destination must be worked out to match the landing site. In general, the goal is to enter the atmosphere matching the direction of the planet’s rotation, which is counterclockwise when looking “down” from above the planet’s north pole. It is also nice to land during the daytime. Another feature of the Hohmann transfer is that the spacecraft is going relatively slowly at the outer point of the ellipse. Curiosity would arrive near the rendezvous point just ahead of Mars, and Mars’ gravity would then capture the probe. Curiosity’s destination, Gale Crater, was four degrees south of the equator, and the navigators came up with a landing trajectory that trended mostly west to east.
In the past forty years, only one US spacecraft had missed its exact point of rendezvous with the Red Planet. That was the Mars Climate Orbiter (MCO) in 1999, built and operated jointly by Lockheed Martin Astronautics and Jet Propulsion Laboratory. In a calculation that dealt with the trajectory of the orbiter, engineers
at one institution had used English units of measurement, and engineers at the other institution had assumed that metric units were being used. The calculation was to correct for the tiny forces of photons and solar wind affecting the spacecraft. This famous conversion error caused the orbiter to go within about 40 miles (57 km) of the Mars surface, too far down into the atmosphere for its design. The popular version was only half the story, as navigators consistently calculated that the MCO was off its trajectory, but this discrepancy was never reconciled until it was too late. But of NASA spacecraft actually intended for the surface of the Red Planet, none had ever missed its designated landing area.
The designated landing area on the surface of Mars is marked by an ellipse centered on a target point, the radius of which is determined by taking into account the various uncertainties surrounding the entry. These uncertainties include the atmospheric density profile of Mars (which can vary quite significantly because dust lofted into the atmosphere can cause temperature and density changes), wind speeds, and the precise location of the spacecraft relative to Mars when it begins its entry. The landing ellipse simply represents the location within which the spacecraft has a 99 percent probability of landing. It is of course most likely to land near the center of the ellipse if everything is calculated and estimated correctly. With each successive Mars landing the uncertainty—that is, the ellipse size—has been reduced. For Curiosity, the landing ellipse was down to about 12 by 4 miles (20 by 7 km), nestled up as close as possible to the sedimentary mound in the center of Gale.
On the week of the landing, the Curiosity team posted a large image of the landing ellipse on the wall of the sixth floor of JPL’s Building 264, the operations hub. It was referred to as the “dart board.” Team members could mark the spot for their best guess of the actual landing location. There was no money for the winner—simply prestige. About seventy names went on the ellipse, mostly near the center. I waited until the day of the landing, hoping to somehow gain an advantage. Sure enough, with less than twelve hours to go, we were told that a slight residual error from the last trajectory correction maneuver had Curiosity heading about half a kilometer northeast of the target point. I marked my spot.